Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/mBN5djsvu4aKFoP1NfkcFdILyzQ.roa
File: mBN5djsvu4aKFoP1NfkcFdILyzQ.roa (raw, json)
Hash identifier: R/SQptBt4dcriAROpMzh2+LYSnO01U65V4vts9rIPCg=
Subject key identifier: 98:13:79:76:3B:2F:BB:86:8A:16:83:F5:35:F9:1C:15:D2:0B:CB:34
Certificate issuer: /CN=298b166ece49fa939476efa22c8d9248f9edc833
Certificate serial: 01879F229A15C0CA598AF9A8DC2B77B0D85E
Authority key identifier: 29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/mBN5djsvu4aKFoP1NfkcFdILyzQ.roa
Signing time: Thu 20 Apr 2023 14:47:37 +0000
ROA not before: Thu 20 Apr 2023 14:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199739
IP address blocks: 37.237.0.0/21 maxlen: 21
37.237.0.0/20 maxlen: 20
37.237.2.0/23 maxlen: 23
37.237.2.0/24 maxlen: 24
37.237.1.0/24 maxlen: 24
37.237.4.0/24 maxlen: 24
37.237.0.0/22 maxlen: 22
37.237.0.0/23 maxlen: 23
37.237.0.0/24 maxlen: 24
37.237.4.0/22 maxlen: 22
37.237.3.0/24 maxlen: 24
37.237.4.0/23 maxlen: 23
37.237.6.0/24 maxlen: 24
37.237.7.0/24 maxlen: 24
37.237.6.0/23 maxlen: 23
37.237.11.0/24 maxlen: 24
37.237.5.0/24 maxlen: 24
37.237.10.0/23 maxlen: 23
37.237.10.0/24 maxlen: 24
37.237.8.0/21 maxlen: 21
37.237.9.0/24 maxlen: 24
37.237.8.0/24 maxlen: 24
37.237.8.0/22 maxlen: 22
37.237.8.0/23 maxlen: 23
37.237.12.0/22 maxlen: 22
37.237.16.0/21 maxlen: 21
37.237.12.0/23 maxlen: 23
37.237.16.0/23 maxlen: 23
37.237.16.0/24 maxlen: 24
37.237.13.0/24 maxlen: 24
37.237.14.0/23 maxlen: 23
37.237.14.0/24 maxlen: 24
37.237.12.0/24 maxlen: 24
37.237.17.0/24 maxlen: 24
37.237.15.0/24 maxlen: 24
37.237.16.0/22 maxlen: 22
37.237.18.0/24 maxlen: 24
37.237.18.0/23 maxlen: 23
37.237.23.0/24 maxlen: 24
37.237.19.0/24 maxlen: 24
37.237.22.0/23 maxlen: 23
37.237.22.0/24 maxlen: 24
37.237.21.0/24 maxlen: 24
37.237.20.0/22 maxlen: 22
37.237.20.0/23 maxlen: 23
37.237.20.0/24 maxlen: 24
2a03:4b47:704::/46 maxlen: 46
2a03:4b47:784::/46 maxlen: 46
2a03:4b47:ffff:400::/56 maxlen: 56
2a03:4b47:798::/46 maxlen: 46
2a03:4b47:718::/46 maxlen: 46
2a03:4b47:72c::/46 maxlen: 46
2a03:4b47:740::/46 maxlen: 46
2a03:4b47:200::/41 maxlen: 41
2a03:4b47:280::/41 maxlen: 41
2a03:4b47:754::/46 maxlen: 46
2a03:4b47:ffff:200::/56 maxlen: 56
2a03:4b47:768::/46 maxlen: 46
2a03:4b47:fffe::/48 maxlen: 48
2a03:4b47:77c::/46 maxlen: 46
2a03:4b47:710::/46 maxlen: 46
2a03:4b47:790::/46 maxlen: 46
2a03:4b47:ffff::/56 maxlen: 56
2a03:4b47:764::/46 maxlen: 46
2a03:4b47:778::/46 maxlen: 46
2a03:4b47:78c::/46 maxlen: 46
2a03:4b47:70c::/46 maxlen: 46
2a03:4b47:720::/46 maxlen: 46
2a03:4b47:440::/42 maxlen: 42
2a03:4b47:540::/42 maxlen: 42
2a03:4b47:3c0::/42 maxlen: 42
2a03:4b47:4c0::/42 maxlen: 42
2a03:4b47:5c0::/42 maxlen: 42
2a03:4b47:340::/42 maxlen: 42
2a03:4b47:734::/46 maxlen: 46
2a03:4b47:748::/46 maxlen: 46
2a03:4b47:75c::/46 maxlen: 46
2a03:4b47:770::/46 maxlen: 46
2a03:4b47:744::/46 maxlen: 46
2a03:4b47:ffff::/48 maxlen: 48
2a03:4b47:758::/46 maxlen: 46
2a03:4b47:76c::/46 maxlen: 46
2a03:4b47:ffff:300::/56 maxlen: 56
2a03:4b47:700::/46 maxlen: 46
2a03:4b47:780::/46 maxlen: 46
2a03:4b47::/32 maxlen: 32
2a03:4b47::/40 maxlen: 40
2a03:4b47:600::/40 maxlen: 40
2a03:4b47:100::/40 maxlen: 40
2a03:4b47::/37 maxlen: 37
2a03:4b47:714::/46 maxlen: 46
2a03:4b47:794::/46 maxlen: 46
2a03:4b47:728::/46 maxlen: 46
2a03:4b47:73c::/46 maxlen: 46
2a03:4b47:ffff:100::/56 maxlen: 56
2a03:4b47:750::/46 maxlen: 46
2a03:4b47:724::/46 maxlen: 46
2a03:4b47:738::/46 maxlen: 46
2a03:4b47:74c::/46 maxlen: 46
2a03:4b47:760::/46 maxlen: 46
2a03:4b47:300::/42 maxlen: 42
2a03:4b47:580::/42 maxlen: 42
2a03:4b47:380::/42 maxlen: 42
2a03:4b47:680::/42 maxlen: 42
2a03:4b47:400::/42 maxlen: 42
2a03:4b47:500::/42 maxlen: 42
2a03:4b47:480::/42 maxlen: 42
2a03:4b47:774::/46 maxlen: 46
2a03:4b47:788::/46 maxlen: 46
2a03:4b47:708::/46 maxlen: 46
2a03:4b47:71c::/46 maxlen: 46
2a03:4b47:730::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:22:9a:15:c0:ca:59:8a:f9:a8:dc:2b:77:b0:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298b166ece49fa939476efa22c8d9248f9edc833
Validity
Not Before: Apr 20 14:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=981379763b2fbb868a1683f535f91c15d20bcb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:37:25:1a:39:b6:e4:cb:64:b5:2f:27:f9:2b:
6f:ee:f6:5c:a9:f4:48:24:c3:3a:4e:6b:a4:58:eb:
09:db:42:c3:0e:b8:33:64:67:e5:e2:01:09:83:72:
24:16:5b:d6:47:a2:ff:13:71:66:13:d5:0c:4b:1f:
8f:89:15:ba:c2:59:25:8b:8d:c1:58:2f:b6:43:3d:
b4:1e:83:be:02:7a:1b:d5:0e:c2:76:1a:f4:e9:18:
5a:a2:03:f4:98:16:e6:98:b4:d9:25:77:6f:c5:dd:
b2:41:6f:63:c9:0a:51:69:71:c9:b5:62:19:30:6e:
dc:11:61:55:0e:7c:96:4d:f4:ae:a1:24:e3:8d:b4:
a9:88:49:49:93:6f:f2:15:4b:1f:1e:01:2e:d3:e1:
da:6d:e8:13:5e:6c:cf:93:83:ab:d1:e7:a0:a1:7f:
3c:69:ef:eb:92:f6:da:9d:18:9a:4b:73:da:22:93:
31:b0:b5:93:3c:90:20:34:83:2d:ee:ac:85:e1:6e:
d0:96:44:dc:73:8e:76:ec:de:80:43:48:25:89:c4:
c2:c2:de:90:5f:1f:52:cd:02:45:c1:ed:bc:21:04:
16:d1:e3:80:2b:de:c6:0c:e1:56:45:7d:82:ef:71:
e3:9e:45:11:cb:7f:bd:58:40:09:8d:e3:c6:62:57:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:79:76:3B:2F:BB:86:8A:16:83:F5:35:F9:1C:15:D2:0B:CB:34
X509v3 Authority Key Identifier:
keyid:29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/mBN5djsvu4aKFoP1NfkcFdILyzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.237.0.0-37.237.23.255
IPv6:
2a03:4b47::/32
Signature Algorithm: sha256WithRSAEncryption
54:46:98:c5:d0:f3:c7:3b:ff:78:40:88:cd:3c:b5:79:53:09:
4f:55:20:cf:23:cc:96:09:0a:7a:b2:3d:5e:91:b4:35:27:ab:
86:cc:b7:c5:95:11:02:04:23:b6:fd:26:91:35:cd:85:45:03:
42:b2:65:87:72:65:26:62:03:91:eb:2e:a8:8d:68:12:34:e8:
92:90:86:65:b4:8f:d9:a9:67:2c:f5:42:0c:85:ef:5e:89:2c:
a4:7c:48:5f:94:2c:93:66:5d:0f:d3:e7:00:3c:39:02:ad:83:
20:e3:a8:ce:28:0b:37:97:0a:ab:05:22:07:25:02:91:eb:8b:
62:ed:1f:ed:b5:92:cc:fb:37:6f:e0:98:1e:64:be:a4:e4:86:
35:3a:21:49:33:90:dc:9d:ac:4e:e0:f7:c5:49:56:20:bf:e5:
3e:cc:e4:d5:a5:f2:22:a7:85:16:e1:ed:45:cd:c3:08:9c:3f:
98:90:72:11:b6:75:93:09:3b:de:d0:c7:28:12:7b:03:a6:18:
70:a3:31:94:9e:2c:d8:98:b5:18:9c:7b:41:b3:1c:b3:4d:a4:
4a:0c:64:01:4b:1d:63:ee:aa:15:76:44:8b:29:fb:bf:46:65:
41:52:e5:d7:f0:a5:a4:a3:1e:74:1a:b5:9a:89:18:db:30:db:
f7:c1:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:44 2024 by rpki-client on console-fra.rpki-client.org