Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NVVWs30oDrhq7Tso7iIw04SnCcc.roa
File: NVVWs30oDrhq7Tso7iIw04SnCcc.roa (raw, json)
Hash identifier: 8i485fYUWIiMguIbdoF7yS2waNamEdGPOZHhXaNA950=
Subject key identifier: 35:55:56:B3:7D:28:0E:B8:6A:ED:3B:28:EE:22:30:D3:84:A7:09:C7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195AEB7B4F339122D36E61926448A5E9F61
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NVVWs30oDrhq7Tso7iIw04SnCcc.roa
Signing time: Wed 19 Mar 2025 14:03:49 +0000
ROA not before: Wed 19 Mar 2025 14:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:b7:b4:f3:39:12:2d:36:e6:19:26:44:8a:5e:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 19 14:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=355556b37d280eb86aed3b28ee2230d384a709c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:48:2a:f0:db:31:4c:72:a9:64:60:ca:8c:
34:15:b8:5c:9e:3f:91:5b:8c:2f:db:7d:6b:f2:5e:
cc:47:cc:a4:93:a2:97:40:dd:11:c5:84:cf:f7:7a:
3c:aa:4f:2d:a8:2b:ec:c0:b2:ba:96:49:e6:3b:e9:
5d:08:9c:99:a4:59:13:ab:e4:ab:5e:f1:56:c5:42:
2a:24:4b:08:a1:06:70:d7:01:26:9c:3c:f1:87:68:
ef:c4:dd:87:25:8b:ad:bf:a2:f6:e4:6a:f8:4f:3f:
d8:5c:9d:dd:84:08:a6:b1:72:cb:75:9e:90:ed:a0:
19:49:42:1e:56:21:25:b5:e1:57:ce:3e:14:2f:83:
06:6a:3e:b6:1f:84:81:8a:a0:d6:b0:6c:f1:05:66:
8f:fa:2c:03:cd:00:b5:68:b5:af:19:66:c4:4f:40:
7b:79:f1:98:73:5d:c1:ff:2c:b8:8e:bf:c6:14:05:
30:77:43:55:58:7c:65:df:16:59:fc:61:9c:40:b1:
e9:47:e8:51:a8:40:2b:43:40:db:5c:f3:90:01:f0:
60:b7:43:ce:41:ed:66:4a:99:16:c7:12:53:a9:06:
75:5e:79:16:14:3a:46:59:8d:4e:1e:4c:d0:03:fd:
14:87:16:c5:e8:3a:2c:0f:13:29:ac:4e:4f:dc:5a:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:56:B3:7D:28:0E:B8:6A:ED:3B:28:EE:22:30:D3:84:A7:09:C7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NVVWs30oDrhq7Tso7iIw04SnCcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d7:45:64:77:4d:df:cb:3d:e4:7b:56:06:97:91:85:d1:14:
b8:75:f8:1c:4c:5f:65:63:44:2c:32:74:5e:0d:04:67:95:fe:
c9:da:a4:5e:96:18:19:b8:88:e2:17:b3:86:d5:22:b8:a7:0c:
11:a4:85:7b:32:dd:21:38:75:f3:67:13:32:c2:4f:b3:e2:e8:
1e:20:84:47:5c:c2:eb:e7:0c:7b:d2:00:7f:c1:22:f0:13:0a:
37:9d:59:dd:37:fc:e5:65:f2:00:d0:aa:a1:a1:a1:8a:ab:1c:
c9:32:70:a1:67:91:5d:7d:dd:31:ea:a2:4c:f4:14:e2:26:6b:
5b:fc:dc:bd:c7:53:47:e7:4b:ee:c4:89:ca:47:a4:ec:5d:38:
70:2c:13:36:9f:c0:39:af:65:7d:3c:fd:7b:46:35:26:cb:c2:
fc:2e:bd:f7:b8:1f:27:95:be:c6:15:4d:30:17:35:b0:42:d3:
1d:19:90:8f:dc:0c:66:50:58:d7:0e:4d:bf:70:ca:6e:70:ca:
bc:c0:89:c8:5f:7f:d8:a6:92:7e:c9:5d:7d:61:5b:b3:bd:90:
f3:12:9c:6e:8b:0f:fc:49:5f:ca:a5:48:99:a9:8e:7b:78:5e:
9e:0e:de:37:d0:2d:d8:ca:6b:4f:e5:d2:b0:3f:ef:23:a4:0c:
d0:76:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:28 2025 by rpki-client on console.sobornost.net