Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-IMrWcko2VaozA2k89_Ihmn8rNE.roa
File: 1-IMrWcko2VaozA2k89_Ihmn8rNE.roa (raw, json)
Hash identifier: ZQAQgE4Sg3i3yfqCxkmF0Kr+/2rmKxlUWMqcDc1zN8g=
Subject key identifier: F8:83:2B:59:C9:28:D9:56:A8:CC:0D:A4:F3:DF:C8:86:69:FC:AC:D1
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0195AE94EA572100D76CB96DF0EA240AB93E
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-IMrWcko2VaozA2k89_Ihmn8rNE.roa
Signing time: Wed 19 Mar 2025 13:25:49 +0000
ROA not before: Wed 19 Mar 2025 13:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 31.7.16.0/20 maxlen: 20
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
62.148.192.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
77.109.192.0/18 maxlen: 18
80.81.160.0/19 maxlen: 19
80.88.176.0/20 maxlen: 20
80.186.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
81.197.0.0/16 maxlen: 16
81.209.0.0/17 maxlen: 17
82.103.192.0/18 maxlen: 18
82.118.192.0/19 maxlen: 19
82.141.64.0/18 maxlen: 18
82.215.192.0/18 maxlen: 18
83.245.128.0/17 maxlen: 17
84.230.0.0/15 maxlen: 15
85.76.0.0/14 maxlen: 14
85.156.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
88.112.0.0/14 maxlen: 14
91.152.0.0/13 maxlen: 13
94.22.0.0/16 maxlen: 16
109.163.248.0/21 maxlen: 21
109.232.80.0/21 maxlen: 21
139.97.0.0/16 maxlen: 16
178.251.56.0/21 maxlen: 21
192.77.120.0/22 maxlen: 22
192.102.36.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.42.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.35.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.163.32.0/19 maxlen: 19
192.163.64.0/18 maxlen: 18
192.163.128.0/19 maxlen: 19
193.64.0.0/15 maxlen: 15
193.65.129.0/24 maxlen: 24
193.66.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
193.142.51.0/24 maxlen: 24
193.184.0.0/15 maxlen: 15
193.199.0.0/16 maxlen: 16
193.229.0.0/16 maxlen: 16
194.86.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
194.136.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
194.188.0.0/16 maxlen: 16
194.211.0.0/16 maxlen: 16
194.240.0.0/15 maxlen: 15
195.16.192.0/19 maxlen: 19
195.74.0.0/19 maxlen: 19
195.170.128.0/19 maxlen: 19
195.197.0.0/16 maxlen: 16
195.218.64.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
195.238.192.0/19 maxlen: 19
195.255.0.0/16 maxlen: 16
212.38.224.0/19 maxlen: 19
212.50.192.0/19 maxlen: 19
212.54.0.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
212.226.0.0/16 maxlen: 16
212.246.0.0/16 maxlen: 16
213.130.224.0/19 maxlen: 19
213.161.32.0/19 maxlen: 19
213.169.0.0/19 maxlen: 19
213.192.128.0/18 maxlen: 18
213.250.64.0/18 maxlen: 18
217.24.96.0/20 maxlen: 20
217.25.96.0/20 maxlen: 20
217.77.192.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
2001:670::/29 maxlen: 32
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 32
2001:1658::/29 maxlen: 32
2a00:1dd0::/29 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:94:ea:57:21:00:d7:6c:b9:6d:f0:ea:24:0a:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Mar 19 13:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8832b59c928d956a8cc0da4f3dfc88669fcacd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:32:e8:f1:67:fb:55:bb:11:ec:d0:4e:4e:
25:a9:2c:11:be:e0:ae:14:69:44:bb:1f:92:9d:96:
28:81:ec:37:d3:22:be:07:99:e1:9d:3d:3e:ff:c7:
f0:a9:5c:5c:17:25:79:19:e8:a7:55:27:8f:15:3a:
2f:5b:1d:31:2f:c1:50:29:94:aa:dc:cb:11:0e:c5:
72:b1:fb:56:03:c2:78:4e:58:31:ae:e2:d6:5c:a8:
59:d2:81:8d:b5:e5:68:fa:75:66:59:2e:ac:7e:a0:
3e:9f:e8:d6:e6:56:3d:a8:3b:e5:ec:03:ed:c4:d8:
d2:10:3e:70:96:ec:5e:15:86:fd:28:7f:81:3e:7e:
b6:7c:75:7b:56:60:0b:1f:3b:93:65:c8:20:8c:f8:
4a:aa:99:e1:92:8f:d8:c8:e6:57:1a:ae:ea:b6:b9:
42:e7:3b:39:de:d6:b0:cf:83:e4:d9:77:22:fb:9d:
62:33:89:10:28:22:d5:5a:38:43:dc:aa:5b:fc:80:
f3:19:75:05:e1:c6:e8:3a:d1:2b:29:39:3d:6e:aa:
48:e1:61:27:1e:a1:45:9f:52:c2:99:60:44:24:b1:
18:ed:4b:5d:d6:c0:8c:69:62:a2:fe:dd:a1:62:53:
24:86:e8:f8:3b:0e:a6:6e:6f:2c:c5:c6:0b:f0:cb:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:2B:59:C9:28:D9:56:A8:CC:0D:A4:F3:DF:C8:86:69:FC:AC:D1
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-IMrWcko2VaozA2k89_Ihmn8rNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.163.248.0/21
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
193.64.0.0-193.66.255.255
193.94.0.0/16
193.142.51.0/24
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:670::/29
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:ca:30:45:f5:fd:d1:52:43:41:ea:73:0f:63:62:80:83:2a:
47:85:dc:67:d6:28:f1:b6:78:60:a8:85:b6:df:b1:aa:62:93:
4e:e1:c4:79:19:48:9c:28:5a:e8:b4:75:1b:d8:90:e7:bc:8e:
c2:b7:a4:ac:9a:8d:ce:00:7c:aa:27:ca:3e:8b:03:a6:e5:92:
c5:eb:13:19:bc:7d:80:45:63:b6:74:70:6a:a7:64:b3:b4:8d:
24:24:2a:a0:9f:7b:a3:35:51:8e:b2:f8:c4:6e:71:d8:72:2f:
ff:58:b8:4f:68:f2:16:0c:ea:f6:e0:33:4e:08:61:b6:56:51:
fd:d5:6f:e5:b4:20:50:31:2d:c6:1e:b2:a6:cb:16:0b:e2:c4:
ec:39:38:16:e3:7e:db:8b:ac:3e:c9:41:ee:54:3f:76:4b:97:
56:d9:34:d2:e3:d3:5b:63:df:9e:68:76:68:e6:c6:c1:0d:7f:
a0:3d:46:2d:f9:2c:f0:40:94:56:cd:e6:23:67:ba:c9:fb:d7:
6b:c2:e5:d1:a3:00:93:c7:b4:5b:b6:6d:0b:c8:36:5f:04:08:
de:e0:df:c0:ed:5e:e0:64:fe:d8:43:25:77:ab:a8:fe:16:e9:
b7:29:8c:de:dd:3f:55:94:25:78:7f:6d:d7:15:af:96:de:f0:
34:00:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:24:10 2025 by rpki-client on console.sobornost.net