Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/PbEykFk95Qp-GzLhGQEzPuqSxmk.roa
File: PbEykFk95Qp-GzLhGQEzPuqSxmk.roa (raw, json)
Hash identifier: Hvk7rTnua0DJqMwP5Nyh8b4Zk2rUSg2r4snTzFoJ1wk=
Subject key identifier: 3D:B1:32:90:59:3D:E5:0A:7E:1B:32:E1:19:01:33:3E:EA:92:C6:69
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 019425216E97917B7FC68B2E642237A9E954
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/PbEykFk95Qp-GzLhGQEzPuqSxmk.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50583
IP address blocks: 46.30.184.0/22 maxlen: 22
46.33.160.0/19 maxlen: 19
46.33.160.0/24 maxlen: 24
46.33.161.0/24 maxlen: 24
46.33.162.0/24 maxlen: 24
46.33.163.0/24 maxlen: 24
46.33.164.0/24 maxlen: 24
46.33.165.0/24 maxlen: 24
46.33.166.0/24 maxlen: 24
46.33.167.0/24 maxlen: 24
46.33.168.0/24 maxlen: 24
46.33.169.0/24 maxlen: 24
46.33.170.0/24 maxlen: 24
46.33.171.0/24 maxlen: 24
46.33.172.0/24 maxlen: 24
46.33.173.0/24 maxlen: 24
46.33.174.0/24 maxlen: 24
46.33.175.0/24 maxlen: 24
46.33.176.0/24 maxlen: 24
46.33.177.0/24 maxlen: 24
46.33.178.0/24 maxlen: 24
46.33.179.0/24 maxlen: 24
46.33.180.0/24 maxlen: 24
46.33.181.0/24 maxlen: 24
46.33.182.0/24 maxlen: 24
46.33.183.0/24 maxlen: 24
46.33.184.0/24 maxlen: 24
46.33.185.0/24 maxlen: 24
46.33.186.0/24 maxlen: 24
46.33.187.0/24 maxlen: 24
46.33.188.0/24 maxlen: 24
46.33.189.0/24 maxlen: 24
46.33.190.0/24 maxlen: 24
46.33.190.51/32 maxlen: 32
46.33.191.0/24 maxlen: 24
185.173.124.0/22 maxlen: 22
185.173.124.0/24 maxlen: 24
185.173.125.0/24 maxlen: 24
185.173.126.0/24 maxlen: 24
185.173.127.0/24 maxlen: 24
195.191.172.0/23 maxlen: 23
195.191.172.0/24 maxlen: 24
195.191.173.0/24 maxlen: 24
212.114.0.0/20 maxlen: 20
212.114.0.0/21 maxlen: 21
212.114.7.0/24 maxlen: 24
212.114.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:97:91:7b:7f:c6:8b:2e:64:22:37:a9:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3db13290593de50a7e1b32e11901333eea92c669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:96:ad:93:ca:ae:3c:62:8a:c1:39:56:ab:
0d:23:15:cd:85:52:9e:45:3c:ed:0b:ba:0b:3f:ed:
6e:50:3b:08:dc:56:54:fc:3d:c9:60:32:e7:9e:d9:
7c:57:c6:f9:a3:92:49:72:b2:4d:b5:3b:5d:57:0b:
40:d6:07:bd:17:7d:eb:f7:75:95:0a:36:1c:b3:83:
65:3b:7e:49:ca:25:65:77:fc:89:5f:60:e4:28:ea:
89:16:d7:f4:fd:ef:e2:57:ed:d9:da:6b:40:fb:8b:
c1:c1:d7:80:54:98:b4:ca:dc:ed:10:e0:ca:ac:bd:
2e:eb:86:85:01:c3:f6:7e:e9:6a:da:c6:cd:a7:31:
bb:76:30:39:02:f1:e1:cf:ed:99:3d:d3:5d:45:42:
f3:5a:80:c0:06:34:fe:e1:5f:52:b6:b6:1a:29:1a:
a1:3b:84:35:a7:34:d3:10:db:58:47:0e:6e:3c:65:
3f:d9:45:c0:c6:ca:6c:3d:2f:b2:1f:8a:a5:22:3e:
dd:0b:2f:fc:32:1f:47:09:3f:dc:9c:b4:0f:5c:f1:
41:00:8a:45:1c:d0:78:96:fe:ba:ab:0a:0c:ee:c5:
a8:66:16:6f:33:e7:59:8c:3e:3a:f5:6f:06:e4:89:
a2:41:f0:72:ee:36:39:35:7a:c8:92:13:50:9c:43:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:32:90:59:3D:E5:0A:7E:1B:32:E1:19:01:33:3E:EA:92:C6:69
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/PbEykFk95Qp-GzLhGQEzPuqSxmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:53:dc:fb:ab:55:c2:90:ca:48:16:5a:25:fa:31:e9:7f:e5:
3a:4c:97:e8:0f:77:d5:73:f5:a7:a3:78:47:a2:31:36:6d:5c:
26:b4:09:9f:b8:d1:82:1f:d8:4e:cc:f4:a4:61:e6:39:46:80:
2b:58:7f:98:66:76:49:96:e3:de:44:25:89:de:bc:74:44:5d:
77:da:cf:43:28:a4:46:29:8b:73:cc:26:e3:1a:57:ec:29:2f:
51:31:31:c9:0b:9f:c1:73:69:8f:6a:d8:b4:d7:c9:6c:e1:ba:
35:d2:ff:1f:8e:36:4c:60:c0:94:c2:b8:64:7d:a0:6c:a5:7a:
31:34:96:58:c4:1d:15:2d:fe:a5:8d:fd:61:46:b5:60:41:91:
4b:31:37:2e:34:9e:8a:e4:6c:86:29:44:f4:55:83:8d:ed:ad:
07:8e:c5:23:06:ae:70:78:4a:f5:eb:65:9a:63:23:8e:2d:94:
b4:22:ef:40:80:34:2e:bb:8c:99:67:34:94:60:37:49:35:86:
79:98:a8:83:d0:bf:dd:e9:17:15:b0:5a:93:34:4d:7c:18:2f:
ba:00:ac:51:a9:00:76:85:18:62:97:bf:d6:75:b7:54:69:37:
54:ae:da:6f:37:fe:d1:6b:68:b0:be:ac:fb:b6:e1:24:b1:88:
90:37:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net