Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Svb2VoDTp52urG9DtKON8TYeirM.roa
File: Svb2VoDTp52urG9DtKON8TYeirM.roa (raw, json)
Hash identifier: NIVDDY5idUm3s+7sb/MuoPT8NaPRdUeQbr+5Kqpq1xU=
Subject key identifier: 4A:F6:F6:56:80:D3:A7:9D:AE:AC:6F:43:B4:A3:8D:F1:36:1E:8A:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019600A00842D8C4C2D35C1C2D6A86E4BB79
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Svb2VoDTp52urG9DtKON8TYeirM.roa
Signing time: Fri 04 Apr 2025 11:46:49 +0000
ROA not before: Fri 04 Apr 2025 11:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.43.146.0/24 maxlen: 24
104.167.0.0/24 maxlen: 24
104.222.169.0/24 maxlen: 24
104.222.170.0/24 maxlen: 24
104.222.171.0/24 maxlen: 24
104.222.172.0/24 maxlen: 24
104.222.173.0/24 maxlen: 24
104.222.174.0/24 maxlen: 24
104.222.175.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
104.239.13.0/24 maxlen: 24
104.239.16.0/22 maxlen: 22
104.239.20.0/22 maxlen: 22
104.239.32.0/22 maxlen: 22
104.239.36.0/22 maxlen: 22
104.239.54.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.243.193.0/24 maxlen: 24
104.243.194.0/24 maxlen: 24
104.243.195.0/24 maxlen: 24
104.243.196.0/24 maxlen: 24
104.243.197.0/24 maxlen: 24
104.243.198.0/24 maxlen: 24
104.243.207.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
216.173.108.0/24 maxlen: 24
216.173.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:a0:08:42:d8:c4:c2:d3:5c:1c:2d:6a:86:e4:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 11:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af6f65680d3a79daeac6f43b4a38df1361e8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:73:b6:e1:79:ea:a4:d1:5d:79:90:af:54:
e4:7b:71:06:c0:05:04:14:ea:8b:11:e0:26:97:52:
00:38:09:c1:38:a0:9a:50:1a:69:28:31:52:dc:73:
ed:8a:5b:ee:46:55:c9:18:fa:82:48:ae:d4:94:b0:
98:98:2d:09:12:b3:14:dc:b1:55:09:ca:20:92:52:
df:db:e0:d6:2f:da:71:87:ad:3c:c9:41:c1:15:e2:
04:49:a1:74:c2:1c:23:ae:af:b7:97:fa:8e:f9:1c:
09:21:fb:9e:44:34:01:1d:65:6a:85:68:b5:41:f7:
59:ad:49:3c:68:43:80:bd:45:83:fb:b4:e6:5d:74:
52:bb:4e:8e:b8:0c:60:b0:ef:2b:01:84:10:8b:55:
7e:8a:c9:89:9f:d9:f1:3b:52:8e:68:49:ae:94:ef:
59:68:3a:ca:3f:c7:96:96:8c:56:79:0a:d1:e2:88:
03:10:33:b9:05:d4:32:3e:1e:23:b7:7d:6a:19:31:
75:fa:ad:8b:de:05:00:c3:9e:d3:85:ed:52:d3:07:
05:7f:aa:3e:34:56:1e:8d:3a:2f:3d:2f:76:35:a8:
e3:94:19:59:f6:0a:f9:86:d1:81:a8:89:6e:d2:71:
91:04:06:5a:e2:cb:82:4c:81:c2:9f:a9:69:13:12:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:F6:56:80:D3:A7:9D:AE:AC:6F:43:B4:A3:8D:F1:36:1E:8A:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Svb2VoDTp52urG9DtKON8TYeirM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.146.0/24
104.167.0.0/24
104.222.169.0-104.222.175.255
104.233.20.0/24
104.239.13.0/24
104.239.16.0/21
104.239.32.0/21
104.239.54.0/24
104.239.57.0/24
104.239.82.0/24
104.239.90.0-104.239.93.255
104.239.98.0/24
104.243.193.0-104.243.198.255
104.243.207.0/24
216.173.80.0/23
216.173.88.0/23
216.173.108.0/24
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
15:54:11:23:01:53:8b:5d:f5:35:20:7d:b5:10:89:47:aa:b8:
d0:fe:ba:24:c2:43:00:a9:bb:a7:2b:3a:a2:c8:86:46:98:8c:
87:e5:e8:89:15:05:e0:4c:3c:71:7a:60:80:07:59:6b:b5:6d:
e8:7b:77:2e:ca:2d:64:2a:e7:ec:78:7a:2a:43:52:59:38:1e:
f6:23:e4:f2:5b:fb:d3:24:cd:1f:41:48:47:7f:cc:79:db:cc:
1f:23:dc:43:1c:83:1d:6e:a9:87:94:66:7a:5e:73:b2:11:1d:
bb:9d:51:25:db:5d:70:6a:a9:19:0d:cc:39:49:31:0b:96:6a:
6b:66:fa:2d:ef:0e:44:d3:1c:57:f0:30:a8:c6:86:49:3e:b9:
a8:79:1c:be:62:bc:3d:47:bc:a2:70:42:22:0b:ca:a3:ad:d1:
74:87:77:f4:51:60:08:a0:32:34:d3:f3:b7:b6:48:78:4a:65:
6c:f2:6e:f1:6c:08:5b:e4:1a:e8:74:0a:83:1c:ef:a4:b5:df:
3f:ea:f9:90:08:72:92:82:01:e3:8c:0c:64:8c:1d:09:c4:dc:
b7:51:e8:d0:3f:7c:c6:ce:98:af:69:be:ce:e4:72:4c:6d:90:
eb:ad:e1:c6:89:cc:32:38:34:d9:6d:43:2b:3b:40:d6:be:fc:
55:86:4b:54
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZYAoAhC2MTC01wcLWqG5Lt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNDA0MTE0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY2ZjY1NjgwZDNhNzlkYWVhYzZmNDNiNGEzOGRmMTM2MWU4YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlNztuF56qTRXXmQr1Tke3EGwAUE
FOqLEeAml1IAOAnBOKCaUBppKDFS3HPtilvuRlXJGPqCSK7UlLCYmC0JErMU3LFV
CcogklLf2+DWL9pxh608yUHBFeIESaF0whwjrq+3l/qO+RwJIfueRDQBHWVqhWi1
QfdZrUk8aEOAvUWD+7TmXXRSu06OuAxgsO8rAYQQi1V+ismJn9nxO1KOaEmulO9Z
aDrKP8eWloxWeQrR4ogDEDO5BdQyPh4jt31qGTF1+q2L3gUAw57The1S0wcFf6o+
NFYejTovPS92NajjlBlZ9gr5htGBqIlu0nGRBAZa4suCTIHCn6lpExJ0zwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFEr29laA06edrqxvQ7SjjfE2HoqzMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvU3ZiMlZvRFRwNTJ1ckc5RHRLT044VFllaXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAAt
K5IDBABopwAwDAMEAGjeqQMEBGjeoAMEAGjpFAMEAGjvDQMEA2jvEAMEA2jvIAME
AGjvNgMEAGjvOQMEAGjvUjAMAwQBaO9aAwQBaO9cAwQAaO9iMAwDBABo88EDBABo
88YDBABo888DBAHYrVADBAHYrVgDBADYrWwDBAHYrXowDQYJKoZIhvcNAQELBQAD
ggEBABVUESMBU4td9TUgfbUQiUequND+uiTCQwCpu6crOqLIhkaYjIfl6IkVBeBM
PHF6YIAHWWu1beh7dy7KLWQq5+x4eipDUlk4HvYj5PJb+9MkzR9BSEd/zHnbzB8j
3EMcgx1uqYeUZnpec7IRHbudUSXbXXBqqRkNzDlJMQuWamtm+i3vDkTTHFfwMKjG
hkk+uah5HL5ivD1HvKJwQiILyqOt0XSHd/RRYAigMjTT87e2SHhKZWzybvFsCFvk
Guh0CoMc76S13z/q+ZAIcpKCAeOMDGSMHQnE3LdR6NA/fMbOmK9pvs7kckxtkOut
4caJzDI4NNltQys7QNa+/FWGS1Q=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net