Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/XC5_IHXanKyEQtqSapG74oOlfsk.roa
File: XC5_IHXanKyEQtqSapG74oOlfsk.roa (raw, json)
Hash identifier: 6QAptJczYTkTa4ac/1nerDggXpMWciCFJDGSnNvSP2s=
Subject key identifier: 5C:2E:7F:20:75:DA:9C:AC:84:42:DA:92:6A:91:BB:E2:83:A5:7E:C9
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019589C0D2CBCEB6811FE5ED6DCB948FA872
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/XC5_IHXanKyEQtqSapG74oOlfsk.roa
Signing time: Wed 12 Mar 2025 09:47:50 +0000
ROA not before: Wed 12 Mar 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31363
IP address blocks: 80.90.250.0/24 maxlen: 24
86.62.75.0/24 maxlen: 24
86.62.79.0/24 maxlen: 24
86.62.84.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.94.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.98.0/24 maxlen: 24
86.62.99.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.103.0/24 maxlen: 24
86.62.110.0/24 maxlen: 24
86.62.112.0/24 maxlen: 24
86.62.113.0/24 maxlen: 24
86.62.114.0/24 maxlen: 24
86.62.115.0/24 maxlen: 24
86.62.116.0/24 maxlen: 24
86.62.117.0/24 maxlen: 24
86.62.118.0/24 maxlen: 24
86.62.119.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.54.201.0/24 maxlen: 24
195.54.207.0/24 maxlen: 24
195.54.209.0/24 maxlen: 24
195.54.210.0/24 maxlen: 24
195.54.211.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.144.0/24 maxlen: 24
195.91.145.0/24 maxlen: 24
195.91.146.0/24 maxlen: 24
195.91.147.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.150.0/24 maxlen: 24
195.91.151.0/24 maxlen: 24
195.91.153.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.165.0/24 maxlen: 24
195.91.166.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.178.0/24 maxlen: 24
195.91.179.0/24 maxlen: 24
195.91.180.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.182.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.188.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.192.0/24 maxlen: 24
195.91.195.0/24 maxlen: 24
195.91.196.0/24 maxlen: 24
195.91.197.0/24 maxlen: 24
195.91.204.0/24 maxlen: 24
195.91.207.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.227.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
195.91.252.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:c0:d2:cb:ce:b6:81:1f:e5:ed:6d:cb:94:8f:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Mar 12 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c2e7f2075da9cac8442da926a91bbe283a57ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:4b:9a:5c:ea:49:02:1a:6f:9e:78:48:f1:
4e:6b:50:f7:75:41:95:88:fd:46:53:92:27:8d:82:
d8:9d:e1:f5:91:b7:40:6a:06:96:a6:7e:43:15:bb:
b0:d6:eb:ef:41:21:9c:5f:91:4a:cf:c3:0c:06:2a:
98:7e:74:75:39:50:92:0c:8d:29:0f:4b:bb:9b:f4:
e8:89:6b:d0:01:20:e5:82:77:37:e4:b1:98:6e:fa:
bb:77:04:b7:74:6f:9c:09:89:28:7c:0d:81:2c:e5:
7a:69:fe:33:7d:4b:55:ae:d2:a2:73:ad:62:d4:e2:
92:0d:3d:40:18:8c:60:e7:d0:c9:d1:5f:e6:74:49:
33:9f:90:8f:34:0b:f3:28:77:04:d5:a4:14:be:a8:
8c:8e:65:55:9d:bb:52:8a:28:34:8e:94:f7:71:fd:
d2:ac:4d:0c:04:1c:88:59:46:5e:13:d4:c6:6b:f3:
ea:2b:9d:b1:fa:8c:02:7f:c8:d4:72:3e:43:6e:ba:
10:05:c9:1b:7d:bd:9f:6c:4e:a4:e0:1e:6e:e8:c4:
7c:6f:da:79:e3:7c:96:e6:27:a7:ea:85:d1:61:7c:
bd:30:89:65:a0:1d:98:a0:03:67:e9:59:e7:68:20:
2f:42:20:9f:a4:47:8b:84:7c:8a:48:53:52:71:fb:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:7F:20:75:DA:9C:AC:84:42:DA:92:6A:91:BB:E2:83:A5:7E:C9
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/XC5_IHXanKyEQtqSapG74oOlfsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.250.0/24
86.62.75.0/24
86.62.79.0/24
86.62.84.0/24
86.62.92.0/24
86.62.94.0/24
86.62.96.0/24
86.62.98.0/23
86.62.102.0/23
86.62.110.0/24
86.62.112.0/21
86.62.125.0/24
195.54.201.0/24
195.54.207.0/24
195.54.209.0-195.54.211.255
195.91.133.0/24
195.91.138.0/24
195.91.144.0/21
195.91.153.0/24
195.91.156.0/24
195.91.160.0/24
195.91.165.0-195.91.166.255
195.91.168.0/21
195.91.178.0-195.91.182.255
195.91.184.0/24
195.91.187.0-195.91.188.255
195.91.191.0-195.91.192.255
195.91.195.0-195.91.197.255
195.91.204.0/24
195.91.207.0-195.91.211.255
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.247.255
195.91.252.0/24
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
31:bd:bc:35:12:d6:f8:2f:a4:89:9a:3b:76:9d:d9:de:3f:35:
c9:d2:b0:92:e7:6e:37:b9:29:ed:4e:b7:28:ad:a7:76:29:2e:
e8:22:74:44:57:ee:42:dd:18:43:7d:b1:39:8f:24:04:ab:7c:
10:e8:4f:87:3f:a0:e1:ac:cd:dc:60:2d:23:3c:b1:c8:a4:c4:
1e:a2:6d:3f:cd:43:c3:10:9d:d1:49:a2:53:5d:17:5a:40:97:
21:da:34:d9:2c:60:eb:c2:f6:1f:c3:8d:e8:cf:ce:0b:19:42:
20:b3:21:f4:65:b4:45:3c:cc:b8:10:cb:31:2c:08:6b:27:45:
19:6d:26:18:80:5f:49:da:71:4a:a0:4a:e6:10:fe:e9:ce:98:
e8:e7:79:47:f0:e9:f0:d4:55:9b:bf:0b:8f:ea:23:31:c6:aa:
43:39:19:0b:06:8b:78:b6:23:50:39:7e:9c:26:f1:a5:b4:c0:
c1:39:01:0f:04:9f:7a:db:d8:47:ef:dd:78:aa:83:8f:63:73:
9b:e5:27:35:fd:3a:f6:1e:6d:d5:b7:57:a0:a4:a1:f9:ab:32:
3d:8f:a4:20:c4:ff:fc:c4:1a:1f:2f:fa:aa:83:6d:a8:79:78:
2e:44:6b:fa:3b:42:39:76:52:22:89:03:cb:7c:69:21:b2:b5:
58:a0:4b:8f
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgISAZWJwNLLzraBH+XtbcuUj6hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjUwMzEyMDk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzJlN2YyMDc1ZGE5Y2FjODQ0MmRhOTI2YTkxYmJlMjgzYTU3ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u5LmlzqSQIab554SPFOa1D3dUGV
iP1GU5InjYLYneH1kbdAagaWpn5DFbuw1uvvQSGcX5FKz8MMBiqYfnR1OVCSDI0p
D0u7m/ToiWvQASDlgnc35LGYbvq7dwS3dG+cCYkofA2BLOV6af4zfUtVrtKic61i
1OKSDT1AGIxg59DJ0V/mdEkzn5CPNAvzKHcE1aQUvqiMjmVVnbtSiig0jpT3cf3S
rE0MBByIWUZeE9TGa/PqK52x+owCf8jUcj5DbroQBckbfb2fbE6k4B5u6MR8b9p5
43yW5ien6oXRYXy9MIlloB2YoANn6VnnaCAvQiCfpEeLhHyKSFNScft5qQIDAQAB
o4IDLzCCAyswHQYDVR0OBBYEFFwufyB12pyshELakmqRu+KDpX7JMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvWEM1X0lIWGFuS3lFUXRxU2FwRzc0b09sZnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQwYIKwYBBQUHAQcBAf8EggEyMIIBLjCCARoEAgABMIIB
EgMEAFBa+gMEAFY+SwMEAFY+TwMEAFY+VAMEAFY+XAMEAFY+XgMEAFY+YAMEAVY+
YgMEAVY+ZgMEAFY+bgMEA1Y+cAMEAFY+fQMEAMM2yQMEAMM2zzAMAwQAwzbRAwQC
wzbQAwQAw1uFAwQAw1uKAwQDw1uQAwQAw1uZAwQAw1ucAwQAw1ugMAwDBADDW6UD
BADDW6YDBAPDW6gwDAMEAcNbsgMEAMNbtgMEAMNbuDAMAwQAw1u7AwQAw1u8MAwD
BADDW78DBADDW8AwDAMEAMNbwwMEAcNbxAMEAMNbzDAMAwQAw1vPAwQCw1vQAwQA
w1vVAwQAw1vXMAwDBADDW9kDBAPDW/ADBADDW/wDBAHDW/4wDgQCAAIwCAMGAioC
JpiYMA0GCSqGSIb3DQEBCwUAA4IBAQAxvbw1Etb4L6SJmjt2ndnePzXJ0rCS5243
uSntTrcorad2KS7oInREV+5C3RhDfbE5jyQEq3wQ6E+HP6DhrM3cYC0jPLHIpMQe
om0/zUPDEJ3RSaJTXRdaQJch2jTZLGDrwvYfw43oz84LGUIgsyH0ZbRFPMy4EMsx
LAhrJ0UZbSYYgF9J2nFKoErmEP7pzpjo53lH8Onw1FWbvwuP6iMxxqpDORkLBot4
tiNQOX6cJvGltMDBOQEPBJ9629hH7914qoOPY3Ob5Sc1/Tr2Hm3Vt1egpKH5qzI9
j6QgxP/8xBofL/qqg22oeXguRGv6O0I5dlIiiQPLfGkhsrVYoEuP
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net