Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wtYq8ndmnA-n5eDCOYVQEWQWbvs.roa
File: wtYq8ndmnA-n5eDCOYVQEWQWbvs.roa (raw, json)
Hash identifier: 7etTlVr43/TnDg8gp8Y5QFF4L4xCWAtfkaCVI7JkM5Q=
Subject key identifier: C2:D6:2A:F2:77:66:9C:0F:A7:E5:E0:C2:39:85:50:11:64:16:6E:FB
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0193CFE09614EB43C4343A9206EDC54D6250
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wtYq8ndmnA-n5eDCOYVQEWQWbvs.roa
Signing time: Mon 16 Dec 2024 14:30:22 +0000
ROA not before: Mon 16 Dec 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
2a00:1560::/32 maxlen: 32
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:e0:96:14:eb:43:c4:34:3a:92:06:ed:c5:4d:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Dec 16 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d62af277669c0fa7e5e0c23985501164166efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:8d:d0:32:70:87:ca:61:98:e0:6a:93:35:
3b:9e:a8:ae:b6:ba:9e:71:a3:14:dc:12:4a:07:f4:
2c:6c:c9:cd:93:85:eb:4f:d9:5c:a9:52:f9:49:bf:
96:e7:01:49:6b:9a:2f:a8:d7:e3:b5:88:69:1b:64:
bc:d1:9a:d3:7a:5c:fe:24:19:ab:10:5e:20:90:8f:
0b:bc:7d:d0:be:96:7e:c2:23:a1:c8:7a:bc:1c:41:
b9:55:15:ec:8a:f5:43:c7:f6:cc:4c:21:9d:4a:33:
b5:0c:17:59:78:af:82:5a:83:1c:ca:73:15:f4:d2:
e9:19:6e:81:b1:61:86:80:3c:aa:bc:6a:8c:68:fa:
3e:13:3a:03:bf:09:70:4a:86:0e:2e:a0:58:11:7f:
1d:e4:22:80:00:bc:94:5f:9e:b5:2d:ed:63:d8:42:
5b:42:ed:8f:0c:ca:40:fa:26:6f:b8:9e:49:3a:1b:
67:58:34:0c:48:e1:24:f0:e2:5c:8b:e0:32:d7:a4:
df:20:a0:eb:a9:6f:1d:bb:4c:7d:51:c9:58:95:b1:
7b:8b:2c:29:ea:e4:8a:8f:26:d0:6f:70:d6:9c:7d:
2e:3a:92:c8:30:35:63:a7:27:bc:ff:fc:00:1e:0e:
94:88:6c:53:03:b7:a8:33:29:cc:db:8c:27:ea:c0:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:2A:F2:77:66:9C:0F:A7:E5:E0:C2:39:85:50:11:64:16:6E:FB
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/wtYq8ndmnA-n5eDCOYVQEWQWbvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
40:b3:de:2c:ca:33:42:7e:6e:a9:f4:c9:a1:0f:6a:38:b5:10:
ec:0d:ed:aa:d3:3e:03:7d:f5:66:93:7c:dd:72:6f:12:a4:2d:
14:55:99:17:b7:c8:b0:78:fd:b1:73:1d:fa:10:51:2e:1a:07:
e8:7a:98:d6:69:32:32:a7:72:c8:b5:9d:b0:00:04:82:47:e4:
3d:89:13:11:e6:75:4f:25:3e:26:0f:4b:21:87:19:ab:a0:31:
ba:41:10:0e:1a:b7:90:45:1b:e1:c5:fb:44:56:5e:df:64:19:
0f:4b:3f:da:b4:ca:53:f7:d4:2e:e7:fd:b6:4e:79:6e:90:5d:
6e:3b:e0:63:cd:78:3f:21:ff:66:b1:e7:da:fe:8a:8b:b6:e1:
2b:e2:ae:f5:d7:23:49:d0:af:3e:c9:e0:79:5e:f8:29:2c:f9:
0d:83:c1:d5:3b:5d:b0:99:94:51:f5:39:75:3c:32:80:77:f2:
9c:21:6a:37:8d:4e:de:ea:84:67:ba:65:34:d9:ea:0c:6e:69:
8b:7c:7b:42:f1:da:8f:30:72:d4:7f:ca:a7:ee:60:3f:21:de:
47:b2:2b:c2:49:27:08:85:e1:fb:f7:6f:ec:4e:73:d9:46:c4:
e6:35:e0:6c:63:18:ca:38:a0:83:85:30:ca:49:1d:ce:3b:10:
f1:69:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:13 2024 by rpki-client on console.sobornost.net