Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/NWP0IwrsmeCD_LX1vnrNRfFM-Ps.roa
File: NWP0IwrsmeCD_LX1vnrNRfFM-Ps.roa (raw, json)
Hash identifier: frDpd28rGb7Kt7uuvCaUyJ/SYpuV4hdCfRDMb41mRas=
Subject key identifier: 35:63:F4:23:0A:EC:99:E0:83:FC:B5:F5:BE:7A:CD:45:F1:4C:F8:FB
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01942827330D6138AEDCD20F5B9FE8748818
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/NWP0IwrsmeCD_LX1vnrNRfFM-Ps.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.90.7.0/24 maxlen: 24
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:2000:4000::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:33:0d:61:38:ae:dc:d2:0f:5b:9f:e8:74:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3563f4230aec99e083fcb5f5be7acd45f14cf8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:13:6f:e6:00:36:a8:b7:3b:5f:89:df:44:
7d:75:c4:44:5a:df:14:28:a5:d9:d9:de:61:83:d7:
36:cb:5d:6c:5f:c7:8f:2b:53:37:e5:16:e4:13:d0:
59:f8:2e:93:f7:9f:fb:9d:ca:0f:7a:66:61:ca:a4:
e6:66:4d:be:54:06:bd:ec:bd:84:23:2f:76:56:1c:
be:41:7d:c5:19:16:55:46:63:a4:e7:c6:5a:0f:05:
0a:27:be:54:f8:2c:de:e4:da:26:af:04:73:d8:92:
9f:b1:5a:f1:e1:56:fb:8c:2a:00:31:eb:0a:5c:a5:
d6:17:59:45:ff:7e:ea:0b:27:45:e0:91:da:f0:e3:
45:2b:d3:f9:4e:60:a2:32:a8:b5:41:bf:42:db:70:
9e:01:5d:76:bd:6c:f4:a9:97:a5:77:d7:2f:fd:a6:
e8:0d:d1:32:92:3e:e8:92:85:2b:0d:45:29:1e:4a:
24:f5:fc:00:bb:f5:6f:a2:5a:ef:12:43:df:7b:e0:
77:c3:36:2b:f7:a7:e7:be:06:2e:46:36:18:a2:ab:
50:e6:ba:26:92:bb:d5:dd:e6:d8:79:6c:86:cb:a1:
54:e4:17:83:e3:17:61:fc:43:02:f5:4f:81:8f:4e:
e8:a6:78:63:f3:cd:9a:9d:1d:93:b6:2e:7d:5f:fa:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:F4:23:0A:EC:99:E0:83:FC:B5:F5:BE:7A:CD:45:F1:4C:F8:FB
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/NWP0IwrsmeCD_LX1vnrNRfFM-Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:2000:4000::/56
Signature Algorithm: sha256WithRSAEncryption
7d:39:ea:d4:7b:da:0c:f8:a7:3f:ab:0d:38:c9:11:6d:af:6f:
56:36:98:b0:ed:ff:ef:0b:7c:29:2e:c3:30:28:3c:c8:73:01:
ef:85:d3:77:ae:d0:94:f4:4a:59:ee:b5:2a:30:76:4d:06:27:
9f:9c:06:c5:b7:dc:64:a1:83:1c:44:c0:4f:e8:49:99:29:c6:
e0:7a:fa:a5:04:8b:bb:95:be:af:41:fc:0f:e9:a7:95:5b:f6:
d0:aa:e8:f0:43:74:10:7b:c1:c6:17:38:23:d8:31:59:02:de:
8d:b6:df:57:88:a3:34:6e:3b:6a:9b:41:5c:20:c7:14:06:74:
4b:db:ce:4d:93:a7:05:0b:71:04:dc:b8:c9:39:23:69:61:65:
e3:86:e7:63:54:42:16:49:84:8f:fc:28:9b:6d:50:c8:49:7b:
24:9b:49:cb:eb:7f:2e:3d:a9:ce:94:e5:e6:87:2f:b8:ac:02:
4d:12:96:f3:99:3f:e2:2f:56:1d:bd:bf:bf:99:a1:6d:4e:de:
53:b5:5b:05:c2:73:ec:2d:fa:97:ed:31:b3:cb:c9:28:3a:80:
cd:3e:04:87:c2:3e:07:4d:98:f1:51:38:2b:12:ac:50:21:17:
4f:f0:35:71:60:07:d6:74:69:d8:29:8e:12:2e:f9:53:18:42:
9b:66:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net