Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LlY5-pBhFL3dAl8cX6FAb4DeXq4.roa
File: LlY5-pBhFL3dAl8cX6FAb4DeXq4.roa (raw, json)
Hash identifier: oQ/e/lufwF8sFfj12z9wIS+ZAs4sbk+vLTEKm4FrgfQ=
Subject key identifier: 2E:56:39:FA:90:61:14:BD:DD:02:5F:1C:5F:A1:40:6F:80:DE:5E:AE
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019460537BD6252C47519C3BBFF6999CF309
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LlY5-pBhFL3dAl8cX6FAb4DeXq4.roa
Signing time: Mon 13 Jan 2025 15:41:11 +0000
ROA not before: Mon 13 Jan 2025 15:41:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 5.22.224.0/21 maxlen: 24
45.83.76.0/22 maxlen: 24
45.83.76.0/24 maxlen: 24
62.44.64.0/19 maxlen: 24
62.69.32.0/19 maxlen: 24
62.72.128.0/19 maxlen: 24
62.105.64.0/18 maxlen: 24
62.232.0.0/16 maxlen: 24
77.44.0.0/17 maxlen: 24
77.73.120.0/21 maxlen: 24
77.107.128.0/18 maxlen: 24
78.41.208.0/21 maxlen: 24
78.141.0.0/18 maxlen: 24
80.64.48.0/20 maxlen: 24
80.69.128.0/20 maxlen: 24
80.89.80.0/20 maxlen: 24
80.234.128.0/17 maxlen: 24
82.195.96.0/19 maxlen: 24
83.219.32.0/19 maxlen: 24
89.145.192.0/18 maxlen: 24
91.236.17.0/24 maxlen: 24
93.92.120.0/21 maxlen: 24
93.95.104.0/21 maxlen: 24
94.30.0.0/17 maxlen: 24
109.170.128.0/17 maxlen: 24
130.185.64.0/21 maxlen: 24
176.35.0.0/16 maxlen: 24
185.3.76.0/22 maxlen: 24
185.8.204.0/22 maxlen: 24
185.138.152.0/22 maxlen: 24
185.144.110.0/24 maxlen: 24
185.196.204.0/22 maxlen: 24
193.28.154.0/24 maxlen: 24
193.38.52.0/24 maxlen: 24
193.41.96.0/21 maxlen: 24
193.192.34.0/23 maxlen: 24
193.192.64.0/19 maxlen: 24
193.242.113.0/24 maxlen: 24
193.242.115.0/24 maxlen: 24
193.242.116.0/24 maxlen: 24
194.1.210.0/24 maxlen: 24
194.79.240.0/22 maxlen: 24
194.79.241.0/24 maxlen: 24
194.126.64.0/19 maxlen: 24
194.143.160.0/19 maxlen: 24
194.153.0.0/19 maxlen: 24
194.154.160.0/19 maxlen: 24
195.38.64.0/19 maxlen: 24
195.70.64.0/19 maxlen: 24
195.147.0.0/16 maxlen: 24
195.147.4.0/24 maxlen: 24
195.200.128.0/19 maxlen: 24
195.224.0.0/16 maxlen: 24
195.226.32.0/19 maxlen: 24
212.19.64.0/19 maxlen: 24
212.35.224.0/19 maxlen: 24
212.88.32.0/19 maxlen: 24
212.102.192.0/19 maxlen: 24
212.102.214.0/24 maxlen: 24
212.103.224.0/19 maxlen: 24
212.241.128.0/17 maxlen: 24
213.205.128.0/18 maxlen: 24
217.67.48.0/20 maxlen: 24
2001:b98::/29 maxlen: 48
2001:b98::/32 maxlen: 32
2a00:b300::/29 maxlen: 48
2a03:4200::/32 maxlen: 48
2a04:b2c0::/29 maxlen: 48
2a07:2640::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:53:7b:d6:25:2c:47:51:9c:3b:bf:f6:99:9c:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Jan 13 15:41:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5639fa906114bddd025f1c5fa1406f80de5eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:bf:4f:1b:2c:ef:b6:14:e2:13:9c:98:36:
59:39:a4:49:c9:00:ca:1d:87:b9:85:b5:05:f6:48:
6d:6b:c6:3e:f7:9d:42:4f:c5:27:ea:bd:d3:eb:bf:
de:29:ef:ea:33:31:6c:80:aa:57:56:41:d2:e6:8e:
bf:a4:81:0c:b3:9d:f7:22:34:29:38:a8:5a:d6:9b:
17:da:8a:e3:46:09:ac:e2:d1:46:84:81:93:25:e5:
63:64:73:3f:8b:e3:b4:e2:bc:21:25:f6:0c:e8:57:
a3:29:5c:d2:1f:7a:51:f1:76:5d:42:ab:0e:07:e1:
f8:4d:d9:51:69:c7:b5:ef:c6:e0:2e:03:eb:fa:84:
0e:ac:28:6e:ce:00:52:73:ee:cb:9b:22:d8:74:9f:
16:26:2a:a5:4b:97:33:14:d2:bf:89:47:29:15:bf:
66:e8:1d:47:41:40:b6:eb:2f:2a:63:b6:ab:f6:60:
69:35:c4:5b:d1:18:6e:7d:d6:21:f2:71:c3:e7:5f:
7b:62:42:a8:43:ba:eb:d7:00:04:de:a3:6d:3c:32:
fe:26:0e:67:ce:d5:94:2d:ae:9c:72:4b:7b:f4:21:
73:9c:ef:66:b0:81:34:33:10:1a:6e:05:4b:16:ab:
bf:f6:6b:9c:4a:9e:d9:0b:5e:00:aa:7f:4e:83:80:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:39:FA:90:61:14:BD:DD:02:5F:1C:5F:A1:40:6F:80:DE:5E:AE
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/LlY5-pBhFL3dAl8cX6FAb4DeXq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.224.0/21
45.83.76.0/22
62.44.64.0/19
62.69.32.0/19
62.72.128.0/19
62.105.64.0/18
62.232.0.0/16
77.44.0.0/17
77.73.120.0/21
77.107.128.0/18
78.41.208.0/21
78.141.0.0/18
80.64.48.0/20
80.69.128.0/20
80.89.80.0/20
80.234.128.0/17
82.195.96.0/19
83.219.32.0/19
89.145.192.0/18
91.236.17.0/24
93.92.120.0/21
93.95.104.0/21
94.30.0.0/17
109.170.128.0/17
130.185.64.0/21
176.35.0.0/16
185.3.76.0/22
185.8.204.0/22
185.138.152.0/22
185.144.110.0/24
185.196.204.0/22
193.28.154.0/24
193.38.52.0/24
193.41.96.0/21
193.192.34.0/23
193.192.64.0/19
193.242.113.0/24
193.242.115.0-193.242.116.255
194.1.210.0/24
194.79.240.0/22
194.126.64.0/19
194.143.160.0/19
194.153.0.0/19
194.154.160.0/19
195.38.64.0/19
195.70.64.0/19
195.147.0.0/16
195.200.128.0/19
195.224.0.0/16
195.226.32.0/19
212.19.64.0/19
212.35.224.0/19
212.88.32.0/19
212.102.192.0/19
212.103.224.0/19
212.241.128.0/17
213.205.128.0/18
217.67.48.0/20
IPv6:
2001:b98::/29
2a00:b300::/29
2a03:4200::/32
2a04:b2c0::/29
2a07:2640::/29
Signature Algorithm: sha256WithRSAEncryption
2d:80:b3:07:d5:af:6a:54:bb:85:d2:e2:40:5e:b9:3f:9f:f8:
07:eb:c8:66:fa:9d:e3:c6:b0:6f:50:9a:86:81:a9:50:99:e7:
6c:71:64:c5:db:0c:f7:6f:f8:40:80:5e:9f:cc:24:06:48:5f:
b3:ff:0d:f9:68:47:66:55:57:8d:7b:2f:6f:fb:1b:80:df:04:
94:a9:11:cf:68:85:5f:aa:b1:96:98:76:3e:60:c0:29:11:98:
b8:16:fc:57:8c:1c:ce:fe:4b:ba:12:a6:18:b1:30:cb:73:a9:
14:89:df:6d:3d:46:7f:d7:2a:9e:4d:39:8e:fb:71:d5:bf:32:
2a:e1:0d:e7:3c:a5:6e:fe:48:3c:1d:d2:3a:09:3d:6a:28:85:
b7:4f:09:98:73:8d:d1:f3:93:d9:ab:ea:8e:bc:8b:14:e8:f2:
b2:64:05:4e:9c:72:2f:27:7a:8f:02:92:7a:d3:14:6a:e7:f8:
a6:1a:55:63:be:fb:86:ee:5f:06:37:95:99:b6:31:0f:a8:85:
2e:90:80:ec:89:ff:9e:fe:c3:2e:99:af:67:7f:05:55:2e:e9:
cb:b0:4c:7a:37:84:40:15:6d:c3:d5:2a:6b:f6:b0:01:c2:69:
3b:aa:0e:6a:30:19:f6:2c:02:b4:19:8e:5d:65:1a:4e:a7:0b:
13:ca:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:10 2025 by rpki-client on console.sobornost.net