Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lv2klaZcZxtaZg2fTddgSjyseMo.roa
File: Lv2klaZcZxtaZg2fTddgSjyseMo.roa (raw, json)
Hash identifier: CxjTbjG6fjBIfJGxoh9VmgFEa2D0iJPiPoBNw8ZCM+Q=
Subject key identifier: 2E:FD:A4:95:A6:5C:67:1B:5A:66:0D:9F:4D:D7:60:4A:3C:AC:78:CA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01953D75A13E9E5217F88D6A8398C22EF96F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lv2klaZcZxtaZg2fTddgSjyseMo.roa
Signing time: Tue 25 Feb 2025 14:14:33 +0000
ROA not before: Tue 25 Feb 2025 14:14:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:75:a1:3e:9e:52:17:f8:8d:6a:83:98:c2:2e:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 25 14:14:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2efda495a65c671b5a660d9f4dd7604a3cac78ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:eb:71:71:e5:fe:8f:17:8c:ce:11:89:97:
04:a1:20:c8:fd:d5:d5:b6:81:0b:e1:1a:b7:a5:1e:
0b:94:6f:6f:64:c3:72:43:d1:20:cd:43:0b:4b:7a:
31:7e:12:4f:4b:33:31:9a:9b:72:f7:f3:51:59:ab:
5c:6e:62:ff:12:ab:7d:3c:5f:ba:2c:ef:f0:d9:79:
82:40:75:1b:0d:d7:88:a2:fc:00:c8:41:c1:96:16:
69:57:97:2d:71:37:23:27:8e:06:89:19:f9:5d:69:
15:c2:a0:8c:09:65:ba:9e:26:15:f2:de:17:af:27:
24:67:b5:6b:73:99:65:96:3c:9e:3e:05:50:8d:ff:
a1:a9:d9:b3:c6:5e:b4:90:0b:77:2e:18:06:8e:7a:
0f:6e:7e:8d:b4:20:4c:1e:59:47:e3:98:45:44:18:
fb:6a:6b:07:3a:12:40:61:8e:54:e6:a7:bd:cf:13:
8a:e3:56:ce:77:b5:66:3a:a3:1b:69:51:4b:e9:c5:
79:8a:7e:77:1f:46:d5:cc:c4:95:65:e7:1d:65:a7:
be:46:31:32:aa:88:6b:b2:37:e7:5e:6d:61:b2:1e:
0e:0f:4e:c3:14:4f:9c:2b:d9:12:43:f7:d6:c7:9c:
8c:e7:a6:f1:d9:a1:d5:fb:f1:fb:af:10:73:6d:01:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:A4:95:A6:5C:67:1B:5A:66:0D:9F:4D:D7:60:4A:3C:AC:78:CA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lv2klaZcZxtaZg2fTddgSjyseMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.49.255
37.148.56.0/21
37.148.120.0/21
37.202.128.0/18
85.15.48.0/23
94.182.0.0/15
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:81:2c:29:00:72:ea:43:0a:e9:21:ec:cb:97:1b:94:74:c3:
ea:4e:9b:18:72:54:71:74:64:7d:d2:26:53:ae:de:1b:ac:73:
59:28:5c:09:f6:eb:16:09:14:f1:3d:68:80:22:e0:c1:da:53:
1d:58:01:b7:7c:29:b0:39:1c:55:89:05:33:ed:1e:42:0a:4e:
cc:50:e5:4b:72:7a:11:3c:dd:1e:2e:01:55:aa:4a:89:c9:1c:
77:5d:24:f6:99:69:09:63:2b:e9:98:9f:a3:ac:9d:e7:d4:69:
b0:f2:bf:6c:ac:30:9b:46:e3:20:16:a6:d0:cd:f0:50:93:c1:
24:f6:a4:93:fe:23:4f:b7:12:ff:38:3d:30:5b:b5:d7:72:77:
0d:e1:3b:76:4e:8a:ea:9b:0d:94:3c:ab:bc:65:76:26:2b:a5:
ba:99:f1:b2:9e:6f:d5:92:e1:96:da:db:c8:f6:5c:6a:2c:cd:
77:c4:33:81:b4:a2:00:b1:99:3e:f8:5f:79:55:ad:af:4a:58:
24:ab:35:27:65:b4:3b:74:e9:ea:66:b0:db:5c:dd:31:6b:90:
92:89:e0:a7:94:d8:07:99:69:0d:ea:90:12:c1:a7:ff:51:9e:
be:52:e0:e9:d4:4c:97:2d:c6:ee:c6:86:8b:25:bb:66:34:c4:
8e:57:52:b5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZU9daE+nlIX+I1qg5jCLvlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjUwMjI1MTQxNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWZkYTQ5NWE2NWM2NzFiNWE2NjBkOWY0ZGQ3NjA0YTNjYWM3OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXrcXHl/o8XjM4RiZcEoSDI/dXV
toEL4Rq3pR4LlG9vZMNyQ9EgzUMLS3oxfhJPSzMxmpty9/NRWatcbmL/Eqt9PF+6
LO/w2XmCQHUbDdeIovwAyEHBlhZpV5ctcTcjJ44GiRn5XWkVwqCMCWW6niYV8t4X
ryckZ7Vrc5llljyePgVQjf+hqdmzxl60kAt3LhgGjnoPbn6NtCBMHllH45hFRBj7
amsHOhJAYY5U5qe9zxOK41bOd7VmOqMbaVFL6cV5in53H0bVzMSVZecdZae+RjEy
qohrsjfnXm1hsh4OD07DFE+cK9kSQ/fWx5yM56bx2aHV+/H7rxBzbQGeXQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFC79pJWmXGcbWmYNn03XYEo8rHjKMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvTHYya2xhWmNaeHRhWmcyZlRkZGdTanlzZU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAATBLMAsDAwIllAME
ASWUMAMEAyWUOAMEAyWUeAMEBiXKgAMEAVUPMAMDAV62MAsDAwGX9gMEApf3EDAM
AwQBl/fWAwQBl/fwAwQCl/f4MA0GCSqGSIb3DQEBCwUAA4IBAQAZgSwpAHLqQwrp
IezLlxuUdMPqTpsYclRxdGR90iZTrt4brHNZKFwJ9usWCRTxPWiAIuDB2lMdWAG3
fCmwORxViQUz7R5CCk7MUOVLcnoRPN0eLgFVqkqJyRx3XST2mWkJYyvpmJ+jrJ3n
1Gmw8r9srDCbRuMgFqbQzfBQk8Ek9qST/iNPtxL/OD0wW7XXcncN4Tt2Torqmw2U
PKu8ZXYmK6W6mfGynm/VkuGW2tvI9lxqLM13xDOBtKIAsZk++F95Va2vSlgkqzUn
ZbQ7dOnqZrDbXN0xa5CSieCnlNgHmWkN6pASwaf/UZ6+UuDp1EyXLcbuxoaLJbtm
NMSOV1K1
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:43 2025 by rpki-client on console.sobornost.net