Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kAaWiupzvJmhfZ3dKuqudDoIIJ0.roa
File: kAaWiupzvJmhfZ3dKuqudDoIIJ0.roa (raw, json)
Hash identifier: 7al5cZX0bAXa1/zylPCSwRJyhzTFwmhT/9wnyhefkbk=
Subject key identifier: 90:06:96:8A:EA:73:BC:99:A1:7D:9D:DD:2A:EA:AE:74:3A:08:20:9D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0193E398C5536D6B0FE10A839C5434D4191F
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kAaWiupzvJmhfZ3dKuqudDoIIJ0.roa
Signing time: Fri 20 Dec 2024 10:24:20 +0000
ROA not before: Fri 20 Dec 2024 10:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24589
IP address blocks: 31.42.80.0/20 maxlen: 20
83.243.88.0/21 maxlen: 21
84.38.136.0/21 maxlen: 21
87.99.64.0/19 maxlen: 19
87.99.64.0/24 maxlen: 24
87.99.65.0/24 maxlen: 24
87.99.66.0/24 maxlen: 24
87.99.67.0/24 maxlen: 24
87.99.95.0/24 maxlen: 24
88.135.128.0/19 maxlen: 19
91.90.224.0/19 maxlen: 29
91.90.225.0/24 maxlen: 24
91.90.230.0/24 maxlen: 24
91.90.231.0/24 maxlen: 24
91.90.236.0/24 maxlen: 24
91.90.237.0/25 maxlen: 25
91.90.238.0/24 maxlen: 24
91.90.252.64/29 maxlen: 29
91.90.255.0/24 maxlen: 24
91.233.214.0/23 maxlen: 23
109.197.208.0/21 maxlen: 21
109.197.208.0/24 maxlen: 24
109.229.192.0/19 maxlen: 19
171.25.218.0/23 maxlen: 23
176.103.176.0/20 maxlen: 20
176.103.184.0/24 maxlen: 24
176.103.192.0/21 maxlen: 21
176.106.48.0/20 maxlen: 20
176.106.96.0/21 maxlen: 21
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
185.47.10.0/24 maxlen: 24
185.47.11.0/24 maxlen: 24
185.220.196.0/22 maxlen: 22
185.220.196.0/24 maxlen: 24
193.111.244.0/22 maxlen: 22
193.238.212.0/22 maxlen: 22
193.238.212.128/25 maxlen: 25
193.238.216.0/21 maxlen: 21
194.9.212.0/22 maxlen: 22
194.9.212.0/24 maxlen: 24
195.69.88.0/22 maxlen: 22
213.110.64.0/19 maxlen: 19
2a01:8ca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:98:c5:53:6d:6b:0f:e1:0a:83:9c:54:34:d4:19:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Dec 20 10:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9006968aea73bc99a17d9ddd2aeaae743a08209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:35:3b:35:c0:6a:f8:89:31:aa:cd:65:67:
33:32:ba:c8:aa:83:59:84:59:b0:7f:ef:3f:e2:2e:
51:d4:f8:28:6d:75:9f:41:04:10:0a:d3:37:8e:8c:
ae:7c:0c:48:66:fc:df:4d:60:e6:08:61:26:71:a8:
11:af:52:85:05:e2:5c:ee:5d:7f:b3:55:0e:cf:51:
c3:a2:79:66:f9:d9:72:a4:24:d0:57:82:ea:22:3d:
6b:fb:a8:39:37:cb:58:ae:c1:02:f1:76:4c:22:d7:
74:90:c2:41:f2:c4:49:2b:45:a7:73:78:b2:24:08:
79:fa:b6:24:2b:0e:82:82:ef:07:32:86:b6:24:0d:
8b:80:52:0b:f1:5c:a1:d2:e9:8a:6b:cc:4d:8b:d8:
a0:ff:33:51:5f:c8:4a:1b:44:d1:51:fe:aa:7b:9b:
d9:8a:dd:b5:5e:27:fa:3a:10:c8:29:7b:f9:53:82:
d9:6b:bc:50:07:ea:24:3d:43:cb:b8:62:ad:2e:22:
69:6f:f1:53:1e:3e:2b:94:73:d7:f1:f9:ff:b3:c8:
7b:5f:33:8f:c5:1c:04:2f:37:3c:1a:80:0b:ca:8e:
94:cd:be:86:5a:14:c9:00:f3:5e:12:3d:ad:06:8c:
6b:c0:67:84:b1:e4:d9:c6:ea:f4:ab:d7:86:ba:0e:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:06:96:8A:EA:73:BC:99:A1:7D:9D:DD:2A:EA:AE:74:3A:08:20:9D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kAaWiupzvJmhfZ3dKuqudDoIIJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.80.0/20
83.243.88.0/21
84.38.136.0/21
87.99.64.0/19
88.135.128.0/19
91.90.224.0/19
91.233.214.0/23
109.197.208.0/21
109.229.192.0/19
171.25.218.0/23
176.103.176.0-176.103.199.255
176.106.48.0/20
176.106.96.0/21
176.106.160.0-176.106.183.255
185.47.10.0/23
185.220.196.0/22
193.111.244.0/22
193.238.212.0-193.238.223.255
194.9.212.0/22
195.69.88.0/22
213.110.64.0/19
IPv6:
2a01:8ca0::/32
Signature Algorithm: sha256WithRSAEncryption
25:7e:1c:71:54:7f:56:2c:8a:7e:63:9e:65:55:3d:0a:37:a0:
23:18:55:7e:48:8e:2b:06:ec:dd:f6:06:87:a7:38:b2:8c:34:
87:60:b9:a0:87:98:ff:a2:6d:2f:9e:9c:23:f9:c6:bc:64:20:
21:6d:66:52:9d:a0:4d:cd:2c:db:a2:ce:56:f4:3b:c0:cc:c2:
49:b3:bb:18:f3:3e:06:7b:b6:41:22:66:b4:14:53:9a:94:2e:
4a:d2:30:7f:09:de:32:a4:26:19:1f:37:1e:e4:1b:98:fb:21:
63:e1:61:d6:5f:b7:43:a7:c9:7e:51:d0:f6:48:89:bf:68:20:
61:ff:f7:fa:8c:e0:83:e9:25:59:65:8e:8c:f7:84:96:a3:72:
47:ad:e0:2a:b6:1e:36:bd:ba:07:81:93:9f:2a:ae:ee:f0:b0:
e1:9d:c7:24:b3:12:31:d7:72:25:63:2b:a0:75:aa:c1:2e:99:
16:a1:c3:89:6d:73:82:84:1e:5b:4b:bb:b2:99:26:4a:6c:ae:
b5:af:ac:b2:e8:22:db:a1:23:2f:5e:f6:6a:72:2b:3e:42:f1:
be:54:10:a1:82:ff:3d:75:6a:51:5a:36:29:89:c3:57:37:9d:
2b:4c:35:21:f1:79:04:26:77:9f:f1:73:a5:86:9d:70:8e:33:
e9:a6:ce:a7
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAZPjmMVTbWsP4QqDnFQ01BkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjQxMjIwMTAyNDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDA2OTY4YWVhNzNiYzk5YTE3ZDlkZGQyYWVhYWU3NDNhMDgyMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKI1OzXAaviJMarNZWczMrrIqoNZ
hFmwf+8/4i5R1PgobXWfQQQQCtM3joyufAxIZvzfTWDmCGEmcagRr1KFBeJc7l1/
s1UOz1HDonlm+dlypCTQV4LqIj1r+6g5N8tYrsEC8XZMItd0kMJB8sRJK0Wnc3iy
JAh5+rYkKw6Cgu8HMoa2JA2LgFIL8Vyh0umKa8xNi9ig/zNRX8hKG0TRUf6qe5vZ
it21Xif6OhDIKXv5U4LZa7xQB+okPUPLuGKtLiJpb/FTHj4rlHPX8fn/s8h7XzOP
xRwELzc8GoALyo6Uzb6GWhTJAPNeEj2tBoxrwGeEseTZxur0q9eGug7MfwIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFJAGlorqc7yZoX2d3SrqrnQ6CCCdMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEva0FhV2l1cHp2Sm1oZlozZEt1cXVkRG9JSUowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBnQQCAAEwgZYDBAQf
KlADBANT81gDBANUJogDBAVXY0ADBAVYh4ADBAVbWuADBAFb6dYDBANtxdADBAVt
5cADBAGrGdowDAMEBLBnsAMEA7BnwAMEBLBqMAMEA7BqYDAMAwQFsGqgAwQDsGqw
AwQBuS8KAwQCudzEAwQCwW/0MAwDBALB7tQDBAXB7sADBALCCdQDBALDRVgDBAXV
bkAwDQQCAAIwBwMFACoBjKAwDQYJKoZIhvcNAQELBQADggEBACV+HHFUf1Ysin5j
nmVVPQo3oCMYVX5IjisG7N32BoenOLKMNIdguaCHmP+ibS+enCP5xrxkICFtZlKd
oE3NLNuizlb0O8DMwkmzuxjzPgZ7tkEiZrQUU5qULkrSMH8J3jKkJhkfNx7kG5j7
IWPhYdZft0OnyX5R0PZIib9oIGH/9/qM4IPpJVlljoz3hJajcket4Cq2Hja9ugeB
k58qru7wsOGdxySzEjHXciVjK6B1qsEumRahw4ltc4KEHltLu7KZJkpsrrWvrLLo
ItuhIy9e9mpyKz5C8b5UEKGC/z11alFaNimJw1c3nStMNSHxeQQmd5/xc6WGnXCO
M+mmzqc=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net