Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/k9ah_Ovl3IOZtER7QHIJfGRywFk.roa
File: k9ah_Ovl3IOZtER7QHIJfGRywFk.roa (raw, json)
Hash identifier: j6JAZO7zweKWUDM1Y3D6pkdZOVkp0sYQwg5nviOpS1M=
Subject key identifier: 93:D6:A1:FC:EB:E5:DC:83:99:B4:44:7B:40:72:09:7C:64:72:C0:59
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0193E44976CC65FF3C41BFD3BAFC05B91941
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/k9ah_Ovl3IOZtER7QHIJfGRywFk.roa
Signing time: Fri 20 Dec 2024 13:37:19 +0000
ROA not before: Fri 20 Dec 2024 13:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
45.86.144.0/22 maxlen: 22
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
185.198.247.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
193.239.140.0/23 maxlen: 23
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:49:76:cc:65:ff:3c:41:bf:d3:ba:fc:05:b9:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Dec 20 13:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d6a1fcebe5dc8399b4447b4072097c6472c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:4d:13:b7:82:76:2e:23:d9:4d:de:44:4b:
72:74:3e:60:a3:dc:ca:98:2f:06:42:f6:57:66:24:
8e:10:0a:ec:70:a1:10:79:20:97:ed:8e:9f:3b:1e:
84:68:93:42:39:c2:31:b6:2e:83:70:a0:e8:4a:61:
54:8d:ba:e0:2c:0d:f7:88:59:ef:e6:f7:7d:bc:0d:
34:df:9a:b7:93:a0:4a:66:ac:05:da:92:60:26:8a:
6c:72:ce:a9:f1:e1:a7:b1:0a:00:ad:08:a1:79:db:
99:2d:0e:ae:9d:bd:dd:b8:4b:1f:d5:8b:14:2d:2a:
f9:87:4e:45:75:dd:e5:bd:0e:80:36:6c:72:68:a3:
47:b9:4b:6c:47:ec:86:20:5c:62:73:f5:c9:8e:ce:
0a:f7:58:b4:73:cd:7e:0e:4c:6c:a7:79:44:fe:25:
5c:d1:72:14:7e:82:88:ed:ca:ee:34:91:6f:95:1e:
7c:40:79:9c:18:46:b3:1c:33:3b:38:07:93:2a:26:
b3:a0:ab:b3:1e:92:0e:fa:5b:7f:40:61:02:0c:60:
58:1f:bb:87:1b:a2:a4:c2:e9:dc:7d:63:00:e6:0a:
1e:1c:c1:23:7c:06:f1:50:31:53:05:bf:70:a3:6a:
01:65:f6:69:d7:ac:74:b7:47:a8:1c:d7:48:5c:5e:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:A1:FC:EB:E5:DC:83:99:B4:44:7B:40:72:09:7C:64:72:C0:59
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/k9ah_Ovl3IOZtER7QHIJfGRywFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.21.0/24
94.177.48.0/23
185.184.240.0/22
185.198.244.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.215.94.0/24
188.240.228.0/23
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:4b:76:28:3c:89:78:2e:cb:08:54:7c:8e:fd:3e:3f:22:b3:
1e:9c:90:8c:d2:1f:b8:dc:c4:77:f3:7c:7b:cb:d3:2b:d6:fa:
70:ac:70:03:83:8b:4b:88:f9:ba:50:ed:b7:2e:fe:73:0d:2b:
16:c9:ed:7c:24:b7:f0:aa:ff:f3:b1:e3:62:a5:b8:ce:10:b2:
94:73:09:54:c1:cc:e0:c8:58:d4:74:3f:1e:a9:77:ea:79:69:
f6:6c:d2:af:9d:d6:62:c6:e2:40:1e:cc:3d:01:9f:62:bb:41:
6a:1c:0a:17:96:62:28:08:f0:9d:1a:a9:4c:9c:d2:20:64:d4:
0c:8a:90:90:05:bf:2a:4f:25:1e:96:57:d5:b5:bb:66:7e:e7:
3a:53:f0:23:38:95:92:6a:63:b2:53:9d:2e:b9:49:5a:b7:a7:
9f:63:a9:4d:6b:3e:81:a7:6c:f8:51:77:e0:96:4c:a9:91:e4:
1c:43:86:5d:2b:0b:62:55:9a:f1:cb:82:bb:c0:5d:47:4e:15:
24:7e:e9:ff:eb:f2:6d:a9:1c:55:2c:b0:22:b9:6b:0f:12:0c:
6e:9a:96:67:78:ff:16:91:d5:7e:31:fd:7a:dc:87:8b:4a:87:
bc:66:35:39:f2:84:d8:a2:ea:7c:22:d3:7b:8e:ca:be:bd:db:
a4:c7:5f:d1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAZPkSXbMZf88Qb/TuvwFuRlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjQxMjIwMTMzNzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2Q2YTFmY2ViZTVkYzgzOTliNDQ0N2I0MDcyMDk3YzY0NzJjMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXZNE7eCdi4j2U3eREtydD5go9zK
mC8GQvZXZiSOEArscKEQeSCX7Y6fOx6EaJNCOcIxti6DcKDoSmFUjbrgLA33iFnv
5vd9vA0035q3k6BKZqwF2pJgJopscs6p8eGnsQoArQiheduZLQ6unb3duEsf1YsU
LSr5h05Fdd3lvQ6ANmxyaKNHuUtsR+yGIFxic/XJjs4K91i0c81+Dkxsp3lE/iVc
0XIUfoKI7cruNJFvlR58QHmcGEazHDM7OAeTKiazoKuzHpIO+lt/QGECDGBYH7uH
G6KkwuncfWMA5goeHMEjfAbxUDFTBb9wo2oBZfZp16x0t0eoHNdIXF7X8wIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFJPWofzr5dyDmbREe0ByCXxkcsBZMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvazlhaF9PdmwzSU9adEVSN1FISUpmR1J5d0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHgBggrBgEFBQcBBwEB/wSB0DCBzTCBuwQCAAEwgbQDBAAf
wbwDBAAlnK4DBAItUzgDBAItVpADBABNUWcDBABVzP8DBABWa24DBAFZIuwDBABZ
Iu8DBABZJ/4DBAFZKI4DBABZKOMDBABZKoYDBAFZKyIDBABZKzQDBABb1DQDBABb
5boDBANdcZADBABesNQDBABesRUDBAFesTADBAK5uPADBAK5xvQDBAG80BADBAC8
0/gDBAG81wYDBAC8114DBAG88OQDBAHB74wDBADZxrEwDQQCAAIwBwMFACoEaMAw
DQYJKoZIhvcNAQELBQADggEBADdLdig8iXguywhUfI79Pj8isx6ckIzSH7jcxHfz
fHvL0yvW+nCscAODi0uI+bpQ7bcu/nMNKxbJ7Xwkt/Cq//Ox42KluM4QspRzCVTB
zODIWNR0Px6pd+p5afZs0q+d1mLG4kAezD0Bn2K7QWocCheWYigI8J0aqUyc0iBk
1AyKkJAFvypPJR6WV9W1u2Z+5zpT8CM4lZJqY7JTnS65SVq3p59jqU1rPoGnbPhR
d+CWTKmR5BxDhl0rC2JVmvHLgrvAXUdOFSR+6f/r8m2pHFUssCK5aw8SDG6almd4
/xaR1X4x/Xrch4tKh7xmNTnyhNii6nwi03uOyr6926THX9E=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:00 2024 by rpki-client on console.sobornost.net