Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/x8oJQTfAeK1iKs6V2WIBXaP_KkA.roa
File: x8oJQTfAeK1iKs6V2WIBXaP_KkA.roa (raw, json)
Hash identifier: QbXY2Tb77ubW4cEqf4OT4R8lgNbOTeEn0+JYFvUx4Qs=
Subject key identifier: C7:CA:09:41:37:C0:78:AD:62:2A:CE:95:D9:62:01:5D:A3:FF:2A:40
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0194274823AACB86117E2307CC339E8DE7F8
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/x8oJQTfAeK1iKs6V2WIBXaP_KkA.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48011
IP address blocks: 5.172.177.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
45.93.168.0/22 maxlen: 24
45.93.168.0/24 maxlen: 24
45.252.180.0/23 maxlen: 23
45.252.180.0/24 maxlen: 24
45.252.181.0/24 maxlen: 24
45.252.182.0/23 maxlen: 23
45.252.182.0/24 maxlen: 24
45.252.183.0/24 maxlen: 24
62.204.58.0/24 maxlen: 24
77.87.122.0/24 maxlen: 24
87.236.161.0/24 maxlen: 24
91.247.188.0/24 maxlen: 24
103.130.145.0/24 maxlen: 24
103.130.147.0/24 maxlen: 24
103.215.238.0/23 maxlen: 24
185.182.105.0/24 maxlen: 24
185.211.79.0/24 maxlen: 24
185.217.143.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
213.217.31.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
2a0c:6600::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:5::/48 maxlen: 48
2a0c:6600:6::/48 maxlen: 48
2a0c:6600:7::/48 maxlen: 48
2a0c:6600:8::/48 maxlen: 48
2a0c:6600:9::/48 maxlen: 48
2a0c:6600:1000::/48 maxlen: 48
2a0c:6600:2000::/48 maxlen: 48
2a0c:6600:3000::/48 maxlen: 48
2a0c:6600:4000::/48 maxlen: 48
2a0c:6600:6000::/48 maxlen: 48
2a0c:6600:6600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:aa:cb:86:11:7e:23:07:cc:33:9e:8d:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ca094137c078ad622ace95d962015da3ff2a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:af:1f:37:26:8f:25:f1:84:c9:4b:f2:50:
e9:e0:ce:d1:cb:8d:fc:64:4c:7d:d2:1d:60:78:6a:
cc:38:45:f4:2d:e3:44:79:d9:1f:2c:67:61:67:02:
f4:6e:05:61:ad:bf:92:36:f6:e7:29:c5:c1:0f:fa:
9c:2a:f4:c3:fe:0c:13:e9:e3:f4:ee:04:83:b3:1b:
cd:3e:91:55:d4:96:94:9e:cc:30:b5:2a:aa:df:10:
ae:7a:82:fa:5d:f8:41:da:8d:91:8b:a2:c8:6f:b3:
df:ae:40:83:87:1b:69:9c:73:20:a7:2c:66:e9:1c:
d2:24:c0:e5:02:bb:a8:81:e8:4a:88:b1:7d:3b:43:
74:0f:a9:3d:24:3c:3d:ad:4c:10:e2:43:ae:5a:26:
6b:f3:91:d1:04:e7:4a:12:ac:e7:17:90:5b:9e:d9:
e3:37:b8:46:02:e4:be:53:55:77:60:22:66:d5:52:
77:4f:8b:14:65:c3:1d:b1:6e:fe:d7:89:72:f0:87:
90:2d:25:84:73:e2:da:41:65:df:57:10:48:1c:cc:
79:9a:0d:bc:a5:cd:46:57:f3:3c:6e:9b:46:37:90:
ca:11:b4:ee:d4:5b:2d:00:ef:7a:e4:99:34:57:72:
8c:53:f6:e4:01:50:76:58:71:54:d0:93:b2:69:02:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:09:41:37:C0:78:AD:62:2A:CE:95:D9:62:01:5D:A3:FF:2A:40
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/x8oJQTfAeK1iKs6V2WIBXaP_KkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
45.89.236.0/22
45.93.168.0/22
45.252.180.0/22
62.204.58.0/24
77.87.122.0/24
87.236.161.0/24
91.247.188.0/24
103.130.145.0/24
103.130.147.0/24
103.215.238.0/23
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
2a0c:6600:1000::/48
2a0c:6600:2000::/48
2a0c:6600:3000::/48
2a0c:6600:4000::/48
2a0c:6600:6000::/48
2a0c:6600:6600::/48
Signature Algorithm: sha256WithRSAEncryption
9b:9a:65:9d:51:81:8c:3c:f0:ba:72:0a:41:2c:5c:a3:fb:7c:
5c:47:e1:d6:89:f5:db:7d:a6:fa:4b:b1:67:6d:1f:97:b8:71:
d5:85:95:65:29:b9:df:63:c2:47:4b:f0:34:c3:2d:ab:7b:30:
91:ae:ce:fb:28:49:3d:23:f5:8d:42:39:dd:31:90:4b:27:80:
c0:41:0c:11:07:87:41:ff:1f:9c:c8:16:7d:24:0e:f2:1d:91:
5d:b6:ef:15:ce:d5:1d:4d:ef:c3:c7:61:27:07:fd:57:1d:8f:
ea:eb:fa:3b:2d:eb:24:d7:32:67:a2:1f:cd:a8:c8:84:76:69:
23:d4:2a:8e:d5:a8:19:97:5b:bd:eb:a1:9e:c1:c9:9b:e4:d9:
f3:02:e4:9a:ae:37:24:d3:27:f7:9e:34:da:a3:13:5a:58:66:
a2:bd:a6:1e:7a:6e:90:46:0b:2d:a7:2f:4f:67:bf:53:2f:70:
85:47:8c:05:6b:be:d1:06:24:5a:ac:5b:f6:92:25:44:ec:12:
43:31:83:43:d9:5d:b8:95:85:79:ba:d0:4e:f8:06:3e:2d:e8:
e3:71:ce:23:6e:76:e9:c5:15:e2:03:54:ec:f2:7b:82:8c:56:
2f:da:82:39:b1:36:37:b7:bd:14:5c:51:75:c3:a3:d1:aa:0f:
fe:49:5b:c8
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZQnSCOqy4YRfiMHzDOejef4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz
YTBjZTIwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2NhMDk0MTM3YzA3OGFkNjIyYWNlOTVkOTYyMDE1ZGEzZmYyYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGvHzcmjyXxhMlL8lDp4M7Ry438
ZEx90h1geGrMOEX0LeNEedkfLGdhZwL0bgVhrb+SNvbnKcXBD/qcKvTD/gwT6eP0
7gSDsxvNPpFV1JaUnswwtSqq3xCueoL6XfhB2o2Ri6LIb7PfrkCDhxtpnHMgpyxm
6RzSJMDlAruogehKiLF9O0N0D6k9JDw9rUwQ4kOuWiZr85HRBOdKEqznF5Bbntnj
N7hGAuS+U1V3YCJm1VJ3T4sUZcMdsW7+14ly8IeQLSWEc+LaQWXfVxBIHMx5mg28
pc1GV/M8bptGN5DKEbTu1FstAO965Jk0V3KMU/bkAVB2WHFU0JOyaQJwyQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFMfKCUE3wHitYirOldliAV2j/ypAMB8GA1UdIwQY
MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt
NTZjYzM5ZGI2ZWQ2LzEveDhvSlFUZkFlSzFpS3M2VjJXSUJYYVBfS2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2
LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHWBggrBgEFBQcBBwEB/wSBxjCBwzByBAIAATBsAwQABayx
AwQCLVnsAwQCLV2oAwQCLfy0AwQAPsw6AwQATVd6AwQAV+yhAwQAW/e8AwQAZ4KR
AwQAZ4KTAwQBZ9fuAwQAubZpAwQAudNPAwQAudmPAwQCueOIAwQAwaNIAwQA1dkf
AwQA1ejLME0EAgACMEcwDwMEASoMZgMHASoMZgAACAMHACoMZgAQAAMHACoMZgAg
AAMHACoMZgAwAAMHACoMZgBAAAMHACoMZgBgAAMHACoMZgBmADANBgkqhkiG9w0B
AQsFAAOCAQEAm5plnVGBjDzwunIKQSxco/t8XEfh1on1232m+kuxZ20fl7hx1YWV
ZSm532PCR0vwNMMtq3swka7O+yhJPSP1jUI53TGQSyeAwEEMEQeHQf8fnMgWfSQO
8h2RXbbvFc7VHU3vw8dhJwf9Vx2P6uv6Oy3rJNcyZ6IfzajIhHZpI9QqjtWoGZdb
veuhnsHJm+TZ8wLkmq43JNMn95402qMTWlhmor2mHnpukEYLLacvT2e/Uy9whUeM
BWu+0QYkWqxb9pIlROwSQzGDQ9lduJWFebrQTvgGPi3o43HOI2526cUV4gNU7PJ7
goxWL9qCObE2N7e9FFxRdcOj0aoP/klbyA==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:48 2025 by rpki-client on console.sobornost.net