Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xK4HULlNXz23y2RfmIl2fRaQseI.roa
File: xK4HULlNXz23y2RfmIl2fRaQseI.roa (raw, json)
Hash identifier: wEwmfIEU0PyZxLE1YCmfzfppUZP/HwJLHEZYM0grOOg=
Subject key identifier: C4:AE:07:50:B9:4D:5F:3D:B7:CB:64:5F:98:89:76:7D:16:90:B1:E2
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019623E8CB8E9EC9935B0967043A0A4CA343
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xK4HULlNXz23y2RfmIl2fRaQseI.roa
Signing time: Fri 11 Apr 2025 08:13:00 +0000
ROA not before: Fri 11 Apr 2025 08:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216071
IP address blocks: 5.35.44.0/24 maxlen: 24
5.35.45.0/24 maxlen: 24
5.35.46.0/24 maxlen: 24
5.35.47.0/24 maxlen: 24
5.35.68.0/24 maxlen: 24
5.35.69.0/24 maxlen: 24
5.35.70.0/24 maxlen: 24
5.35.71.0/24 maxlen: 24
89.110.64.0/24 maxlen: 24
89.110.65.0/24 maxlen: 24
89.110.66.0/24 maxlen: 24
89.110.67.0/24 maxlen: 24
89.110.68.0/24 maxlen: 24
89.110.69.0/24 maxlen: 24
89.110.70.0/24 maxlen: 24
89.110.71.0/24 maxlen: 24
89.110.72.0/24 maxlen: 24
89.110.73.0/24 maxlen: 24
89.110.74.0/24 maxlen: 24
89.110.75.0/24 maxlen: 24
89.110.76.0/24 maxlen: 24
89.110.77.0/24 maxlen: 24
89.110.78.0/24 maxlen: 24
89.110.79.0/24 maxlen: 24
89.110.80.0/24 maxlen: 24
89.110.81.0/24 maxlen: 24
89.110.82.0/24 maxlen: 24
89.110.83.0/24 maxlen: 24
89.110.84.0/24 maxlen: 24
89.110.85.0/24 maxlen: 24
89.110.86.0/24 maxlen: 24
89.110.87.0/24 maxlen: 24
89.110.100.0/24 maxlen: 24
89.110.101.0/24 maxlen: 24
89.110.102.0/24 maxlen: 24
89.110.103.0/24 maxlen: 24
89.110.104.0/24 maxlen: 24
89.110.105.0/24 maxlen: 24
89.110.106.0/24 maxlen: 24
89.110.107.0/24 maxlen: 24
89.110.108.0/24 maxlen: 24
89.110.109.0/24 maxlen: 24
89.110.110.0/24 maxlen: 24
89.110.111.0/24 maxlen: 24
89.110.112.0/24 maxlen: 24
89.110.113.0/24 maxlen: 24
89.110.114.0/24 maxlen: 24
89.110.115.0/24 maxlen: 24
89.110.116.0/24 maxlen: 24
89.110.117.0/24 maxlen: 24
89.110.118.0/24 maxlen: 24
89.110.119.0/24 maxlen: 24
89.110.120.0/24 maxlen: 24
89.110.121.0/24 maxlen: 24
89.110.122.0/24 maxlen: 24
89.110.123.0/24 maxlen: 24
89.110.124.0/24 maxlen: 24
89.110.125.0/24 maxlen: 24
89.110.126.0/24 maxlen: 24
89.110.127.0/24 maxlen: 24
93.183.88.0/24 maxlen: 24
93.183.89.0/24 maxlen: 24
93.183.90.0/24 maxlen: 24
93.183.91.0/24 maxlen: 24
109.107.164.0/24 maxlen: 24
109.107.165.0/24 maxlen: 24
109.107.166.0/24 maxlen: 24
109.107.167.0/24 maxlen: 24
109.107.172.0/24 maxlen: 24
109.107.173.0/24 maxlen: 24
109.107.174.0/24 maxlen: 24
109.107.175.0/24 maxlen: 24
109.107.176.0/24 maxlen: 24
109.107.177.0/24 maxlen: 24
109.107.178.0/24 maxlen: 24
109.107.179.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
194.60.132.0/24 maxlen: 24
194.60.133.0/24 maxlen: 24
194.60.134.0/24 maxlen: 24
194.60.135.0/24 maxlen: 24
194.246.81.0/24 maxlen: 24
194.246.82.0/24 maxlen: 24
194.246.83.0/24 maxlen: 24
212.111.80.0/24 maxlen: 24
212.111.81.0/24 maxlen: 24
212.111.82.0/24 maxlen: 24
212.111.88.0/24 maxlen: 24
212.111.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:e8:cb:8e:9e:c9:93:5b:09:67:04:3a:0a:4c:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Apr 11 08:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ae0750b94d5f3db7cb645f9889767d1690b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:ee:3d:b6:7e:c3:e6:46:c5:44:b0:52:c6:
80:3a:f9:1e:08:b2:da:54:85:1b:9b:68:a7:6b:85:
a0:df:25:59:2b:65:fb:c1:69:44:e0:da:4c:11:3d:
53:3b:25:af:a7:ed:20:9f:59:5c:be:54:0f:bc:b8:
c5:29:37:78:08:e8:a1:e6:69:b0:f6:7f:32:02:92:
f9:2d:67:33:d4:cd:76:82:28:1c:8b:c5:26:2e:fd:
4e:60:4a:09:20:da:20:d5:1e:c1:7e:bc:cf:86:49:
34:ee:25:25:0f:f1:22:60:61:5c:4f:36:57:f8:51:
f8:80:e8:76:3e:fc:7d:04:7e:46:09:51:83:84:31:
d3:2d:2b:5f:7c:25:30:fb:93:b2:8d:c4:31:e1:60:
72:93:db:53:ed:e8:9f:35:95:94:57:c8:dc:9d:6d:
58:bf:09:c1:8e:1f:1d:68:63:71:41:b8:8b:86:5a:
14:34:44:d1:cf:a0:61:84:9a:a6:47:12:bd:90:54:
81:f1:08:ac:9b:c2:ff:1c:bc:b3:d0:e8:a9:39:72:
52:46:55:62:4c:96:40:49:fb:4c:8f:13:a3:a9:4f:
76:0e:35:e5:2b:46:86:ea:e0:b8:17:70:c4:84:ce:
b3:4f:fc:8f:f1:ca:41:4e:49:77:66:08:4c:7e:f5:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:07:50:B9:4D:5F:3D:B7:CB:64:5F:98:89:76:7D:16:90:B1:E2
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xK4HULlNXz23y2RfmIl2fRaQseI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.44.0/22
5.35.68.0/22
89.110.64.0-89.110.87.255
89.110.100.0-89.110.127.255
93.183.88.0/22
109.107.164.0/22
109.107.172.0-109.107.179.255
109.107.184.0/22
194.60.132.0/22
194.246.81.0-194.246.83.255
212.111.80.0-212.111.82.255
212.111.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:d9:48:84:7c:85:80:01:bb:35:a5:f4:3b:73:ad:67:6d:cf:
d8:ea:a1:8c:1b:66:ee:3f:be:cb:fb:c9:ca:ec:87:81:1c:80:
d7:48:47:80:4e:4d:f1:35:71:6a:74:68:a7:4c:33:3b:22:e5:
35:26:b9:04:4a:7e:33:4b:47:78:c4:0e:ef:18:23:10:e1:66:
ba:3c:e5:01:f0:1d:95:17:c3:34:fc:87:45:7b:a4:d7:53:51:
8d:0c:c0:ee:e5:80:bf:ee:07:0e:d4:2c:23:14:43:1e:91:76:
3a:34:bf:09:b1:24:9b:01:41:7a:4d:59:03:f4:39:bc:5b:1d:
8a:93:97:c8:cb:20:67:0a:82:f6:47:c5:3c:ab:ab:6d:3b:a2:
23:17:75:80:5d:20:67:e5:71:f2:be:2e:88:83:5a:cf:65:22:
15:5f:67:9e:da:9f:5c:bd:a7:29:2b:9c:26:59:82:4c:7b:ff:
ff:8c:fe:d2:58:9c:0f:fb:ce:cf:76:a9:40:1b:88:1c:78:20:
e1:f9:33:de:6c:97:93:c6:d6:34:be:78:b0:e5:31:93:28:92:
29:2a:c5:0d:b4:75:3c:26:27:ec:63:e8:b2:65:17:bf:5a:e7:
5e:1b:dd:a7:94:b2:9d:d1:29:2a:2c:e7:75:ff:01:e1:8b:83:
40:b9:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net