Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9VweuuOh-IHYobuH1eORno5nbKs.roa
File: 9VweuuOh-IHYobuH1eORno5nbKs.roa (raw, json)
Hash identifier: SGwWMCOgwDbgjcxVIwBfWr0J9pw1LVWJgSYOAFlBg3A=
Subject key identifier: F5:5C:1E:BA:E3:A1:F8:81:D8:A1:BB:87:D5:E3:91:9E:8E:67:6C:AB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0195ED31F8AD58BBCCB0E97B9F2A9D8739F0
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9VweuuOh-IHYobuH1eORno5nbKs.roa
Signing time: Mon 31 Mar 2025 17:13:49 +0000
ROA not before: Mon 31 Mar 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:31:f8:ad:58:bb:cc:b0:e9:7b:9f:2a:9d:87:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 31 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55c1ebae3a1f881d8a1bb87d5e3919e8e676cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:b6:1b:43:b1:e2:94:f5:6c:fc:f9:f8:5b:
89:76:25:80:58:85:88:51:db:6e:3e:33:7b:24:46:
ff:45:97:d6:91:e2:36:f8:27:57:ac:ee:af:18:86:
57:4c:55:51:5e:21:48:a9:15:4f:c9:ec:70:7c:e1:
76:4f:bc:74:f6:fb:20:cc:85:20:1b:74:22:54:2b:
5d:2b:b7:c9:33:36:d8:0a:b9:12:33:97:1e:3c:98:
5a:ec:f3:dc:07:29:43:bd:25:58:57:80:14:45:89:
43:0b:16:bb:d9:ab:dd:6e:78:6a:2d:91:b1:07:df:
ba:cd:53:9a:88:e7:aa:76:4d:5e:08:bb:d7:57:2c:
0b:db:ee:1a:2b:e4:d2:86:51:c8:82:3b:0b:a2:f2:
83:7b:ee:96:ef:83:ce:18:f7:61:cd:17:b2:41:ef:
79:ca:d2:56:11:87:fb:9f:00:a6:5a:7b:4f:e0:40:
49:a9:91:4c:c4:60:0d:55:37:35:8c:ba:39:3e:57:
99:74:aa:a1:c1:e5:d6:32:a3:ba:12:30:8a:3d:70:
26:3a:e0:ee:e8:39:c4:d8:78:2f:08:dc:7a:df:ed:
21:be:98:f5:80:b2:5f:a1:84:29:25:56:88:a4:87:
33:ab:ca:40:58:99:77:87:8f:72:53:1f:22:78:80:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:1E:BA:E3:A1:F8:81:D8:A1:BB:87:D5:E3:91:9E:8E:67:6C:AB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9VweuuOh-IHYobuH1eORno5nbKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/22
45.43.154.0/24
45.43.158.0/23
45.43.161.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.54.0-104.239.65.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.93.255
Signature Algorithm: sha256WithRSAEncryption
1c:4e:ce:48:96:dc:0d:ca:d5:58:be:c7:40:da:c3:fb:17:eb:
4d:8c:cd:91:3c:b1:e5:e1:ed:d7:b1:84:b2:0e:e4:34:d3:25:
bc:bd:e4:f0:6b:9e:0e:e9:98:f6:59:7d:13:5f:67:74:97:8f:
4f:d8:e7:28:15:19:40:ea:c4:6e:ea:76:ba:ad:43:ff:a1:82:
01:a6:11:12:ec:a0:27:e6:73:52:ef:6a:b1:5d:48:0f:1c:d4:
70:f8:44:3a:1f:8e:ff:2c:14:06:d3:b1:e7:c3:36:fe:f4:f4:
83:27:44:f2:85:a9:1d:6f:12:4e:bd:61:5d:14:68:07:9a:5f:
8b:00:b3:c0:b5:f2:e5:e7:60:97:7f:95:07:50:72:30:84:11:
17:8c:90:81:ee:62:f6:0d:39:7d:8b:38:3c:e2:79:f0:a4:76:
d3:53:f9:a1:27:97:70:49:24:57:55:47:74:8a:1d:1b:ed:f8:
d7:4b:3b:36:d8:37:f9:e6:36:7c:25:02:7f:46:63:c1:cd:31:
3b:ee:cc:28:ff:41:7a:72:26:21:1c:6e:ce:84:98:5c:2f:3b:
1f:16:f2:6e:12:4a:c2:89:ff:cb:b6:64:ac:b1:2f:56:fc:5f:
23:08:fa:fc:c1:28:75:c2:67:8c:04:13:b6:50:2a:2f:94:a3:
da:81:b2:ab
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAZXtMfitWLvMsOl7nyqdhznwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMzMxMTcxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTVjMWViYWUzYTFmODgxZDhhMWJiODdkNWUzOTE5ZThlNjc2Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu022G0Ox4pT1bPz5+FuJdiWAWIWI
UdtuPjN7JEb/RZfWkeI2+CdXrO6vGIZXTFVRXiFIqRVPyexwfOF2T7x09vsgzIUg
G3QiVCtdK7fJMzbYCrkSM5cePJha7PPcBylDvSVYV4AURYlDCxa72avdbnhqLZGx
B9+6zVOaiOeqdk1eCLvXVywL2+4aK+TShlHIgjsLovKDe+6W74POGPdhzReyQe95
ytJWEYf7nwCmWntP4EBJqZFMxGANVTc1jLo5PleZdKqhweXWMqO6EjCKPXAmOuDu
6DnE2HgvCNx63+0hvpj1gLJfoYQpJVaIpIczq8pAWJl3h49yUx8ieICrAQIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFPVcHrrjofiB2KG7h9XjkZ6OZ2yrMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvOVZ3ZXV1T2gtSUhZb2J1SDFlT1JubzVuYktzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAIt
K5QDBAAtK5oDBAEtK54DBAAtK6EDBANo3rADBABo3r0DBAFo6QgDBABo6TsDBABo
7gYwDAMEAGjuCwMEAWjuDAMEAGjvCAMEAGjvDAMEAGjvDgMEAGjvHTAMAwQBaO82
AwQBaO9AMAwDBANo+QgDBANo+RAwDAMEAWj5KgMEAGj5NjAMAwQB2K1aAwQB2K1c
MA0GCSqGSIb3DQEBCwUAA4IBAQAcTs5IltwNytVYvsdA2sP7F+tNjM2RPLHl4e3X
sYSyDuQ00yW8veTwa54O6Zj2WX0TX2d0l49P2OcoFRlA6sRu6na6rUP/oYIBphES
7KAn5nNS72qxXUgPHNRw+EQ6H47/LBQG07Hnwzb+9PSDJ0TyhakdbxJOvWFdFGgH
ml+LALPAtfLl52CXf5UHUHIwhBEXjJCB7mL2DTl9izg84nnwpHbTU/mhJ5dwSSRX
VUd0ih0b7fjXSzs22Df55jZ8JQJ/RmPBzTE77swo/0F6ciYhHG7OhJhcLzsfFvJu
EkrCif/LtmSssS9W/F8jCPr8wSh1wmeMBBO2UCovlKPagbKr
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:44 2025 by rpki-client on console.sobornost.net