
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFt7zQHMgun8a_aCvV2YD7PrS3A.roa
File: UFt7zQHMgun8a_aCvV2YD7PrS3A.roa (raw, json)
Hash identifier: 2BJ7Dh5VwOhn/a15DH3zYcunFdD4Q0mVEDlvM1yeCgI=
Subject key identifier: 50:5B:7B:CD:01:CC:82:E9:FC:6B:F6:82:BD:5D:98:0F:B3:EB:4B:70
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0195A331E0E03CAF7D84F75C567AA478C915
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFt7zQHMgun8a_aCvV2YD7PrS3A.roa
Signing time: Mon 17 Mar 2025 08:21:49 +0000
ROA not before: Mon 17 Mar 2025 08:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
46.102.191.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
85.204.241.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.64.0/23 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.39.214.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.115.56.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.10.0/23 maxlen: 24
94.177.58.0/24 maxlen: 24
94.177.96.0/23 maxlen: 23
176.223.163.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
188.215.68.0/23 maxlen: 24
188.215.78.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
188.241.66.0/23 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.132.0/23 maxlen: 24
188.241.138.0/23 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:31:e0:e0:3c:af:7d:84:f7:5c:56:7a:a4:78:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 17 08:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505b7bcd01cc82e9fc6bf682bd5d980fb3eb4b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:d7:3b:52:ba:6a:0e:3b:2a:30:57:a6:d0:
f2:52:ec:72:d9:db:42:d9:9c:2b:03:80:e2:ee:0a:
dd:da:76:f2:08:71:b6:9a:37:6b:24:11:6f:f9:cc:
df:e7:bc:0e:10:49:e8:dc:99:6e:5c:c8:0e:ea:47:
ef:61:28:58:16:b7:c4:16:bb:8d:5c:e4:bb:6f:24:
d8:f6:9b:cc:bf:b3:b0:90:6c:60:10:9c:0c:ce:bc:
d8:08:9c:be:bd:ad:3b:41:81:31:da:4c:13:fe:01:
e6:78:3e:83:f0:cd:6f:1f:75:a2:1d:0b:dc:0a:a7:
d2:6c:27:cb:63:28:a8:80:10:43:cd:78:c7:09:94:
59:ec:4a:ca:e3:c5:ba:ed:c7:ec:65:e4:e3:75:8c:
1b:3d:8c:14:85:cb:2e:1c:33:21:25:32:22:2c:0a:
48:ce:4e:94:aa:50:45:02:0f:80:a3:2b:ec:60:ae:
a9:54:31:ba:fa:32:38:d8:6c:b7:e8:a8:55:40:d6:
f4:a0:13:98:3e:69:88:3b:5e:1f:96:a7:42:da:c9:
55:d2:90:ac:08:74:06:05:a7:96:9a:c4:0d:9d:82:
ad:42:69:02:c6:6e:26:ce:37:7c:2b:56:6f:55:6b:
04:1d:c5:c4:46:c2:f0:76:c6:3e:98:c8:d6:e7:4d:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:7B:CD:01:CC:82:E9:FC:6B:F6:82:BD:5D:98:0F:B3:EB:4B:70
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFt7zQHMgun8a_aCvV2YD7PrS3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
46.102.191.0/24
77.81.183.0/24
84.247.36.0/22
85.204.241.0/24
86.105.151.0/24
86.105.224.0/24
86.107.47.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.64.0/23
89.39.80.0/24
89.39.90.0/24
89.39.214.0/24
89.40.65.0/24
89.40.69.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.115.56.0/23
93.117.175.0/24
94.176.3.0/24
94.177.10.0/23
94.177.58.0/24
94.177.96.0/23
176.223.163.0/24
188.212.131.0/24
188.215.68.0/23
188.215.78.0/24
188.240.17.0/24
188.241.66.0/23
188.241.127.0/24
188.241.132.0/23
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:fb:3a:cb:13:03:e0:0c:ff:6c:74:8e:97:f4:ac:68:8b:9a:
50:06:63:eb:6a:d7:c6:2a:6f:67:67:9e:ed:67:ad:4c:ba:c3:
6d:55:e8:4c:d0:f9:14:a2:ef:f4:08:1b:5e:a0:4c:0a:f6:28:
91:b0:1e:d6:af:da:da:79:32:ab:cc:4a:de:eb:1c:5d:5c:c1:
3b:45:7d:1d:2e:f9:89:bb:73:f5:1c:33:a9:bf:1b:28:a4:8e:
6c:fc:9f:ce:0e:87:cb:08:67:e2:33:86:8e:73:b1:de:a0:8f:
31:e8:8f:21:1f:db:b7:2f:df:68:c6:ee:77:95:77:62:84:5a:
2f:3a:9c:ce:75:0b:3f:4b:91:b2:d0:ce:6e:38:95:15:4a:15:
c4:a6:56:97:16:40:0b:76:22:da:5c:e3:d8:22:c2:4a:99:89:
2f:c2:fb:31:65:e6:7b:26:00:aa:7e:e5:5f:dd:4f:37:85:4b:
56:35:7b:5f:17:b2:1d:0e:e1:f0:52:d6:88:10:21:bb:3a:a7:
81:eb:e0:9c:53:d1:05:7f:58:fd:6d:60:24:54:0d:0f:db:f7:
22:22:9f:7d:b0:63:7c:40:2f:11:9f:b9:01:98:2e:8a:42:51:
c0:01:85:4f:06:d5:82:19:1e:32:85:3c:45:7d:08:f0:3e:98:
04:ad:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:49 2025 by rpki-client on console.sobornost.net