Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gk39V-0wQRCEQs8yrwk47wH43dU.roa
File: gk39V-0wQRCEQs8yrwk47wH43dU.roa (raw, json)
Hash identifier: VpaUKvgvEztvqZ8SHQ+c0Vi1knhmXOcNJ7GHDVuXNfo=
Subject key identifier: 82:4D:FD:57:ED:30:41:10:84:42:CF:32:AF:09:38:EF:01:F8:DD:D5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019537F6E9A8B39AA9F19979C646ED3831C2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gk39V-0wQRCEQs8yrwk47wH43dU.roa
Signing time: Mon 24 Feb 2025 12:38:03 +0000
ROA not before: Mon 24 Feb 2025 12:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:f6:e9:a8:b3:9a:a9:f1:99:79:c6:46:ed:38:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 24 12:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=824dfd57ed3041108442cf32af0938ef01f8ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:d0:91:cd:2a:6b:b4:4e:4c:41:fd:e5:5c:
14:4d:f0:82:33:3b:e1:6a:2c:98:bb:04:24:ed:ef:
ef:70:3d:a2:ad:3a:25:f4:7b:66:98:ea:4e:82:d2:
0d:21:a8:9e:f4:f9:e9:f3:73:7c:47:c8:f3:61:56:
23:11:75:42:a7:cf:33:df:8e:23:1a:65:b1:b3:10:
1f:a6:61:a8:44:df:02:40:b8:bf:f2:fd:a3:98:6b:
55:ae:a3:dc:97:33:89:0e:08:09:86:bb:96:a3:f0:
ef:a6:99:d7:d4:a6:c5:7a:29:91:ce:62:31:55:2e:
4b:32:c4:21:9a:5b:2e:b9:d0:21:cd:c5:c5:ee:8c:
34:85:09:33:d7:03:27:7a:c0:9a:c2:43:9f:dc:9b:
12:89:85:19:ea:be:2b:0a:49:a4:ba:25:16:90:6c:
0b:8a:2e:4f:4b:9d:54:4b:9d:9b:09:f2:5c:d4:f8:
64:a2:cd:24:98:3e:96:1e:53:55:78:43:a5:b8:df:
c9:22:b1:17:7e:b0:14:09:58:57:29:c5:5c:98:d8:
51:db:71:b3:62:9f:1f:e8:98:a3:74:c8:48:6e:07:
57:a3:f7:c3:c1:47:0a:e6:dc:c4:01:6a:d1:c0:3d:
2d:e5:50:4f:8f:88:e6:29:4b:6c:63:3d:e0:39:81:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:FD:57:ED:30:41:10:84:42:CF:32:AF:09:38:EF:01:F8:DD:D5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gk39V-0wQRCEQs8yrwk47wH43dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:69:63:33:8d:8f:94:0e:4f:ef:fa:7c:03:cc:1c:a7:3f:f3:
e6:49:23:59:f3:d1:82:4a:78:47:c2:16:23:16:16:66:3a:68:
b1:6f:f1:8c:e3:ea:06:fd:0b:5a:f9:16:dd:e6:f3:24:3c:70:
00:12:6c:ef:aa:16:7c:aa:80:ea:e6:d6:c4:93:7b:ab:73:82:
97:3e:67:1c:7a:56:ac:5f:dd:84:ca:d8:f7:01:a1:b6:91:2b:
9e:54:a5:41:a4:ee:8e:30:34:c3:95:9c:65:10:f8:04:3d:fd:
a0:fa:39:ee:86:89:e6:3e:00:ba:41:16:20:42:bc:3a:bc:ff:
da:89:dd:f0:31:41:12:29:5c:40:f3:46:27:71:44:2b:c7:cc:
24:2b:4b:43:1f:ca:0c:9c:1d:d4:37:a9:93:5d:fb:ae:ac:7a:
0b:5b:b4:af:3a:17:8b:a3:e0:18:11:40:f7:a2:eb:ee:fd:87:
7c:46:e3:5d:92:17:fb:34:5b:2d:a8:27:b7:49:fd:01:ca:75:
fb:fe:e9:74:4b:a0:4f:f9:67:f8:aa:84:6e:23:87:32:a1:04:
f7:ce:a7:00:29:7b:a2:6c:e2:d1:3f:90:36:f2:f7:1a:46:11:
db:d2:1c:51:b1:b8:f5:cb:40:b1:23:d0:5c:ed:e7:4b:6a:25:
dd:8c:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:54 2025 by rpki-client on console.sobornost.net