Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ostE7YA8WtIAD3X5Gf7cNsQ7u2k.roa
File: ostE7YA8WtIAD3X5Gf7cNsQ7u2k.roa (raw, json)
Hash identifier: oGRid1ogdRcONEzTFXZmtB27rGkvX0l2n6Bky1fkIsU=
Subject key identifier: A2:CB:44:ED:80:3C:5A:D2:00:0F:75:F9:19:FE:DC:36:C4:3B:BB:69
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0195B2C99427F30CCCADE23913DE765AC929
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ostE7YA8WtIAD3X5Gf7cNsQ7u2k.roa
Signing time: Thu 20 Mar 2025 09:01:49 +0000
ROA not before: Thu 20 Mar 2025 09:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.77.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.143.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.230.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.234.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
185.27.230.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:c9:94:27:f3:0c:cc:ad:e2:39:13:de:76:5a:c9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 20 09:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2cb44ed803c5ad2000f75f919fedc36c43bbb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:e4:f6:6a:a8:b3:7f:ec:de:d7:bc:be:48:
eb:6e:93:93:1c:e4:1d:67:84:25:03:27:d4:ee:4f:
e3:4f:3f:48:59:ad:3f:91:d1:53:53:0b:65:0d:9b:
28:bb:eb:33:77:fc:a9:bf:12:c8:40:37:b2:41:e4:
29:83:a5:42:22:d9:7d:4b:a0:ed:37:88:83:13:52:
9a:67:41:ca:4d:a6:81:41:2a:be:94:c6:c9:79:23:
c6:e4:d2:7d:68:77:94:7f:3e:73:92:3e:c1:97:74:
f8:02:f8:5a:cd:4d:f0:8d:09:5e:df:0e:27:38:ae:
40:cd:3e:83:79:6c:5e:94:c3:65:f7:19:2a:47:e4:
28:51:ae:93:0a:3f:1c:89:d0:39:65:74:fa:d6:20:
11:6b:da:10:15:72:44:3a:9b:1e:78:34:82:d1:90:
1c:c1:0c:c2:a0:0e:aa:00:6b:77:c6:85:3b:c7:7d:
40:49:5f:62:3c:b7:06:ab:d0:14:d5:03:ee:bd:e1:
27:09:89:75:a6:92:ee:db:32:8d:95:60:e9:b8:f5:
82:8c:d9:77:32:fa:d1:a5:63:76:54:9b:13:67:b8:
78:cb:56:a1:f0:bd:59:26:06:3b:9b:28:8d:57:f7:
ac:64:4b:32:93:b7:f6:10:0f:71:80:1f:64:2d:f8:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:44:ED:80:3C:5A:D2:00:0F:75:F9:19:FE:DC:36:C4:3B:BB:69
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ostE7YA8WtIAD3X5Gf7cNsQ7u2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.60.0/22
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.246.0/24
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.77.0/24
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.119.0/24
163.171.126.0/24
163.171.143.0/24
163.171.153.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.230.0/23
163.171.234.0/24
163.171.249.0/24
163.171.252.0/24
185.27.230.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4f:4c:3d:2f:7c:f3:8b:de:eb:2e:59:02:df:0b:f6:21:61:
06:bd:e4:f8:cd:d1:ff:af:cc:91:b4:61:05:36:bc:ef:97:a5:
a1:af:fa:5a:ac:33:74:74:2f:58:2b:87:20:fe:ed:0e:cc:b3:
8b:3f:25:cc:67:b6:8e:6d:63:99:5c:cb:30:56:01:d5:f0:85:
7c:a0:38:bd:7d:63:60:4e:87:b5:83:6f:12:fe:ba:a0:85:b0:
bd:7f:2a:14:31:30:de:e3:3b:69:a7:f0:28:e9:70:16:8c:87:
55:b0:33:ab:36:80:ec:d4:34:95:6e:e6:4e:43:56:f1:fc:5c:
6c:4e:93:6c:e1:56:f5:ab:9e:b4:e2:06:c6:3e:15:1c:8b:a3:
43:6a:38:e3:b9:e5:60:b9:2f:7b:f6:a2:18:bf:e9:c1:66:d8:
19:54:5d:ad:5f:ea:3c:12:1e:04:17:5f:70:fa:3d:4f:9d:04:
a2:ab:bf:96:34:0e:99:6e:3c:9b:11:6e:f1:9f:b3:4e:bc:05:
c3:08:15:0f:f4:63:1e:5c:83:dd:eb:1b:c6:b1:b0:1e:35:3a:
ab:d5:f1:b7:4e:27:67:22:b1:20:02:0a:a2:ce:29:a8:83:eb:
cc:66:f7:5c:26:30:f9:53:35:16:45:7f:32:52:b8:f7:3d:41:
75:25:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:54 2025 by rpki-client on console.sobornost.net