Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XbK71XmDhZ84irJ2BuCGbbUcSrI.roa
File: XbK71XmDhZ84irJ2BuCGbbUcSrI.roa (raw, json)
Hash identifier: /KFmCOPdf7KqB2mvQS6vb3QYy/TcVDV7emg/BulKL7A=
Subject key identifier: 5D:B2:BB:D5:79:83:85:9F:38:8A:B2:76:06:E0:86:6D:B5:1C:4A:B2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01946A1D6AD5ACF4E04E9F0F45840288D220
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XbK71XmDhZ84irJ2BuCGbbUcSrI.roa
Signing time: Wed 15 Jan 2025 13:18:20 +0000
ROA not before: Wed 15 Jan 2025 13:18:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58224
IP address blocks: 37.148.64.0/21 maxlen: 24
37.148.72.0/22 maxlen: 24
37.148.76.0/22 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.88.0/21 maxlen: 24
37.148.96.0/22 maxlen: 24
37.148.100.0/22 maxlen: 24
37.148.104.0/21 maxlen: 24
37.148.112.0/22 maxlen: 24
37.148.116.0/22 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.239.120.0/22 maxlen: 24
151.239.124.0/22 maxlen: 24
151.239.128.0/22 maxlen: 24
151.239.132.0/22 maxlen: 24
151.239.136.0/22 maxlen: 24
151.239.140.0/22 maxlen: 24
151.239.144.0/22 maxlen: 24
151.239.148.0/22 maxlen: 24
151.239.152.0/22 maxlen: 24
151.239.156.0/22 maxlen: 24
151.239.160.0/21 maxlen: 24
151.239.168.0/22 maxlen: 24
151.239.172.0/22 maxlen: 24
151.239.176.0/22 maxlen: 24
151.239.180.0/22 maxlen: 24
151.239.184.0/22 maxlen: 24
151.239.188.0/22 maxlen: 24
151.239.192.0/21 maxlen: 24
151.239.200.0/21 maxlen: 24
151.239.208.0/20 maxlen: 24
151.239.224.0/20 maxlen: 24
151.239.240.0/20 maxlen: 24
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.36.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/23 maxlen: 23
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.160.0/20 maxlen: 24
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.192.0/20 maxlen: 24
151.246.208.0/20 maxlen: 24
151.246.224.0/20 maxlen: 20
151.246.248.0/22 maxlen: 24
151.247.0.0/23 maxlen: 24
151.247.2.0/24 maxlen: 24
151.247.3.0/24 maxlen: 24
151.247.4.0/22 maxlen: 24
151.247.8.0/22 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.13.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.19.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.188.0/22 maxlen: 24
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.228.0/23 maxlen: 24
151.247.230.0/23 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/23 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
151.247.240.0/23 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.244.0/22 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:1d:6a:d5:ac:f4:e0:4e:9f:0f:45:84:02:88:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 15 13:18:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5db2bbd57983859f388ab27606e0866db51c4ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:40:2a:bc:4b:64:c8:21:bc:d5:82:fe:3f:
b9:f6:97:3d:17:e7:4c:77:dc:74:ad:8d:fd:2b:8c:
c4:cf:23:9d:d4:98:1e:08:41:42:fd:f4:c2:8a:5a:
5b:55:5e:22:6c:4e:c7:d4:00:33:3e:52:a6:76:a8:
79:49:89:18:d1:49:19:31:1e:11:81:37:f0:1e:68:
da:60:5d:10:1e:23:23:d5:ae:a6:13:e8:23:aa:a1:
79:b3:08:ec:4a:9d:05:73:cd:c7:93:b4:a4:79:ce:
08:e8:c5:04:8f:b7:0a:31:2f:c1:f7:f5:e0:38:f4:
fa:9e:93:8f:f3:2d:86:6b:dc:0e:9d:0b:ee:6a:d1:
9a:11:4c:49:48:30:6a:97:6e:8e:1f:d3:70:50:56:
b6:2d:7f:07:2d:79:94:e8:97:87:68:7f:f7:de:86:
fe:b3:6b:93:43:fe:42:eb:21:fd:32:0d:0e:4d:69:
f9:af:dd:1b:1f:41:24:dd:7e:f5:5b:e5:7e:85:65:
c5:b4:df:11:12:ee:06:4f:ca:a0:70:2f:eb:82:b4:
a6:8e:13:db:d0:73:26:09:f2:50:aa:7e:52:12:2b:
65:42:8f:f2:79:ef:47:e5:ab:4d:41:a1:d7:de:09:
30:6f:c1:cd:a7:6d:e7:4a:aa:1c:51:b1:e7:e9:8c:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:BB:D5:79:83:85:9F:38:8A:B2:76:06:E0:86:6D:B5:1C:4A:B2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XbK71XmDhZ84irJ2BuCGbbUcSrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.64.0/18
37.202.128.0/20
37.202.152.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.242.255
37.202.244.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.239.120.0-151.239.255.255
151.244.16.0/20
151.244.36.0/22
151.244.228.0-151.244.249.255
151.244.252.0-151.246.63.255
151.246.160.0-151.246.239.255
151.246.248.0/22
151.247.0.0-151.247.213.255
151.247.228.0-151.247.247.255
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:5a:eb:f4:4a:b3:fa:71:9e:24:01:e2:74:5f:73:6d:93:7c:
e9:54:ca:90:a0:ef:fb:2c:1c:33:24:81:a2:db:14:22:99:b1:
49:09:b3:96:c2:dc:da:44:59:b8:23:a5:99:03:9b:ac:95:06:
93:0a:3c:b8:58:f2:12:93:c1:4f:6f:f9:4c:60:bb:e0:be:fe:
08:a2:27:05:e8:67:c1:b1:9f:b4:dd:50:35:44:42:73:93:7d:
3a:fc:55:00:d1:3a:a6:6c:5f:70:32:c1:07:7d:65:34:0a:c0:
bc:c6:58:9a:f0:a5:8f:23:39:9a:45:46:66:65:7f:d1:c1:dc:
af:2a:5a:05:85:95:4a:cd:f4:db:19:0d:8d:18:c4:bb:ea:7e:
16:18:73:10:4f:41:f5:49:20:c4:63:9c:e0:2a:5d:cf:00:ad:
71:75:28:f7:67:5b:a5:c3:3b:8b:15:57:c1:76:1f:7c:ca:8c:
a7:98:17:e5:31:fb:2f:b2:24:90:21:ce:71:4e:ec:ac:ed:51:
d9:2a:84:3b:40:9a:a5:71:47:98:bd:5e:cc:f4:7c:24:05:b2:
5a:44:7a:10:73:3f:b8:2a:d7:22:81:06:ff:12:57:8c:45:6f:
8e:ff:48:02:3c:e4:96:36:15:38:4b:0e:77:ee:8d:66:52:ca:
51:4f:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:38 2025 by rpki-client on console.sobornost.net