Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lnoSZUl-KAxHgvChTMMkabDVOZE.roa
File: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (raw, json)
Hash identifier: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=
Subject key identifier: 96:7A:12:65:49:7E:28:0C:47:82:F0:A1:4C:C3:24:69:B0:D5:39:91
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01942521E42ECB6BF40F6F17C9A1E7292FB5
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lnoSZUl-KAxHgvChTMMkabDVOZE.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41164
IP address blocks: 46.212.0.0/17 maxlen: 17
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.214.0/24 maxlen: 24
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:2e:cb:6b:f4:0f:6f:17:c9:a1:e7:29:2f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=967a1265497e280c4782f0a14cc32469b0d53991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:c5:67:75:89:01:4b:1e:44:99:73:3a:5b:
e5:94:34:a3:ad:7c:6c:6f:eb:f6:bb:3d:ab:e4:fb:
08:9b:6b:96:86:54:76:4c:22:03:62:fb:ad:b7:e9:
7f:81:23:88:96:25:77:1f:f5:2b:58:f1:ff:62:b2:
8a:2d:7c:0e:20:2b:ca:04:74:89:8c:e0:36:81:47:
c1:74:6d:81:f2:78:c7:aa:5b:d9:68:c2:30:8d:06:
17:88:31:1c:99:5d:a9:f4:69:f9:87:1e:67:10:e0:
62:1d:ad:bd:34:3e:2d:6a:92:2a:cf:95:a0:1b:b2:
66:7c:ca:db:d6:85:46:1c:e7:59:1c:fc:00:e7:f3:
f9:15:2e:76:9c:77:c7:64:b7:10:09:38:84:ca:2b:
2b:73:74:2b:f2:78:d2:7f:48:76:7d:b2:1c:34:16:
a5:43:43:00:8f:6d:b9:be:b7:8c:80:0e:c2:d6:2b:
26:af:3f:6d:7c:a2:89:32:75:c5:3f:02:9b:cb:96:
b8:93:27:9c:f2:29:62:3b:85:33:46:56:a7:01:50:
96:a7:c6:3f:a8:7d:8c:28:21:18:eb:da:ea:f5:e5:
77:11:f5:59:37:1b:b9:9a:58:6d:80:07:67:ca:17:
e5:a9:e9:3d:e6:6e:10:61:41:36:7b:8c:65:06:4f:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:12:65:49:7E:28:0C:47:82:F0:A1:4C:C3:24:69:B0:D5:39:91
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lnoSZUl-KAxHgvChTMMkabDVOZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.73.252.0/24
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
32:88:ad:91:13:78:96:79:73:1b:d5:d0:2b:29:3d:4a:49:d5:
1b:c9:00:8a:21:93:d2:ad:31:ce:42:08:ce:28:07:2a:ca:eb:
28:49:7a:8e:96:c8:5a:9f:d2:d3:0f:d3:ec:c2:e0:3b:2d:44:
51:6d:31:fc:aa:79:3d:61:fc:d2:e1:12:35:d4:a5:77:48:91:
fb:75:69:fd:a6:60:32:9e:4c:97:dc:96:67:6d:22:3b:85:bd:
3d:af:a9:79:8e:1d:ac:5b:bd:d2:c6:89:6b:f2:85:f4:a2:6b:
a6:d5:e0:af:ce:18:b3:eb:78:81:e6:0a:bd:0a:bc:cf:37:97:
ab:57:a7:a9:ae:58:ac:00:54:fe:5e:51:22:7d:89:fb:79:8d:
f3:7a:31:48:c4:83:8e:bf:58:9a:cf:2d:2a:82:29:47:a1:95:
ed:ef:27:ea:23:00:f0:ee:77:d1:2d:11:84:da:f3:1d:02:29:
7e:6a:5f:d7:c8:b8:2f:e1:cd:7d:c9:58:0d:54:cf:45:1b:75:
9a:0e:97:88:4e:70:55:ca:7a:55:27:cb:ec:fb:54:5a:1d:fb:
74:07:e5:99:61:01:8a:8a:17:3a:4d:7d:9d:87:5a:c3:7a:25:
32:8c:29:84:5d:08:91:11:9e:9a:94:6b:ce:18:b0:aa:dc:2a:
cd:92:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net