Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KsVqaRSEjKtgAx9Lbm1hWKfqAmM.roa
File: KsVqaRSEjKtgAx9Lbm1hWKfqAmM.roa (raw, json)
Hash identifier: vqNVTlE5DSjYsvB+7Yx4BIFWnF9ZGE54yzduxIFa2WI=
Subject key identifier: 2A:C5:6A:69:14:84:8C:AB:60:03:1F:4B:6E:6D:61:58:A7:EA:02:63
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01961B6BCE23036420EF55C238668207AB2A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KsVqaRSEjKtgAx9Lbm1hWKfqAmM.roa
Signing time: Wed 09 Apr 2025 16:39:32 +0000
ROA not before: Wed 09 Apr 2025 16:39:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.218.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:6b:ce:23:03:64:20:ef:55:c2:38:66:82:07:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 9 16:39:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac56a6914848cab60031f4b6e6d6158a7ea0263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:f1:92:c4:d7:87:05:2a:0c:3d:56:ce:f4:
70:c4:13:85:50:92:4d:ed:48:d2:83:ad:d9:55:ec:
42:52:0d:d4:78:fb:9b:99:af:93:3b:95:16:6e:df:
31:00:04:78:ab:ad:6f:3a:da:f0:86:9b:dc:28:f3:
78:9c:27:69:e6:fd:ab:e8:1d:0a:9b:43:39:e3:c9:
f7:70:40:36:90:6a:8c:3c:84:d7:62:e3:50:fb:9d:
5a:50:f2:e8:a8:78:bb:fb:7f:d0:ea:5b:b4:6b:8f:
90:56:39:d4:13:eb:3d:a1:61:3e:e0:cd:b4:9b:a4:
11:fb:72:7d:d5:40:ff:01:0b:ef:14:2e:35:1e:68:
1a:d3:a5:04:a3:13:b1:ac:b2:51:64:4d:02:1f:d7:
72:ee:94:4b:97:37:43:26:5d:0a:38:e9:54:3e:79:
ef:d4:92:58:23:ee:6d:be:ce:5b:42:bd:74:95:14:
c5:66:ca:f9:a1:03:06:b1:6b:ab:5f:92:1a:c0:d4:
3d:c5:ce:cb:a9:f1:00:27:c9:e2:ff:76:75:08:b0:
aa:16:56:b7:14:84:37:3f:7e:c9:51:b6:2e:86:77:
a9:96:2c:02:43:ef:3d:68:cf:37:52:bf:4c:9e:dc:
44:2e:ea:04:66:73:8a:33:8d:6f:bd:e0:15:d2:6f:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:6A:69:14:84:8C:AB:60:03:1F:4B:6E:6D:61:58:A7:EA:02:63
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KsVqaRSEjKtgAx9Lbm1hWKfqAmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0-82.153.218.255
82.153.243.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.210.62.0/24
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
72:c0:4c:0e:c0:4f:4c:6b:d4:75:0c:d2:c7:82:03:21:e8:16:
30:c4:3c:89:ba:6a:9f:62:d7:54:1c:7d:d0:6a:09:63:ad:bd:
7b:e4:ec:1f:e1:b2:79:a9:4b:89:2c:e8:e2:ca:37:ba:9e:e9:
12:c1:b4:ce:02:ab:d4:2e:25:a3:f3:ea:92:21:00:00:7b:80:
96:f2:ad:01:1f:c0:71:06:83:e5:ba:91:fb:ef:85:e2:a6:73:
51:b7:0b:20:55:a6:96:9f:bf:2f:19:a4:ed:3e:4a:01:c1:6d:
fa:46:d1:02:2a:6c:e0:37:f2:81:c7:dd:5d:76:bc:1b:f6:2c:
13:00:9a:99:c6:0b:4a:38:15:0c:0c:6e:14:39:67:c9:4d:63:
92:d5:87:ab:67:96:a2:2f:75:5e:64:aa:d3:f6:e3:a9:39:05:
ed:06:a8:3b:ec:45:f7:3b:48:4f:85:b8:3d:1e:af:e9:4c:f5:
87:1a:53:f4:fe:9e:c6:a4:6e:f8:ab:d9:f1:4b:02:5c:f3:b5:
5a:b1:54:a5:0e:7a:62:c7:17:f3:0b:0a:06:dd:61:4e:9d:62:
92:92:38:d9:10:ef:a4:71:79:08:50:b0:2b:eb:5d:11:3c:c2:
f5:cc:6b:fc:74:84:7b:2f:ce:bb:be:92:52:07:45:79:1e:e1:
d3:f4:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net