Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KWKmV0jII7tfA-GJhRSrhFN-h-g.roa
File: KWKmV0jII7tfA-GJhRSrhFN-h-g.roa (raw, json)
Hash identifier: oN8FOGmLwBhFYBVag6LryGAtOdXmBVhgRXKnKcXTvdA=
Subject key identifier: 29:62:A6:57:48:C8:23:BB:5F:03:E1:89:85:14:AB:84:53:7E:87:E8
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0193CF82F4F5785DD048BB61FA6272B7C566
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KWKmV0jII7tfA-GJhRSrhFN-h-g.roa
Signing time: Mon 16 Dec 2024 12:48:06 +0000
ROA not before: Mon 16 Dec 2024 12:48:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:82:f4:f5:78:5d:d0:48:bb:61:fa:62:72:b7:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 16 12:48:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2962a65748c823bb5f03e1898514ab84537e87e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:61:71:a4:09:01:a8:57:8c:e8:7d:1c:ed:
15:b0:12:7e:f5:e7:2d:e4:4d:fa:f8:9b:79:f8:f9:
ea:ce:02:a7:0e:95:01:3e:69:dd:8d:b2:72:87:61:
95:97:59:c4:4c:c1:d2:c0:87:9e:e4:80:ed:73:3d:
44:42:22:ea:d3:56:47:94:cc:8f:c1:f6:e8:f0:bc:
20:ef:bc:32:39:a6:d3:85:ca:90:89:5d:e0:cc:16:
23:8f:f1:59:e2:a2:13:64:8e:71:0e:60:f3:40:8f:
ca:34:2b:a5:c0:54:47:ad:cf:61:bd:81:fb:49:94:
2a:68:87:ce:5f:23:de:15:01:2f:fb:ea:3f:47:97:
bd:80:6b:7c:59:2e:53:81:f0:d0:0a:68:67:2d:27:
2a:35:0f:25:3a:37:e2:32:22:f8:62:04:4a:01:22:
d5:d9:7e:8e:ca:46:88:e5:c1:47:f4:07:d9:8c:1c:
95:e7:ac:7b:02:28:87:1d:72:c4:ee:3e:d6:61:df:
da:57:17:0d:ed:74:d7:5c:e8:e7:ed:c8:9a:10:3c:
31:e3:f3:15:1d:60:32:69:79:bd:54:48:47:d1:88:
31:14:85:9e:51:32:5e:65:35:1f:c5:1a:7b:5a:6d:
e2:a5:58:bb:f8:e9:9e:ca:33:9e:4d:32:c0:50:2e:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:62:A6:57:48:C8:23:BB:5F:03:E1:89:85:14:AB:84:53:7E:87:E8
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/KWKmV0jII7tfA-GJhRSrhFN-h-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.128.0-37.202.183.255
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
99:a2:d6:9c:dd:ce:b1:8d:66:4d:38:c5:94:bd:8e:29:7d:b6:
e7:62:61:43:ac:2b:6c:8a:0d:9b:ec:ab:00:ae:58:3b:7a:b0:
30:86:56:5f:2e:46:40:4b:f9:b0:1b:26:9d:c1:3a:99:39:e6:
67:3b:90:ec:e3:15:18:ba:0a:71:40:4a:1e:e7:e0:49:4a:58:
af:79:a0:80:09:e9:2d:b2:3a:4b:60:86:57:12:4f:2f:36:f2:
7c:9a:35:7f:32:85:89:ac:4e:d0:93:02:0f:ff:42:88:c9:19:
d6:a7:68:f5:e4:1c:6e:67:47:ae:4b:12:15:85:c8:7d:f9:32:
2f:97:f3:a0:dd:5d:94:14:65:10:c8:68:01:e4:07:00:68:8f:
38:b8:96:cb:32:09:6d:64:b5:b7:98:12:ef:14:e6:ad:58:b7:
24:74:39:6d:1f:0d:ba:8b:32:80:d1:03:33:e7:d4:7f:df:a1:
6c:e0:59:f4:f4:84:32:df:44:74:c8:73:df:a0:a8:e7:6b:b7:
41:0b:af:1b:48:72:43:c4:a7:40:39:72:70:b4:38:7f:f3:99:
a6:2c:0d:ad:3b:4a:1d:14:95:a5:8e:c2:80:a6:85:49:87:88:
29:41:a3:18:6a:c9:a9:b7:24:c5:57:8d:1f:7b:cc:85:a7:24:
40:49:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net