Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/17xOhQoyIYZB59OnKrsT-dwllSw.roa
File: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (raw, json)
Hash identifier: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=
Subject key identifier: D7:BC:4E:85:0A:32:21:86:41:E7:D3:A7:2A:BB:13:F9:DC:25:95:2C
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0195287F3F7415B237C505E55CF5E059A2BA
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/17xOhQoyIYZB59OnKrsT-dwllSw.roa
Signing time: Fri 21 Feb 2025 12:33:02 +0000
ROA not before: Fri 21 Feb 2025 12:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 5.57.3.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.168.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
85.112.64.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.80.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
146.185.32.0/24 maxlen: 24
146.185.33.0/24 maxlen: 24
146.185.34.0/24 maxlen: 24
146.185.35.0/24 maxlen: 24
146.185.36.0/24 maxlen: 24
146.185.37.0/24 maxlen: 24
146.185.38.0/24 maxlen: 24
146.185.39.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.76.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
2a00:1580::/29 maxlen: 29
2a00:1580::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:7f:3f:74:15:b2:37:c5:05:e5:5c:f5:e0:59:a2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Feb 21 12:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7bc4e850a32218641e7d3a72abb13f9dc25952c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:4c:db:68:8d:8c:af:5b:1b:3c:84:76:ca:
dd:a8:88:51:7e:7d:1d:17:e4:b4:68:44:e2:df:c3:
e0:dd:2b:f0:f2:bd:f3:c8:7b:76:3e:83:51:b8:7c:
c5:c4:cf:dc:9f:f7:67:b4:f5:ab:e3:cc:83:d7:2f:
57:a8:94:22:a7:21:d1:82:3f:48:8b:d0:e1:0e:e4:
23:3f:06:34:bd:9f:c4:8f:aa:7d:cb:43:b7:99:f4:
d1:46:22:7a:98:35:6b:88:8d:8e:d4:1b:69:e1:92:
59:53:59:59:b5:73:a7:10:88:37:62:60:e8:f4:c8:
91:9d:0f:60:ad:04:2f:bb:00:94:f4:06:b1:30:28:
23:53:7a:e3:2b:b0:75:44:7b:58:1d:5d:5f:50:16:
af:a5:41:54:e0:bb:4a:28:03:f3:16:1c:d7:8e:fb:
3a:88:6f:d2:1b:76:64:78:0c:c1:18:47:30:04:b4:
92:d8:e2:f9:82:d8:3b:6b:29:62:a4:b0:87:0f:cb:
f4:07:40:4c:2e:a0:64:83:26:27:da:5e:1b:f2:20:
ec:ea:a6:3f:5a:4c:61:27:1c:82:f8:75:e7:eb:05:
46:db:91:01:d3:b3:b8:b5:40:0d:df:be:3b:f4:f8:
db:55:27:cb:9d:b2:d3:6e:0c:12:23:dd:11:55:04:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BC:4E:85:0A:32:21:86:41:E7:D3:A7:2A:BB:13:F9:DC:25:95:2C
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/17xOhQoyIYZB59OnKrsT-dwllSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.80.0/24
85.112.82.0-85.112.95.255
146.185.32.0/21
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
2b:58:7e:3c:f1:7c:ec:8b:21:bc:72:85:4c:40:11:b0:ea:6a:
f9:f8:db:ed:cf:53:81:03:d0:49:84:4b:1f:44:8b:b9:6e:85:
ea:24:e8:68:ac:ae:2a:78:12:f4:a9:ce:30:4d:ab:70:a6:44:
ce:ce:14:79:8d:f5:16:05:de:cc:62:4f:7b:ef:04:9a:2d:8c:
15:43:e3:9b:58:7b:eb:29:4e:18:f4:22:c1:da:51:81:63:8b:
a7:54:cb:6c:47:ee:0b:ea:5a:72:4b:60:51:6b:ba:4c:36:5d:
2d:e8:a3:97:03:17:6e:b8:f8:19:d7:0b:41:18:63:f4:33:19:
b2:fb:a8:c7:50:55:1e:41:48:70:a2:16:3d:41:2f:48:64:a4:
0f:be:1b:26:92:e9:a0:60:47:50:5c:73:ee:70:a9:83:e3:d4:
de:f3:ad:ad:b2:c1:ac:79:0c:33:fc:cd:99:4b:85:ae:0c:8a:
60:95:c1:67:17:3f:a0:74:03:82:48:3f:c3:d1:66:d0:b2:aa:
11:ec:e7:ec:ec:5e:ee:c8:45:5f:0f:32:d1:84:0a:71:b7:7a:
34:47:99:04:9e:ca:23:59:48:7f:89:a4:5c:ed:59:8d:63:2d:
d3:c3:81:05:72:eb:17:f1:b8:e2:7e:66:e0:f5:fa:71:96:f0:
5c:a2:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net