Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/Kw49QnoalcUIwGD7L_UCEBnFzUk.roa
File: Kw49QnoalcUIwGD7L_UCEBnFzUk.roa (raw, json)
Hash identifier: 5nS3wTYqHyzRyVlDkHb3qPe9ElMZpDyRT50Au3dlMjE=
Subject key identifier: 2B:0E:3D:42:7A:1A:95:C5:08:C0:60:FB:2F:F5:02:10:19:C5:CD:49
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0195559A2596F41E659DC696BE2F5753C71C
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/Kw49QnoalcUIwGD7L_UCEBnFzUk.roa
Signing time: Sun 02 Mar 2025 06:45:20 +0000
ROA not before: Sun 02 Mar 2025 06:45:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.72.102.0/24 maxlen: 24
185.149.193.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
212.108.85.0/24 maxlen: 24
2a00:1560::/32 maxlen: 32
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:20::/48 maxlen: 48
2a00:1560:21::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:9a:25:96:f4:1e:65:9d:c6:96:be:2f:57:53:c7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Mar 2 06:45:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0e3d427a1a95c508c060fb2ff5021019c5cd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:b7:c4:b2:30:7f:2f:f8:60:bc:bf:cb:8f:
bc:ea:2c:85:17:dc:b7:d0:5b:90:65:40:35:7e:0e:
61:03:5b:ae:3a:f7:72:47:d1:ec:cc:28:f8:16:73:
d8:91:85:42:18:7f:11:2d:23:8f:0f:95:d9:77:f2:
81:3d:89:a4:fc:b6:08:f8:b1:82:9b:d2:23:93:59:
41:72:e3:eb:9f:20:cb:7b:4b:29:42:69:c3:f0:17:
04:4b:41:d2:a7:5a:49:0d:1b:d9:f0:df:01:65:5c:
9e:ea:03:6e:4e:41:f7:93:40:60:da:ee:fb:cb:4d:
c1:2a:7a:4b:6b:6b:6b:f0:72:00:c3:f1:8b:33:1c:
eb:07:14:7b:62:62:81:d1:1c:6c:e9:21:29:3b:b3:
7b:1a:4c:96:e4:60:b4:24:71:25:24:47:13:73:84:
df:3f:30:ef:fd:2d:e0:33:b7:8c:0a:31:62:5b:a7:
55:f8:ce:f8:a1:20:50:3e:00:bf:50:92:2f:7b:f8:
c8:35:4b:14:7d:af:9a:0f:42:94:8f:9c:a9:b0:2b:
67:8c:bc:63:15:e4:13:80:c8:85:5e:7b:f4:df:5b:
b2:ad:b5:f0:da:4f:d5:15:6a:42:ec:51:c6:35:98:
d4:55:6c:eb:11:c0:43:d3:b6:42:f8:b8:31:9c:8f:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:3D:42:7A:1A:95:C5:08:C0:60:FB:2F:F5:02:10:19:C5:CD:49
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/Kw49QnoalcUIwGD7L_UCEBnFzUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.72.102.0/24
185.149.193.0/24
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
212.108.85.0/24
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
05:76:fa:5a:3d:71:c8:fa:b1:0c:ad:06:ff:ff:a8:ef:44:ef:
ef:60:79:93:d2:01:11:d8:92:42:99:2c:a6:10:24:44:a9:15:
56:4d:44:cb:23:ee:3f:7d:83:43:c1:d7:a7:79:6c:e2:d2:f5:
80:ef:b8:66:07:dc:0b:98:1b:b8:c4:fd:be:88:50:c4:54:0e:
f2:f8:7d:e5:af:bd:15:41:72:b3:38:e3:89:68:1d:a7:5f:fd:
5f:2b:d4:6a:a0:a1:6f:d4:84:8b:2e:a1:90:f4:9c:6f:e3:2a:
cc:67:32:6e:a5:c4:4e:1b:b4:da:b5:13:c3:68:02:c6:50:c1:
45:9e:a1:7e:36:03:e5:37:e2:1b:69:d2:b8:e9:51:fc:32:97:
ea:15:53:53:4d:a5:f1:63:ee:d9:be:86:3d:cb:53:79:e7:8b:
fe:9c:ce:b4:b2:15:70:9e:e4:fe:58:aa:41:93:58:05:ed:1c:
40:47:3a:b9:c3:c4:3d:36:8d:94:03:45:2e:3c:fe:72:46:07:
2f:e1:6f:7a:bc:6a:e0:23:8a:e1:0a:94:74:7e:8c:3e:d5:dd:
3b:2a:78:15:cb:cb:b5:2d:0c:60:57:62:9c:b3:4c:e9:db:b1:
11:a0:6c:83:95:81:0a:9c:84:ec:e0:11:08:5e:f8:4a:ed:cd:
6a:11:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net