Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/KobCP1lCEu6BPyvfUTWJy1Dv7MA.roa
File: KobCP1lCEu6BPyvfUTWJy1Dv7MA.roa (raw, json)
Hash identifier: dGRmdn7XqWJDLHPmqkuzRLVd2EYiao62ECUcZqZUV2Y=
Subject key identifier: 2A:86:C2:3F:59:42:12:EE:81:3F:2B:DF:51:35:89:CB:50:EF:EC:C0
Certificate issuer: /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial: 01941FFA99B6B708D9CA59CDE742938F7128
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/KobCP1lCEu6BPyvfUTWJy1Dv7MA.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24592
IP address blocks: 89.45.36.0/22 maxlen: 22
89.45.36.0/24 maxlen: 24
89.45.37.0/24 maxlen: 24
89.45.38.0/24 maxlen: 24
89.45.39.0/24 maxlen: 24
185.86.32.0/22 maxlen: 22
185.86.32.0/24 maxlen: 24
185.86.33.0/24 maxlen: 24
185.86.34.0/24 maxlen: 24
185.86.35.0/24 maxlen: 24
212.92.32.0/19 maxlen: 19
212.92.32.0/20 maxlen: 20
212.92.32.0/24 maxlen: 24
212.92.33.0/24 maxlen: 24
212.92.34.0/24 maxlen: 24
212.92.35.0/24 maxlen: 24
212.92.36.0/24 maxlen: 24
212.92.37.0/24 maxlen: 24
212.92.38.0/24 maxlen: 24
212.92.39.0/24 maxlen: 24
212.92.40.0/24 maxlen: 24
212.92.41.0/24 maxlen: 24
212.92.42.0/24 maxlen: 24
212.92.43.0/24 maxlen: 24
212.92.44.0/24 maxlen: 24
212.92.45.0/24 maxlen: 24
212.92.46.0/24 maxlen: 24
212.92.47.0/24 maxlen: 24
212.92.48.0/21 maxlen: 21
212.92.48.0/24 maxlen: 24
212.92.49.0/24 maxlen: 24
212.92.50.0/24 maxlen: 24
212.92.51.0/24 maxlen: 24
212.92.52.0/24 maxlen: 24
212.92.53.0/24 maxlen: 24
212.92.54.0/24 maxlen: 24
212.92.55.0/24 maxlen: 24
212.92.56.0/22 maxlen: 22
212.92.56.0/24 maxlen: 24
212.92.57.0/24 maxlen: 24
212.92.58.0/24 maxlen: 24
212.92.59.0/24 maxlen: 24
212.92.60.0/22 maxlen: 22
212.92.60.0/24 maxlen: 24
212.92.61.0/24 maxlen: 24
212.92.62.0/24 maxlen: 24
212.92.63.0/24 maxlen: 24
217.13.112.0/20 maxlen: 20
217.13.112.0/24 maxlen: 24
217.13.113.0/24 maxlen: 24
217.13.114.0/24 maxlen: 24
217.13.115.0/24 maxlen: 24
217.13.116.0/24 maxlen: 24
217.13.117.0/24 maxlen: 24
217.13.118.0/24 maxlen: 24
217.13.119.0/24 maxlen: 24
217.13.120.0/24 maxlen: 24
217.13.121.0/24 maxlen: 24
217.13.122.0/24 maxlen: 24
217.13.123.0/24 maxlen: 24
217.13.124.0/24 maxlen: 24
217.13.125.0/24 maxlen: 24
217.13.126.0/24 maxlen: 24
217.13.127.0/24 maxlen: 24
2a02:23c8::/40 maxlen: 40
2a02:23c8:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:b6:b7:08:d9:ca:59:cd:e7:42:93:8f:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a86c23f594212ee813f2bdf513589cb50efecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:00:1e:6c:06:59:39:a9:c9:b1:a5:5c:3a:
5a:98:a4:2f:91:c1:70:4e:1f:68:a3:81:89:5b:21:
60:bb:e4:27:fa:7b:29:78:85:b6:a5:fb:dd:6f:76:
c2:8f:bc:ee:41:5f:b9:5b:d0:fa:9d:54:c2:bd:a3:
13:30:2c:aa:dd:e0:f7:bd:d2:e3:12:9c:a3:cf:0b:
81:1f:b8:e4:fd:f1:9a:e5:c0:11:17:5c:be:74:a9:
6f:61:f7:58:d4:7f:b0:ac:2f:16:d1:3d:8a:67:a4:
45:f8:24:b6:46:21:f7:a5:61:e6:9b:ee:4e:01:3d:
a7:09:31:4c:63:9e:f4:9f:9b:58:63:5f:8a:cd:80:
c4:e0:71:b7:52:e7:1d:06:90:87:c3:84:a1:18:b4:
46:61:52:2b:41:78:c4:09:82:b0:93:be:96:26:e3:
88:42:7e:f1:9b:8a:31:62:3a:e9:28:1f:0e:46:7a:
81:26:aa:9c:dd:fc:c4:09:3e:b3:ac:82:d4:20:34:
38:29:2a:6a:9b:1b:e5:55:28:27:89:e6:c8:5f:ef:
dc:ed:7e:cb:88:3a:97:22:12:e1:33:81:f5:13:3b:
70:e0:50:94:80:ad:f7:da:9b:20:26:67:3a:af:dc:
3a:34:d8:1e:34:ba:84:c3:78:be:88:e5:19:23:b1:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:C2:3F:59:42:12:EE:81:3F:2B:DF:51:35:89:CB:50:EF:EC:C0
X509v3 Authority Key Identifier:
keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/KobCP1lCEu6BPyvfUTWJy1Dv7MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.36.0/22
185.86.32.0/22
212.92.32.0/19
217.13.112.0/20
IPv6:
2a02:23c8::/40
2a02:23c8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
18:27:fe:b9:64:ef:ed:69:b3:48:74:e8:14:ba:47:1f:46:85:
b0:20:86:5c:62:64:e6:65:51:64:5b:59:db:0d:c2:93:84:cf:
31:f9:e0:ed:10:f0:7e:c8:f8:24:9e:a6:1e:47:7d:1a:41:ea:
50:b8:f2:8a:c7:f4:67:fc:82:d5:a2:3b:c6:42:4f:93:9d:b5:
9f:11:25:13:5d:53:71:8a:a9:1a:55:22:86:cd:7c:65:99:8d:
b6:3b:7b:65:ba:0f:ab:84:9a:1d:f6:0a:ef:b3:96:39:6d:a5:
88:d2:0b:b6:b5:ca:e1:e8:c0:66:b7:5b:df:40:f8:4e:11:ea:
d2:f9:5c:77:b7:ef:ec:d4:d6:a0:7e:0e:7c:b2:59:cd:86:67:
c9:86:b5:f9:12:0a:f0:3b:92:a7:3b:b4:e8:0f:72:32:45:4b:
b5:76:5e:58:bf:77:20:1c:68:d3:15:03:50:00:26:19:a4:87:
a8:af:55:1e:ac:d1:d6:55:89:91:b4:20:bd:ae:56:1b:47:f6:
8c:8e:45:97:ef:aa:9e:f3:02:6e:14:1b:29:76:db:73:52:52:
c7:db:ca:4b:bb:cf:96:aa:f2:bd:5f:55:a0:cb:c3:4b:8b:f6:
aa:1d:64:f4:c5:80:bf:05:8d:fa:e1:60:b0:da:6e:a1:0a:9c:
06:51:a0:e6
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQf+pm2twjZylnN50KTj3EoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZTYyMTQ4YjMwYjY2YmQwYTNkYTM4OTdlY2ZiZmQ5YWY0
ZjQzMWUwHhcNMjUwMTAxMDM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTg2YzIzZjU5NDIxMmVlODEzZjJiZGY1MTM1ODljYjUwZWZlY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa8AHmwGWTmpybGlXDpamKQvkcFw
Th9oo4GJWyFgu+Qn+nspeIW2pfvdb3bCj7zuQV+5W9D6nVTCvaMTMCyq3eD3vdLj
EpyjzwuBH7jk/fGa5cARF1y+dKlvYfdY1H+wrC8W0T2KZ6RF+CS2RiH3pWHmm+5O
AT2nCTFMY570n5tYY1+KzYDE4HG3UucdBpCHw4ShGLRGYVIrQXjECYKwk76WJuOI
Qn7xm4oxYjrpKB8ORnqBJqqc3fzECT6zrILUIDQ4KSpqmxvlVSgniebIX+/c7X7L
iDqXIhLhM4H1Eztw4FCUgK332psgJmc6r9w6NNgeNLqEw3i+iOUZI7GhjQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCqGwj9ZQhLugT8r31E1ictQ7+zAMB8GA1UdIwQY
MBaAFHrmIUizC2a9Cj2jiX7Pv9mvT0MeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXVZaFNMTUxacjBLUGFPSmZzLV8yYTlQUXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMWYyN2EtYjU3Yi00NzgwLTg0ZDAt
MjcxYmQ3MmNkZjY5LzEvS29iQ1AxbENFdTZCUHl2ZlVUV0p5MUR2N01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zMWYyN2EtYjU3Yi00NzgwLTg0ZDAtMjcxYmQ3MmNkZjY5
LzEvZXVZaFNMTUxacjBLUGFPSmZzLV8yYTlQUXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQCWS0kAwQC
uVYgAwQF1FwgAwQE2Q1wMBYEAgACMBADBgAqAiPIAAMGACoCI8j/MA0GCSqGSIb3
DQEBCwUAA4IBAQAYJ/65ZO/tabNIdOgUukcfRoWwIIZcYmTmZVFkW1nbDcKThM8x
+eDtEPB+yPgknqYeR30aQepQuPKKx/Rn/ILVojvGQk+TnbWfESUTXVNxiqkaVSKG
zXxlmY22O3tlug+rhJod9grvs5Y5baWI0gu2tcrh6MBmt1vfQPhOEerS+Vx3t+/s
1Nagfg58slnNhmfJhrX5EgrwO5KnO7ToD3IyRUu1dl5Yv3cgHGjTFQNQACYZpIeo
r1UerNHWVYmRtCC9rlYbR/aMjkWX76qe8wJuFBspdttzUlLH28pLu8+WqvK9X1Wg
y8NLi/aqHWT0xYC/BY364WCw2m6hCpwGUaDm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net