Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_QCxwAq-k7LQw-EmdOYTMT_eliA.roa
File: _QCxwAq-k7LQw-EmdOYTMT_eliA.roa (raw, json)
Hash identifier: xW9tEMrch7FL9cOEEkUAJ5gQQWQOkRdx57dNWkZzRGs=
Subject key identifier: FD:00:B1:C0:0A:BE:93:B2:D0:C3:E1:26:74:E6:13:31:3F:DE:96:20
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01960FE295C193BCDF03B88916F82E4B7C1B
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_QCxwAq-k7LQw-EmdOYTMT_eliA.roa
Signing time: Mon 07 Apr 2025 10:53:49 +0000
ROA not before: Mon 07 Apr 2025 10:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.12.0/24 maxlen: 32
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e2:95:c1:93:bc:df:03:b8:89:16:f8:2e:4b:7c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 7 10:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd00b1c00abe93b2d0c3e12674e613313fde9620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:f5:d5:00:8f:0a:06:34:db:37:a6:71:5c:
20:9e:be:74:5f:96:8e:31:64:9e:3e:4d:df:ff:f0:
4e:74:75:3b:b9:bc:bb:6c:a5:f9:b6:da:84:26:3b:
c9:60:6a:81:f7:20:d9:d3:3e:59:55:8e:77:b5:67:
aa:68:38:56:a3:b8:4f:b1:06:9e:09:be:90:7c:61:
68:de:97:ea:5f:97:33:aa:a0:c4:83:e2:45:dd:73:
7c:22:87:7e:76:b6:19:bb:35:9f:54:af:97:65:78:
e4:98:91:49:60:b7:59:d3:bc:80:4b:7e:66:fe:8b:
2c:c2:e9:ed:96:18:51:9c:a5:8d:36:d1:4f:7c:81:
a2:f2:c5:dc:cc:d3:a2:ee:55:6a:85:d1:54:5b:13:
1e:91:c2:5a:24:49:25:78:cc:43:74:31:d8:ed:c6:
e7:b3:fa:fe:f9:d6:30:aa:47:2d:12:d8:f6:7b:ba:
d5:db:83:97:4c:b8:ea:55:15:76:6b:ac:a2:56:68:
40:cb:7e:8a:c0:e0:df:5c:40:91:db:56:e3:0c:53:
d1:cf:7a:f6:02:2f:f6:6f:59:04:e9:18:7e:77:20:
92:78:d0:fb:bf:c3:e1:b3:ab:18:4a:da:17:43:19:
64:c8:c5:cd:36:a5:68:0a:ed:fe:5e:30:d3:4b:c4:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:B1:C0:0A:BE:93:B2:D0:C3:E1:26:74:E6:13:31:3F:DE:96:20
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_QCxwAq-k7LQw-EmdOYTMT_eliA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
81:d4:41:c1:f7:0a:73:c9:74:1e:5d:48:c6:27:c2:87:49:ae:
a1:af:30:5c:7b:c1:f1:fc:e2:4f:5f:1a:02:8f:b9:64:4a:39:
9c:3c:94:4b:07:53:59:d0:88:55:7f:0b:0b:24:64:00:71:04:
d8:7d:25:bc:11:1d:e9:4e:55:ac:15:8c:2b:d8:e9:37:6a:38:
b5:ae:1f:4f:f5:8a:0f:44:3d:32:0e:32:90:b1:03:3d:ea:56:
22:69:9c:d2:c3:9a:33:65:96:37:25:ce:8f:0c:53:f9:5a:05:
d1:71:d4:f1:62:f7:6d:0b:de:bd:cb:1b:b2:c4:28:d0:18:ba:
e5:38:63:c6:22:6c:95:26:3d:e2:33:33:e4:af:10:0d:8a:e7:
64:f3:b5:a8:4a:f4:6f:90:73:b4:bc:87:e9:b5:b7:d3:4b:da:
0b:0a:3f:0b:87:d5:79:e8:70:71:7f:e5:17:41:c0:be:fc:dc:
1d:dd:f5:ca:db:ac:74:bb:79:44:36:c5:d2:6a:16:e4:7c:8e:
45:d4:60:8b:92:72:80:d0:6b:88:13:63:b0:d2:5f:84:6f:1a:
38:e4:9d:ff:84:64:19:f8:70:7c:6a:95:93:7a:0f:c6:d3:c2:
9a:60:0a:c4:60:36:38:15:13:a6:39:a0:3d:0d:a7:68:30:c3:
da:30:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net