Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/d4OCK2D4mSeWoRqf9p5C2kL05YA.roa
File: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (raw, json)
Hash identifier: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=
Subject key identifier: 77:83:82:2B:60:F8:99:27:96:A1:1A:9F:F6:9E:42:DA:42:F4:E5:80
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0194282316A7BCADE3BCC566B0A98EC3B63E
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/d4OCK2D4mSeWoRqf9p5C2kL05YA.roa
Signing time: Thu 02 Jan 2025 17:49:35 +0000
ROA not before: Thu 02 Jan 2025 17:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15774
IP address blocks: 31.216.170.0/24 maxlen: 24
37.61.176.0/21 maxlen: 32
46.20.64.0/20 maxlen: 32
46.166.65.0/24 maxlen: 24
46.166.79.0/24 maxlen: 24
46.166.80.0/23 maxlen: 24
46.166.80.0/24 maxlen: 24
46.166.81.0/24 maxlen: 24
46.166.82.0/24 maxlen: 24
46.166.83.0/24 maxlen: 24
46.166.84.0/22 maxlen: 23
46.166.88.0/23 maxlen: 23
46.166.91.0/24 maxlen: 24
46.166.93.0/24 maxlen: 24
46.166.94.0/24 maxlen: 24
46.166.95.0/24 maxlen: 24
46.182.128.0/22 maxlen: 22
46.182.131.0/24 maxlen: 24
46.226.240.0/21 maxlen: 32
62.33.122.0/23 maxlen: 32
79.132.96.0/19 maxlen: 32
81.4.192.0/18 maxlen: 32
81.18.128.0/19 maxlen: 32
83.234.10.0/24 maxlen: 24
83.234.54.0/24 maxlen: 32
83.234.136.0/23 maxlen: 23
83.234.168.0/23 maxlen: 32
83.234.240.0/21 maxlen: 21
89.186.234.0/24 maxlen: 24
91.204.96.0/22 maxlen: 32
109.74.208.0/20 maxlen: 32
109.233.172.0/22 maxlen: 32
164.177.176.0/21 maxlen: 32
176.104.128.0/21 maxlen: 21
176.104.152.0/22 maxlen: 22
176.104.156.0/22 maxlen: 22
176.104.160.0/22 maxlen: 22
176.104.164.0/22 maxlen: 22
176.125.64.0/18 maxlen: 18
178.76.194.0/23 maxlen: 23
178.76.196.0/22 maxlen: 22
178.76.205.0/24 maxlen: 24
178.76.207.0/24 maxlen: 24
178.76.208.0/23 maxlen: 23
178.76.210.0/23 maxlen: 23
178.76.212.0/24 maxlen: 24
178.76.214.0/24 maxlen: 24
178.76.216.0/21 maxlen: 21
178.76.224.0/19 maxlen: 24
178.76.234.0/24 maxlen: 24
185.6.236.0/22 maxlen: 32
185.43.84.0/23 maxlen: 32
185.43.86.0/23 maxlen: 32
185.61.24.0/22 maxlen: 32
2a00:1138::/32 maxlen: 128
2a03:3700::/36 maxlen: 128
2a03:3700:1000::/36 maxlen: 128
2a03:3700:2000::/36 maxlen: 128
2a03:3700:3000::/36 maxlen: 128
2a03:3700:4000::/36 maxlen: 128
2a03:3700:5000::/36 maxlen: 128
2a03:3700:6000::/36 maxlen: 128
2a03:3700:7000::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:16:a7:bc:ad:e3:bc:c5:66:b0:a9:8e:c3:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7783822b60f8992796a11a9ff69e42da42f4e580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:85:fb:b5:a9:5e:6b:f3:8c:a9:de:46:5a:
a4:37:0e:15:ea:9f:7a:c5:78:5a:7f:1d:12:0d:e4:
08:d7:43:f1:e9:f2:6e:e1:83:ec:b8:f5:25:e7:71:
2c:33:61:cd:b5:de:d5:d5:01:70:84:e2:3f:e7:78:
a7:8d:b2:9a:31:de:1c:9b:d6:0a:31:c2:d8:04:40:
1c:3b:a2:07:d3:a0:75:9f:7d:f2:c9:c0:da:0f:4e:
ae:4b:0c:d5:42:0b:26:6d:46:89:16:eb:53:58:db:
a4:28:f6:57:e2:e6:3d:4f:b7:c9:1f:40:06:3d:c6:
71:ce:5e:7d:55:f6:55:36:db:20:30:90:f0:47:f0:
3c:6e:e8:1b:c8:c0:73:90:0c:b8:e7:d2:d1:18:cc:
ab:ed:f5:0c:cd:12:af:bf:91:5a:2c:ee:de:2f:f2:
ec:e9:3b:04:03:fe:c1:8e:79:37:43:42:e3:de:a2:
d7:5c:b7:6a:04:d3:fc:93:2b:71:41:d0:e7:0e:6b:
a9:a7:50:ae:07:8d:8f:cf:99:7d:1f:63:86:52:d9:
c8:6b:cb:39:5d:58:2b:6b:e0:e4:10:62:da:14:20:
93:21:fb:c3:a2:9b:cd:a2:78:2e:e6:74:39:d8:32:
9a:8f:af:eb:67:9d:87:4a:40:0a:0d:ae:59:72:eb:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:82:2B:60:F8:99:27:96:A1:1A:9F:F6:9E:42:DA:42:F4:E5:80
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/d4OCK2D4mSeWoRqf9p5C2kL05YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.170.0/24
37.61.176.0/21
46.20.64.0/20
46.166.65.0/24
46.166.79.0-46.166.89.255
46.166.91.0/24
46.166.93.0-46.166.95.255
46.182.128.0/22
46.226.240.0/21
62.33.122.0/23
79.132.96.0/19
81.4.192.0/18
81.18.128.0/19
83.234.10.0/24
83.234.54.0/24
83.234.136.0/23
83.234.168.0/23
83.234.240.0/21
89.186.234.0/24
91.204.96.0/22
109.74.208.0/20
109.233.172.0/22
164.177.176.0/21
176.104.128.0/21
176.104.152.0-176.104.167.255
176.125.64.0/18
178.76.194.0-178.76.199.255
178.76.205.0/24
178.76.207.0-178.76.212.255
178.76.214.0/24
178.76.216.0-178.76.255.255
185.6.236.0/22
185.43.84.0/22
185.61.24.0/22
IPv6:
2a00:1138::/32
2a03:3700::/33
Signature Algorithm: sha256WithRSAEncryption
57:a3:0b:2e:85:d2:1e:57:ed:0e:fb:4b:ef:cb:d7:e2:d6:9e:
cf:37:96:2d:31:e8:4f:62:58:d8:18:be:03:ba:9c:14:b3:9a:
7a:d0:35:c4:d3:ad:94:10:ec:66:02:7a:04:14:cf:2b:ec:10:
24:df:cc:da:d1:f7:a0:d7:c6:7b:7a:42:1b:4b:04:00:9e:aa:
c9:20:7c:d3:a5:61:a7:01:f5:f4:c5:ba:c7:2e:94:07:33:40:
18:c5:18:2f:2b:f1:30:66:22:5b:f0:bc:b0:e9:81:0f:ee:66:
5e:21:1b:32:85:07:c3:36:35:a4:3c:2c:1e:5e:40:25:85:9a:
ae:15:15:ec:45:b4:5f:f9:5d:5d:3e:50:20:de:a6:bf:93:4d:
86:61:2f:aa:37:d8:53:78:d4:12:98:a7:3d:a1:21:d4:2f:1e:
82:81:20:e4:d7:b6:ce:81:7b:5c:dd:dd:b5:26:e6:28:bc:bb:
11:11:79:80:82:a5:44:59:d2:c0:dd:ff:48:e0:55:09:51:c8:
0d:9f:db:40:9d:26:1c:95:8f:32:82:0f:9b:c6:c3:ed:b7:77:
fa:92:79:16:f9:ee:3b:b6:04:66:11:6a:67:4c:fd:62:59:fb:
96:c9:8d:00:88:3e:6d:0f:dc:a4:43:49:b3:e7:36:2e:ea:90:
fc:0f:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net