Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IPN1W7vTZDxPfJWhxcvJHyy7V_A.roa
File: IPN1W7vTZDxPfJWhxcvJHyy7V_A.roa (raw, json)
Hash identifier: hfbSqZ+XQiYmyVE1i3dMoQn4KEhws8lbqN9+lkGcL3Y=
Subject key identifier: 20:F3:75:5B:BB:D3:64:3C:4F:7C:95:A1:C5:CB:C9:1F:2C:BB:57:F0
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018F01D0CB9573AB133F6CAC76784AC2BE10
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IPN1W7vTZDxPfJWhxcvJHyy7V_A.roa
Signing time: Sun 21 Apr 2024 18:00:11 +0000
ROA not before: Sun 21 Apr 2024 18:00:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.132.0/22 maxlen: 22
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.179.0/24 maxlen: 24
82.140.180.0/23 maxlen: 23
82.140.184.0/22 maxlen: 22
82.140.188.0/24 maxlen: 24
82.140.190.0/23 maxlen: 23
84.46.128.0/19 maxlen: 19
84.46.160.0/21 maxlen: 21
84.46.168.0/23 maxlen: 23
84.46.172.0/22 maxlen: 22
84.46.176.0/20 maxlen: 20
84.46.192.0/21 maxlen: 21
84.46.201.0/24 maxlen: 24
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.0.0/23 maxlen: 23
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.25.0/24 maxlen: 24
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/23 maxlen: 23
86.38.40.0/21 maxlen: 21
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.146.0/23 maxlen: 24
86.38.148.0/23 maxlen: 23
86.38.150.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.208.0/22 maxlen: 22
86.38.212.0/23 maxlen: 23
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.222.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.229.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.233.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.236.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
86.38.244.0/23 maxlen: 23
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.165.0/24 maxlen: 24
89.117.166.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.220.0/23 maxlen: 23
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.247.0/24 maxlen: 24
89.117.248.0/23 maxlen: 23
89.117.248.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.253.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
217.9.244.0/23 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:01:d0:cb:95:73:ab:13:3f:6c:ac:76:78:4a:c2:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 21 18:00:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f3755bbbd3643c4f7c95a1c5cbc91f2cbb57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:32:80:35:c0:19:23:13:95:a2:8f:b6:8a:
c2:1b:61:96:60:12:69:95:3d:03:53:ef:5f:32:99:
5b:50:1c:a2:60:55:90:cb:9c:ee:4f:63:4a:52:4e:
ca:4f:04:12:7a:aa:68:89:4d:77:e1:e1:cd:63:b4:
e4:bf:d7:cf:86:ca:2f:15:21:cc:d5:5f:bc:8d:86:
26:37:ca:c1:5b:a9:a4:13:fe:7a:c5:82:67:f5:c3:
cf:b1:a2:a6:91:4d:58:14:8d:67:67:3a:2c:d1:67:
2a:ea:8d:4b:a8:22:8b:a3:dc:ac:08:ab:98:25:9d:
2d:90:48:07:c7:a6:d6:39:16:be:56:ad:2a:2c:58:
31:c4:dc:07:33:39:0d:fb:4e:7f:10:a3:74:d7:d2:
7b:30:e3:7d:e7:d5:48:29:7a:5c:9b:bd:15:9a:eb:
ba:a9:f9:06:b6:e5:74:f6:4d:d5:cc:21:78:0a:5f:
6b:a2:4a:cf:b7:50:a3:6d:ae:e5:d0:97:c1:4d:27:
25:56:a2:8a:43:d1:3b:04:e1:3b:54:e7:63:f1:fe:
49:5c:77:95:48:25:fe:29:ee:6c:1e:4c:01:26:8e:
4d:fc:38:8d:19:c2:96:92:fe:00:da:ec:d0:ca:b3:
9a:67:dc:72:c7:c3:23:46:e6:c6:08:97:00:44:80:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:75:5B:BB:D3:64:3C:4F:7C:95:A1:C5:CB:C9:1F:2C:BB:57:F0
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IPN1W7vTZDxPfJWhxcvJHyy7V_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0/23
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.160.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.192.0/21
86.38.201.0/24
86.38.208.0-86.38.213.255
86.38.215.0/24
86.38.222.0/23
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.213.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.251.255
Signature Algorithm: sha256WithRSAEncryption
55:15:70:60:9c:5c:82:d5:f9:19:2c:b0:eb:aa:3b:fb:81:73:
15:37:b3:b2:37:6c:51:d3:8e:bf:c5:33:50:30:b8:19:64:7d:
fc:0e:c1:1b:b9:36:83:f7:67:2f:10:34:6f:16:11:aa:0e:f9:
06:3b:d2:14:da:4d:40:89:7e:35:dc:c0:f5:db:cf:c7:e7:1a:
9c:36:2e:36:72:02:a7:92:e5:6b:54:d0:c7:e0:f8:5e:56:a9:
e0:e1:77:b2:5f:aa:2b:94:b7:39:91:ea:fa:3d:e1:92:08:18:
0e:fb:9c:78:3b:9c:c0:dd:da:ce:0c:a7:39:88:db:99:4f:9e:
20:47:89:08:7a:02:e1:dc:73:46:7d:66:a7:c3:e7:39:c2:4c:
a9:6d:3a:0c:32:f7:60:bd:9a:6e:1c:09:e7:f7:73:28:84:4c:
d6:1e:9f:b6:0b:41:77:6b:28:2a:19:77:72:7b:3f:fc:fd:91:
7c:b7:25:37:76:9e:64:a3:b8:af:a0:4e:38:80:65:c4:57:9c:
0c:2d:db:26:dd:84:bd:8d:1e:16:f4:41:61:a1:2a:a5:69:0e:
dd:22:a1:50:c0:61:13:49:8c:d6:11:a3:2b:ad:fb:1d:b1:6d:
6a:c2:cb:05:97:7e:fe:ca:95:aa:af:f6:4e:3e:15:89:2e:8e:
b1:31:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:17:06 2024 by rpki-client on console.sobornost.net