Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa
File: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (raw, json)
Hash identifier: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=
Subject key identifier: C9:59:44:EB:0B:4E:98:73:DB:05:B3:D3:6C:67:D5:B5:17:D0:93:72
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0195FB8DD0CA6B4BFE75E6181B22FBC5FBB5
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa
Signing time: Thu 03 Apr 2025 12:08:49 +0000
ROA not before: Thu 03 Apr 2025 12:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50564
IP address blocks: 94.158.252.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.24.0/24 maxlen: 24
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.236.0/24 maxlen: 24
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.124.0/24 maxlen: 24
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
185.184.0.0/22 maxlen: 23
185.184.0.0/23 maxlen: 23
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.48.0/24 maxlen: 24
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:8d:d0:ca:6b:4b:fe:75:e6:18:1b:22:fb:c5:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Apr 3 12:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c95944eb0b4e9873db05b3d36c67d5b517d09372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:3e:d8:af:54:22:ad:93:1a:33:00:d4:ba:
18:47:21:be:30:30:4d:3f:31:cd:30:e6:15:d3:46:
cd:c5:8c:d4:93:99:36:95:4f:b6:d6:98:27:d4:32:
b9:ca:ba:78:5f:d3:16:29:d7:c4:77:fb:d4:bd:a2:
52:24:68:7f:9d:82:7b:dc:b6:ba:c9:77:b5:e4:62:
a8:97:76:d8:c7:65:fc:3b:23:14:46:b8:c5:12:77:
1e:b2:40:55:d0:3e:4f:1f:1c:75:84:62:54:f2:34:
25:12:32:9a:04:8a:7b:aa:c2:8b:48:5d:e3:ea:1e:
0c:e3:de:93:53:77:3e:c8:4e:f2:e9:7a:d8:6b:60:
8c:c2:9a:d4:89:d3:96:77:40:65:cd:f4:42:fc:43:
2c:45:95:be:c6:08:3d:0e:42:29:f7:d9:90:0b:86:
a0:b4:f0:11:55:69:90:bb:0d:59:4b:98:da:a4:99:
3e:3d:7b:86:c0:63:5f:68:45:f7:7c:c6:78:5d:a8:
e8:08:23:ce:b4:4e:cf:83:49:92:88:18:1b:aa:a9:
c9:ab:27:b7:17:6e:23:a7:fc:29:d3:38:d4:56:3e:
ad:ba:9a:45:32:40:84:c4:a8:58:30:b6:1d:86:72:
09:c9:d7:7b:09:0d:df:42:af:56:0d:12:12:b6:51:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:44:EB:0B:4E:98:73:DB:05:B3:D3:6C:67:D5:B5:17:D0:93:72
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.252.0/24
94.158.255.0/24
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:ee:e1:e1:aa:e1:95:46:80:f5:86:90:9e:44:d2:95:3d:9a:
db:c2:3b:93:cc:be:f0:b0:9c:9b:cf:96:0a:f8:51:5f:a6:32:
c4:d6:a4:e2:e2:fc:bd:7b:3f:f4:86:2e:a2:eb:58:b1:4f:4a:
55:e0:c1:d0:9e:a1:2f:91:2d:07:f0:c2:d1:7f:78:98:1a:26:
09:c7:e9:92:b9:d9:9b:90:48:c5:c8:bb:ea:32:d5:34:42:c4:
8c:ab:e9:6d:aa:f4:35:08:ab:ef:ee:45:96:3d:e4:92:1c:05:
e2:e6:c5:89:63:89:37:56:4b:2c:bc:fb:77:11:fd:a3:f5:f5:
42:0c:68:7d:07:3e:43:f8:f9:f5:c1:f8:86:81:05:bc:57:6a:
cf:26:84:8d:69:d3:53:f4:59:76:e1:75:aa:bc:e4:7c:9d:53:
32:da:9f:1c:7f:09:95:50:d5:e0:a1:92:01:e3:17:e0:46:f0:
c0:04:30:e6:37:a0:70:45:ee:9a:a2:4d:ea:74:ca:05:5b:e4:
bb:ef:2c:f5:63:d1:a5:69:f1:62:0a:70:55:28:30:71:50:b5:
b5:4f:6d:0b:fe:77:18:71:ac:b8:43:0a:c7:27:83:36:a3:52:
70:12:29:84:bb:35:56:ed:b7:24:a7:3e:52:3c:31:e3:90:37:
1c:cc:2d:42
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZX7jdDKa0v+deYYGyL7xfu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjUwNDAzMTIwODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTU5NDRlYjBiNGU5ODczZGIwNWIzZDM2YzY3ZDViNTE3ZDA5MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquM+2K9UIq2TGjMA1LoYRyG+MDBN
PzHNMOYV00bNxYzUk5k2lU+21pgn1DK5yrp4X9MWKdfEd/vUvaJSJGh/nYJ73La6
yXe15GKol3bYx2X8OyMURrjFEnceskBV0D5PHxx1hGJU8jQlEjKaBIp7qsKLSF3j
6h4M496TU3c+yE7y6XrYa2CMwprUidOWd0BlzfRC/EMsRZW+xgg9DkIp99mQC4ag
tPARVWmQuw1ZS5japJk+PXuGwGNfaEX3fMZ4XajoCCPOtE7Pg0mSiBgbqqnJqye3
F24jp/wp0zjUVj6tuppFMkCExKhYMLYdhnIJydd7CQ3fQq9WDRIStlF9yQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFMlZROsLTphz2wWz02xn1bUX0JNyMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEveVZsRTZ3dE9tSFBiQmJQVGJHZlZ0UmZRazNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAXp78AwQA
Xp7/AwQCuSwYAwQCuV98AwQCuWjsAwQCuY+IAwQCubZ8AwQCubgAAwQCudAUAwQC
udUwMA0GCSqGSIb3DQEBCwUAA4IBAQCo7uHhquGVRoD1hpCeRNKVPZrbwjuTzL7w
sJybz5YK+FFfpjLE1qTi4vy9ez/0hi6i61ixT0pV4MHQnqEvkS0H8MLRf3iYGiYJ
x+mSudmbkEjFyLvqMtU0QsSMq+ltqvQ1CKvv7kWWPeSSHAXi5sWJY4k3VkssvPt3
Ef2j9fVCDGh9Bz5D+Pn1wfiGgQW8V2rPJoSNadNT9Fl24XWqvOR8nVMy2p8cfwmV
UNXgoZIB4xfgRvDABDDmN6BwRe6aok3qdMoFW+S77yz1Y9GlafFiCnBVKDBxULW1
T20L/ncYcay4QwrHJ4M2o1JwEimEuzVW7bckpz5SPDHjkDcczC1C
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net