Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/9LVEIaMlmJxNlD9z3n5kSDNE07w.roa
File: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (raw, json)
Hash identifier: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=
Subject key identifier: F4:B5:44:21:A3:25:98:9C:4D:94:3F:73:DE:7E:64:48:33:44:D3:BC
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01961EE69CD04B2587F0136C34ED4F8242E7
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/9LVEIaMlmJxNlD9z3n5kSDNE07w.roa
Signing time: Thu 10 Apr 2025 08:52:31 +0000
ROA not before: Thu 10 Apr 2025 08:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61098
IP address blocks: 85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
89.145.160.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
89.145.166.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
92.39.56.0/22 maxlen: 24
92.39.60.0/22 maxlen: 24
138.124.208.0/22 maxlen: 24
138.124.212.0/22 maxlen: 24
138.124.216.0/23 maxlen: 24
138.124.220.0/22 maxlen: 24
151.145.192.0/22 maxlen: 24
159.100.240.0/22 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.248.0/21 maxlen: 24
185.19.28.0/22 maxlen: 24
185.150.8.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.176.0/22 maxlen: 24
194.182.180.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
2a04:c41::/32 maxlen: 48
2a04:c42::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c45::/32 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a07:6cc2:f11::/48 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
2a07:6cc3::/32 maxlen: 48
2a07:6cc3:f11::/48 maxlen: 48
2a07:6cc3:f12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:e6:9c:d0:4b:25:87:f0:13:6c:34:ed:4f:82:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Apr 10 08:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4b54421a325989c4d943f73de7e64483344d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:be:70:d1:79:2a:19:26:86:8a:b7:da:dd:
8e:de:7b:9c:32:d1:ad:f1:9b:e1:a1:e6:49:3b:98:
37:d5:9e:20:1b:ca:2b:2a:45:17:21:b3:73:1b:15:
7f:67:12:fa:dc:5b:b8:39:10:de:0c:75:4d:53:67:
77:10:b1:42:c3:b8:10:c6:a6:14:b6:27:e4:4d:3c:
f0:1b:e0:19:44:74:9c:49:2b:78:39:0a:8d:36:1c:
a6:b1:89:fb:3d:84:db:d8:f4:cd:67:54:c3:ff:cd:
bf:6f:19:46:4d:75:b9:30:d6:af:08:a5:2c:87:88:
b2:33:58:31:aa:e8:2f:5f:a4:51:22:1e:b3:bd:40:
aa:78:61:1d:71:fe:79:ed:45:fd:e9:95:bd:50:03:
39:48:e8:7e:2a:f8:d5:d1:76:c0:46:d9:e1:bb:3c:
2b:60:45:e5:99:99:09:be:4f:8c:28:46:b7:7b:61:
fd:ce:72:35:7e:e9:33:f5:aa:89:e9:6e:2f:f1:28:
a2:08:d2:7c:9f:68:e2:4e:90:33:65:49:ec:e9:49:
17:a7:d7:76:ff:fe:12:04:74:ad:15:61:ec:e7:ea:
23:6a:6f:45:75:10:20:d8:24:8a:d3:13:03:42:94:
4f:89:9d:ba:91:1f:f6:df:c6:ca:a1:02:dd:23:90:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:44:21:A3:25:98:9C:4D:94:3F:73:DE:7E:64:48:33:44:D3:BC
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/9LVEIaMlmJxNlD9z3n5kSDNE07w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
92.39.56.0/21
138.124.208.0-138.124.217.255
138.124.220.0/22
151.145.192.0/22
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc0:70::/47
2a07:6cc1::-2a07:6cc3:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:d4:28:9b:f8:52:4f:6f:ee:fe:a8:bd:1a:58:b0:0b:13:95:
99:04:e1:12:d3:c7:0a:65:e2:5a:b5:15:e1:2b:46:ca:b4:22:
d6:8b:a1:bf:f7:00:74:f8:89:6e:a1:6d:ca:82:64:05:8f:1a:
85:c2:f5:d0:75:40:84:80:1a:01:00:d5:7a:14:87:c7:51:e3:
77:04:7d:d5:eb:b4:a1:3b:ad:d3:8f:09:3a:7a:45:3b:e6:2b:
c3:fc:7d:36:7c:dc:4f:5c:87:c3:30:60:c7:23:32:d3:cb:8d:
b3:65:95:27:da:30:b2:8d:69:83:0b:a9:37:38:c1:1f:fb:77:
0f:2c:ff:0b:92:a4:72:44:82:a9:c7:dd:5a:7c:4d:82:1c:d0:
1f:4a:79:cd:84:55:49:fb:8f:dc:0a:47:71:14:ec:2b:4c:84:
81:bd:95:f7:66:16:0e:1a:c9:0d:c4:92:36:98:a5:c5:14:0e:
b9:28:4f:e3:12:d0:a5:0d:7e:50:99:c6:79:1d:a2:ca:d7:28:
07:35:28:8e:25:a5:4b:4b:61:1a:f3:5c:c1:35:ec:77:7b:7d:
af:f6:04:da:29:ce:e4:ef:33:e4:16:3d:f7:2c:10:2d:81:9c:
c7:0b:d6:15:24:19:27:da:55:4d:33:85:78:5f:3f:fa:62:58:
e2:06:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net