Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/j4OaMCsnYmHzHH7wQ3oXmbvCa0M.roa
File: j4OaMCsnYmHzHH7wQ3oXmbvCa0M.roa (raw, json)
Hash identifier: 7UzCu16HaDn4ZYK9ZjSooKvaC8OCGKG8+ZmT7cxyW64=
Subject key identifier: 8F:83:9A:30:2B:27:62:61:F3:1C:7E:F0:43:7A:17:99:BB:C2:6B:43
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 01942747B8351FA3D6203FCFD0DE738AA55D
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/j4OaMCsnYmHzHH7wQ3oXmbvCa0M.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41833
IP address blocks: 46.227.248.0/21 maxlen: 21
46.227.248.0/24 maxlen: 24
46.227.249.0/24 maxlen: 24
46.227.251.0/24 maxlen: 24
46.227.252.0/24 maxlen: 24
46.227.253.0/24 maxlen: 24
46.227.254.0/24 maxlen: 24
46.227.255.0/24 maxlen: 24
89.249.208.0/20 maxlen: 20
89.249.208.0/24 maxlen: 24
89.249.209.0/24 maxlen: 24
89.249.210.0/24 maxlen: 24
89.249.211.0/24 maxlen: 24
89.249.212.0/24 maxlen: 24
89.249.212.0/28 maxlen: 28
89.249.213.0/24 maxlen: 24
89.249.214.0/24 maxlen: 24
89.249.215.0/24 maxlen: 24
89.249.216.0/24 maxlen: 24
89.249.217.0/24 maxlen: 24
89.249.218.0/24 maxlen: 24
89.249.219.0/24 maxlen: 24
89.249.220.0/24 maxlen: 24
89.249.221.0/24 maxlen: 24
89.249.221.80/29 maxlen: 29
89.249.222.0/24 maxlen: 24
89.249.223.0/24 maxlen: 24
93.185.224.0/20 maxlen: 20
93.185.224.0/24 maxlen: 24
93.185.225.0/24 maxlen: 24
93.185.226.0/24 maxlen: 24
93.185.227.0/24 maxlen: 24
93.185.228.0/24 maxlen: 24
93.185.229.0/24 maxlen: 24
93.185.229.0/30 maxlen: 30
93.185.230.0/24 maxlen: 24
93.185.231.0/24 maxlen: 24
93.185.231.0/29 maxlen: 29
93.185.232.0/24 maxlen: 24
93.185.233.0/24 maxlen: 24
93.185.235.0/24 maxlen: 24
93.185.236.0/24 maxlen: 24
93.185.236.136/29 maxlen: 29
93.185.237.0/24 maxlen: 24
93.185.238.0/24 maxlen: 24
93.185.239.0/24 maxlen: 24
95.141.48.0/20 maxlen: 20
95.141.48.0/24 maxlen: 24
95.141.49.0/24 maxlen: 24
95.141.55.0/24 maxlen: 24
95.141.56.0/24 maxlen: 24
95.141.57.0/24 maxlen: 24
95.141.58.0/24 maxlen: 24
95.141.59.0/24 maxlen: 24
95.141.60.0/24 maxlen: 24
95.141.61.0/24 maxlen: 24
95.141.62.0/24 maxlen: 24
95.141.63.0/24 maxlen: 24
141.138.176.0/20 maxlen: 20
141.138.176.0/24 maxlen: 24
141.138.177.0/24 maxlen: 24
141.138.178.0/24 maxlen: 24
141.138.179.0/24 maxlen: 24
141.138.180.0/24 maxlen: 24
141.138.181.0/24 maxlen: 24
141.138.182.0/24 maxlen: 24
141.138.183.0/24 maxlen: 24
141.138.184.0/24 maxlen: 24
141.138.185.0/24 maxlen: 24
141.138.186.0/24 maxlen: 24
141.138.186.96/29 maxlen: 29
141.138.186.144/29 maxlen: 29
141.138.187.0/24 maxlen: 24
141.138.188.0/24 maxlen: 24
141.138.189.0/24 maxlen: 24
141.138.191.0/24 maxlen: 24
185.58.200.0/22 maxlen: 22
185.58.200.0/24 maxlen: 24
185.58.201.0/24 maxlen: 24
185.58.202.0/24 maxlen: 24
2a02:f50::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b8:35:1f:a3:d6:20:3f:cf:d0:de:73:8a:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f839a302b276261f31c7ef0437a1799bbc26b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:86:02:e7:0d:8a:12:7a:a9:98:14:fe:8f:
33:09:cc:07:58:1c:67:3a:40:0a:b6:57:ed:13:9f:
b1:5f:12:c0:38:f9:50:d8:2e:2f:10:51:30:2f:8f:
90:86:67:10:08:50:06:21:9c:7b:9a:50:92:2d:54:
c8:89:60:28:ca:c0:54:c7:c3:80:9c:4c:a3:30:f8:
68:c8:98:fc:5e:d8:1d:40:3a:b6:9a:5f:d1:3d:76:
d5:5f:e0:9a:68:5c:4a:1e:8c:b6:da:43:99:41:22:
d9:4f:a6:17:1b:2e:03:31:dd:d9:ea:51:be:4f:a0:
46:6c:46:63:67:db:8f:93:a0:e7:53:79:82:7b:b1:
ea:00:48:cd:dc:9b:38:de:5e:9f:a6:33:e9:dc:c9:
45:54:f0:3b:c8:70:7f:03:e0:1c:69:c6:93:41:c0:
e2:8b:e6:e0:9c:97:f6:ff:18:a9:df:6f:c0:4d:c2:
ec:d8:15:b1:cf:39:96:80:75:b4:9c:79:4e:d1:7f:
bf:7f:da:c9:4e:93:3b:bc:fe:38:b9:f3:8b:2c:85:
ec:2a:14:9d:69:51:7f:92:e9:8a:f2:f8:a3:92:20:
22:24:00:67:3c:e2:bc:e7:c6:ca:02:af:bb:8e:f4:
2a:83:b0:de:9d:4c:b2:43:eb:ce:45:e9:02:fa:f5:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:9A:30:2B:27:62:61:F3:1C:7E:F0:43:7A:17:99:BB:C2:6B:43
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/j4OaMCsnYmHzHH7wQ3oXmbvCa0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.248.0/21
89.249.208.0/20
93.185.224.0/20
95.141.48.0/20
141.138.176.0/20
185.58.200.0/22
IPv6:
2a02:f50::/32
Signature Algorithm: sha256WithRSAEncryption
bb:bc:2b:25:f2:fe:0d:6e:97:14:32:29:bd:bb:3c:97:1f:7f:
32:61:f6:ea:f8:ff:c9:28:70:51:88:07:7e:5c:a6:88:a1:35:
3f:d5:33:b4:42:e2:fb:e1:b9:ce:f3:87:0d:62:c2:af:9e:5e:
b9:db:29:e0:a8:c0:ce:7e:87:83:ba:48:69:1d:90:bd:cf:9e:
38:d1:a0:9c:30:cb:6c:aa:64:ac:07:a0:5e:fa:54:23:36:ed:
72:2e:57:3d:b0:84:cb:9a:bb:5d:a0:70:cb:9a:39:7e:26:8a:
fd:c3:34:6a:37:3b:2a:5c:f8:94:b6:86:47:3a:de:39:ba:34:
c2:d8:03:a4:1d:23:a1:b4:69:73:2a:2a:6c:3b:01:58:3b:c4:
3e:41:8e:a1:78:0e:57:3e:6a:72:17:4d:d7:cc:67:43:1f:1c:
56:41:86:62:f1:4f:23:c4:95:cf:30:05:42:80:a7:16:8d:cd:
a9:96:9c:af:48:1a:0b:b4:1a:c6:3c:b6:80:0a:41:ad:45:c4:
94:1b:1c:db:7f:33:81:aa:77:56:69:25:f0:8f:f8:91:ef:8b:
58:f9:13:be:47:4c:57:7f:09:31:9b:9f:fa:60:ce:0f:fc:72:
cc:34:4b:8c:e0:ca:14:ea:f1:11:32:ab:a0:72:3c:8d:45:a6:
8d:66:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:15 2025 by rpki-client on console.sobornost.net