Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4oZpWhHQdsEGzW6wCtl385GDGM0.roa
File: 4oZpWhHQdsEGzW6wCtl385GDGM0.roa (raw, json)
Hash identifier: i8otdhvYSjXciV4VrIVQtTbFNyFY6CYqCyIN7nHX4Fk=
Subject key identifier: E2:86:69:5A:11:D0:76:C1:06:CD:6E:B0:0A:D9:77:F3:91:83:18:CD
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0195EB41C0F01FEDF6DC425E1DA159E3A9E8
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4oZpWhHQdsEGzW6wCtl385GDGM0.roa
Signing time: Mon 31 Mar 2025 08:11:49 +0000
ROA not before: Mon 31 Mar 2025 08:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.77.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.143.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.230.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.234.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
185.27.230.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
2a01:53c0:ffe7::/48 maxlen: 48
2a01:53c0:fff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:41:c0:f0:1f:ed:f6:dc:42:5e:1d:a1:59:e3:a9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 31 08:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e286695a11d076c106cd6eb00ad977f3918318cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:48:01:c6:1e:25:61:90:c0:0c:a1:56:88:
de:36:c2:73:a7:7e:a5:05:5c:51:1e:d8:25:01:40:
5f:38:d9:d1:dd:2d:14:cb:86:0d:87:cc:71:f6:f2:
95:da:8a:75:76:ed:de:e1:fd:3d:2b:e4:87:57:e9:
8d:9a:07:d1:91:01:3b:b0:9a:2c:03:14:3d:76:1b:
f9:6a:b3:1f:33:94:d7:ec:a6:0d:66:93:2f:f0:cb:
50:39:97:27:ab:02:fb:74:f5:d7:5c:60:dc:ab:f1:
2c:84:10:0d:47:e3:15:89:80:24:a1:0d:68:27:f8:
90:15:32:58:d4:00:55:84:ad:f4:58:c8:86:c6:4c:
e7:42:5a:09:75:55:07:7c:ad:cb:51:e2:3d:2d:d9:
dc:21:c0:b4:59:31:51:a0:4a:ec:fd:9d:4d:ba:4c:
a5:f3:e3:fe:27:be:d8:8d:7e:37:03:12:fc:2e:0e:
3e:f3:ed:34:1f:54:0d:e8:b3:ba:14:98:5f:5d:3b:
25:64:d6:a6:08:df:73:e7:59:71:4c:47:99:e2:13:
1a:cd:a2:eb:25:2d:34:c1:66:cc:d7:a2:9e:5b:01:
34:be:bb:e8:91:c1:46:77:ab:bd:55:c2:59:8e:2f:
f6:0e:2a:43:8f:d3:d0:d9:24:75:bd:cd:ae:57:38:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:69:5A:11:D0:76:C1:06:CD:6E:B0:0A:D9:77:F3:91:83:18:CD
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4oZpWhHQdsEGzW6wCtl385GDGM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.60.0/22
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.246.0/24
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.77.0/24
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.119.0/24
163.171.126.0/24
163.171.143.0/24
163.171.153.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.230.0/23
163.171.234.0/24
163.171.249.0/24
163.171.252.0/24
185.27.230.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
2a01:53c0:ffe7::/48
2a01:53c0:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
ba:9c:13:cb:47:17:f4:37:36:a2:7e:3b:62:0f:4b:47:1e:83:
a3:1c:c2:22:c8:76:c4:0d:3a:1c:09:d6:94:c4:8b:29:de:1d:
54:97:65:a0:87:7b:1f:10:77:fe:e4:c0:87:76:0f:1a:f9:03:
37:ac:03:49:30:6a:7f:bb:50:8a:26:fa:ba:1f:1e:a2:66:2d:
75:ac:e9:46:33:a9:e7:17:01:71:4c:21:3f:64:12:48:3e:ef:
ff:f8:f7:2f:3e:e3:db:38:98:6f:ae:82:0b:cd:96:53:3b:c4:
69:83:d7:15:ac:28:01:68:5f:70:fe:81:f2:89:e6:d0:44:47:
69:ac:6a:1c:6a:dd:ca:3d:ec:62:7e:50:d3:9b:9a:2b:cb:5f:
62:a2:09:27:f2:13:3f:cd:ff:ff:d0:2d:26:93:14:b0:f3:0b:
ce:0c:0f:b5:11:cd:c6:29:e0:33:2b:90:23:93:0f:e0:61:bd:
16:fa:b3:11:dc:88:11:0c:47:d7:ab:fa:31:d0:fa:9e:7d:19:
cb:37:4f:37:89:fe:5b:1a:6b:b8:0d:b7:f8:73:05:b0:92:12:
77:e9:79:87:4c:41:98:38:50:74:a3:e1:18:0b:3d:fc:8d:16:
3a:a8:4b:54:60:8e:bb:dc:e3:aa:04:9f:96:de:b9:c4:e8:62:
cf:cb:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:12 2025 by rpki-client on console.sobornost.net