Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/mbp15f0zxyh0dCrGSwd4xsonIIo.roa
File: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (raw, json)
Hash identifier: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=
Subject key identifier: 99:BA:75:E5:FD:33:C7:28:74:74:2A:C6:4B:07:78:C6:CA:27:20:8A
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 0194DAF12ED74CD752106D9D6E577EA3B5D5
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/mbp15f0zxyh0dCrGSwd4xsonIIo.roa
Signing time: Thu 06 Feb 2025 11:07:06 +0000
ROA not before: Thu 06 Feb 2025 11:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51173
IP address blocks: 37.203.48.0/24 maxlen: 24
37.203.49.0/24 maxlen: 24
37.203.50.0/24 maxlen: 24
37.203.51.0/24 maxlen: 24
37.203.52.0/24 maxlen: 24
37.203.53.0/24 maxlen: 24
89.106.136.0/24 maxlen: 24
89.106.137.0/24 maxlen: 24
89.106.138.0/24 maxlen: 24
89.106.139.0/24 maxlen: 24
89.106.140.0/24 maxlen: 24
89.106.141.0/24 maxlen: 24
89.106.142.0/24 maxlen: 24
89.106.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f1:2e:d7:4c:d7:52:10:6d:9d:6e:57:7e:a3:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Feb 6 11:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ba75e5fd33c72874742ac64b0778c6ca27208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:a6:8e:5b:aa:a4:20:ab:99:32:ce:73:05:
be:b5:7f:f1:bd:d9:15:e9:db:0d:61:90:84:a2:e5:
4f:ac:b5:c5:e2:8d:fe:89:43:c8:5b:f4:f1:bc:b0:
78:3a:66:c7:b6:78:de:c5:9e:48:d7:ee:c9:d3:d0:
c4:4f:ca:33:63:9d:3a:fd:08:e6:fc:4d:11:36:13:
e8:0b:cc:cb:9d:d4:52:b3:1c:d2:e9:3f:a1:03:04:
33:6d:8a:9c:5e:4d:52:11:c1:be:cf:dd:18:01:b2:
b9:e9:a5:70:4a:94:e6:7d:39:3b:70:85:88:4e:32:
3f:ad:f6:42:54:fd:36:9d:bd:7d:15:08:c6:92:7c:
6e:27:db:8b:ad:49:84:8c:1b:f5:1c:73:c8:db:fb:
ac:23:8d:d6:42:f9:7c:96:29:ff:df:e3:19:15:f5:
c3:a2:62:84:56:c4:83:be:4c:86:b7:af:11:ce:f5:
ab:23:6c:ec:be:ba:90:cf:09:0b:f7:40:2a:4d:e3:
8a:fb:13:e5:dc:c0:f8:de:d3:b1:f3:27:5a:b2:04:
99:26:58:13:40:3b:15:4d:55:6e:e6:56:7c:7d:ce:
b8:0d:c6:78:14:94:79:0d:ac:5b:dd:29:64:a2:b1:
d5:de:15:53:f9:62:43:25:0c:19:e8:82:6d:b6:4b:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:75:E5:FD:33:C7:28:74:74:2A:C6:4B:07:78:C6:CA:27:20:8A
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/mbp15f0zxyh0dCrGSwd4xsonIIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0-37.203.53.255
89.106.136.0/21
Signature Algorithm: sha256WithRSAEncryption
01:c5:2d:4d:87:57:53:da:6a:7a:a1:4f:c5:75:54:16:19:ff:
6e:fb:0e:05:ef:70:aa:80:66:88:33:fc:22:8a:58:89:20:db:
64:e5:b9:43:cb:fd:6f:23:c6:aa:6b:68:23:94:88:87:ba:b5:
20:2d:f2:97:06:41:e9:4b:47:ba:83:d0:ee:c8:8a:f1:64:1d:
8d:bf:01:fe:14:ac:a3:92:0b:bc:80:6c:18:29:99:01:8d:c9:
03:40:b9:b0:19:57:c5:e1:b2:f8:48:5b:be:e1:41:2f:78:10:
4c:45:98:eb:4b:22:e9:49:ae:2b:ff:03:25:a3:8a:2e:5c:89:
24:d1:ce:89:65:63:4c:db:b3:d1:54:01:22:e1:6b:e9:9b:c5:
f7:ef:da:dc:1e:9c:23:92:95:84:f7:52:f5:22:a3:e3:af:9c:
45:72:c9:7c:4d:c8:c2:11:92:a4:a3:90:95:cd:cc:df:73:38:
fa:79:8c:e8:01:89:9c:6b:40:da:51:3b:9d:e6:14:45:ca:d9:
81:86:f9:73:44:6e:a6:95:67:c6:64:df:ce:2e:ba:5e:8d:36:
ff:f4:5a:85:f6:23:1e:83:44:0d:24:2e:26:02:12:ce:30:cd:
38:e5:7a:14:24:08:3b:6a:5f:60:34:e2:f4:75:80:e3:ac:4b:
59:63:07:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net