Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/8iXU5D7pqB0d57qygRs63MZknmk.roa
File: 8iXU5D7pqB0d57qygRs63MZknmk.roa (raw, json)
Hash identifier: XLxO/uwC+4ZlL0rXFqAajGUTAt+XMI9UYoDlUJW9JS8=
Subject key identifier: F2:25:D4:E4:3E:E9:A8:1D:1D:E7:BA:B2:81:1B:3A:DC:C6:64:9E:69
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 0195E7A51367AA8A140D58D4854AB80BA1E5
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/8iXU5D7pqB0d57qygRs63MZknmk.roa
Signing time: Sun 30 Mar 2025 15:21:50 +0000
ROA not before: Sun 30 Mar 2025 15:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58065
IP address blocks: 5.157.6.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
5.157.19.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
5.157.26.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
107.150.91.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
2a02:5740:4::/48 maxlen: 48
2a02:5740:9::/48 maxlen: 48
2a02:5740:14::/48 maxlen: 48
2a02:5740:24::/48 maxlen: 48
2a02:5740:26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:a5:13:67:aa:8a:14:0d:58:d4:85:4a:b8:0b:a1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Mar 30 15:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f225d4e43ee9a81d1de7bab2811b3adcc6649e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:5b:d7:18:96:b8:00:13:60:cd:64:a3:23:
d9:61:30:80:c7:fd:0f:44:61:f5:8d:72:4d:25:0a:
85:9b:e3:66:19:52:5f:34:06:f4:d6:5d:c5:c2:b6:
23:b9:af:08:0c:a5:9d:26:d1:c0:6d:12:43:14:ae:
08:a7:b8:33:3f:08:44:ad:2c:b9:40:bc:88:6d:18:
0e:30:31:9a:40:9b:f1:79:08:8a:3c:94:e4:96:5d:
52:fa:de:11:ef:70:33:ab:4e:55:df:12:48:ea:ef:
2b:99:eb:ec:09:a5:57:80:c3:be:01:01:b1:6b:45:
85:dc:d1:ff:db:4b:93:cf:2b:58:ac:dc:86:82:32:
95:b3:1f:e4:95:ea:38:ff:0a:e5:79:8a:7f:3a:15:
14:fc:97:b8:28:4b:da:81:4e:af:84:13:04:10:69:
b6:bf:26:9f:dd:55:fa:fb:79:76:2f:a6:ee:c5:54:
93:6d:ec:36:ef:52:4c:fb:f7:66:dc:d0:bc:b7:54:
8f:fb:e0:d8:a0:1e:e1:a5:c1:b4:c9:b6:d1:09:a7:
42:bf:72:90:41:ad:fe:0c:76:1e:aa:a5:79:bf:ef:
50:e3:78:44:35:67:ab:45:b5:23:47:08:2e:29:8f:
b2:bf:05:25:19:62:a8:e5:81:d8:75:4f:0d:a6:c3:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:D4:E4:3E:E9:A8:1D:1D:E7:BA:B2:81:1B:3A:DC:C6:64:9E:69
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/8iXU5D7pqB0d57qygRs63MZknmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.19.0/24
5.157.21.0/24
5.157.23.0-5.157.24.255
5.157.26.0/24
5.157.29.0/24
5.157.32.0-5.157.34.255
5.157.37.0/24
5.157.43.0/24
5.157.51.0/24
5.157.53.0/24
5.157.55.0/24
5.157.57.0/24
23.92.115.0-23.92.116.255
23.92.126.0/24
37.72.186.0/24
104.160.16.0/23
107.150.64.0/23
107.150.67.0/24
107.150.69.0-107.150.71.255
107.150.88.0/22
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
IPv6:
2a02:5740:4::/48
2a02:5740:9::/48
2a02:5740:14::/48
2a02:5740:24::/48
2a02:5740:26::/48
Signature Algorithm: sha256WithRSAEncryption
16:20:c1:72:09:92:68:ca:0f:b8:1d:65:1a:32:71:f0:f5:c5:
80:0c:f3:73:e8:b9:99:b0:b2:8b:ee:f1:83:58:f4:e1:b7:1e:
3c:81:fe:17:c0:9a:26:6d:22:99:d7:b7:74:23:4d:93:40:8c:
77:4f:10:d7:36:ca:9d:4c:9b:76:e5:83:2d:eb:35:c0:f6:3d:
fe:5e:38:29:6e:1c:b3:3e:f4:08:c7:19:2e:98:a0:bb:cd:eb:
b8:f8:bc:37:7b:54:32:ad:70:4f:fe:15:a8:04:86:65:15:3b:
c7:22:e1:07:be:79:a4:a1:ea:10:53:88:b6:77:3c:dd:3d:1b:
b9:3c:1d:d7:33:2c:3a:55:b8:5a:29:c3:f9:9f:6c:a0:aa:75:
a7:58:db:73:de:1e:4a:63:73:a3:c5:eb:18:2c:e1:0c:a2:c0:
31:0d:6e:d0:21:52:5a:d9:eb:a9:e9:22:31:47:d9:f1:0e:94:
38:7d:66:23:56:32:b7:7a:de:3c:0e:cd:06:89:b3:61:72:3d:
f5:14:e8:2e:6a:7b:f6:9a:5f:87:57:11:d9:8f:6d:9f:d1:a5:
e8:8b:6a:d5:3a:9a:f8:4c:1a:37:f9:65:f4:2d:1b:ff:0c:1a:
31:75:2c:c5:fd:9e:38:6a:37:a3:9d:77:10:bc:a7:d6:3c:bb:
e2:ef:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net