Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Z2283uq29NIUzvwwGfxjRoKz2ic.roa
File: Z2283uq29NIUzvwwGfxjRoKz2ic.roa (raw, json)
Hash identifier: ye0lJmTm2aOweLnjI6yHGSXgqEtr0BgvcqYCJ237OP0=
Subject key identifier: 67:6D:BC:DE:EA:B6:F4:D2:14:CE:FC:30:19:FC:63:46:82:B3:DA:27
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEC3C880E9A2D40F8A04BC7E7E907
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Z2283uq29NIUzvwwGfxjRoKz2ic.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 5.134.192.0/21 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.71.0/24 maxlen: 32
31.7.72.0/21 maxlen: 32
31.7.72.0/24 maxlen: 32
31.7.73.0/24 maxlen: 32
31.7.74.0/24 maxlen: 32
31.7.75.0/24 maxlen: 32
31.7.76.0/24 maxlen: 32
31.7.77.0/24 maxlen: 32
31.7.78.0/24 maxlen: 32
31.7.79.0/24 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.12.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.15.0/24 maxlen: 24
37.156.144.0/22 maxlen: 32
37.156.144.0/24 maxlen: 32
37.156.145.0/24 maxlen: 32
37.156.146.0/24 maxlen: 32
37.156.147.0/24 maxlen: 32
46.143.0.0/17 maxlen: 32
46.245.64.0/18 maxlen: 32
46.245.64.0/22 maxlen: 32
46.245.64.0/24 maxlen: 32
46.245.65.0/24 maxlen: 32
46.245.66.0/24 maxlen: 32
46.245.67.0/24 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.68.0/24 maxlen: 32
46.245.69.0/24 maxlen: 32
46.245.70.0/24 maxlen: 32
46.245.71.0/24 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.72.0/24 maxlen: 32
46.245.73.0/24 maxlen: 32
46.245.74.0/24 maxlen: 32
46.245.75.0/24 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.76.0/24 maxlen: 32
46.245.77.0/24 maxlen: 32
46.245.78.0/24 maxlen: 32
46.245.79.0/24 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.80.0/24 maxlen: 32
46.245.81.0/24 maxlen: 32
46.245.82.0/24 maxlen: 32
46.245.83.0/24 maxlen: 32
46.245.84.0/22 maxlen: 32
46.245.84.0/24 maxlen: 32
46.245.85.0/24 maxlen: 32
46.245.86.0/24 maxlen: 32
46.245.87.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.88.0/24 maxlen: 32
46.245.89.0/24 maxlen: 32
46.245.90.0/24 maxlen: 32
46.245.91.0/24 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.92.0/24 maxlen: 32
46.245.93.0/24 maxlen: 32
46.245.94.0/24 maxlen: 32
46.245.95.0/24 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.96.0/24 maxlen: 32
46.245.97.0/24 maxlen: 32
46.245.98.0/24 maxlen: 32
46.245.99.0/24 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.100.0/24 maxlen: 32
46.245.101.0/24 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
78.110.124.0/22 maxlen: 32
78.110.124.0/23 maxlen: 32
78.110.126.0/23 maxlen: 32
79.127.0.0/17 maxlen: 32
85.198.28.0/22 maxlen: 32
85.198.28.0/23 maxlen: 32
85.198.30.0/23 maxlen: 32
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
109.122.224.0/20 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
178.22.120.0/21 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
178.216.251.0/24 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
188.0.240.0/23 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
2a05:1a00::/26 maxlen: 128
2a05:1a10::/29 maxlen: 128
2a06:5484::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:3c:88:0e:9a:2d:40:f8:a0:4b:c7:e7:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676dbcdeeab6f4d214cefc3019fc634682b3da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:70:91:3a:7f:cb:9c:70:e9:b8:ee:8d:e6:
ef:02:90:9f:59:ed:6f:e1:fd:39:12:41:a4:43:da:
5b:e6:11:94:07:b3:e7:fe:56:43:ae:ba:73:1f:e7:
55:1a:9f:6c:ef:0d:69:f3:d7:3e:1e:4b:77:0b:8d:
1b:38:dc:50:fe:0a:d4:43:37:40:de:31:4c:0e:bb:
7d:47:be:62:ed:7c:c8:3f:1b:a6:9e:9c:d6:78:c6:
70:8a:80:c0:89:e1:3f:29:c6:c2:f6:ac:c0:35:48:
c5:5e:cc:d7:20:97:3f:cf:5a:58:f3:a7:f0:ff:30:
1a:1b:d3:71:76:86:d5:bf:67:21:a8:fa:88:55:e5:
ce:ef:cb:26:a1:d0:19:f1:2b:46:d6:de:c5:81:e4:
08:fd:44:1e:cf:46:c6:33:d5:9e:99:00:da:53:b1:
b3:6e:cd:80:af:0e:de:f6:8b:95:5a:bb:12:43:75:
e7:cf:82:2e:3e:9d:3b:fe:d4:67:60:f6:c1:0b:0e:
03:63:e2:c7:5a:7c:3e:a0:5b:db:f8:52:7e:43:b0:
61:94:aa:bd:0b:f7:1c:01:e8:49:dd:ae:c3:27:de:
70:30:9c:80:e3:13:99:d9:45:60:d4:2b:9c:43:9f:
d0:40:e3:f2:69:79:c3:e0:93:e4:27:1e:fc:c1:aa:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:BC:DE:EA:B6:F4:D2:14:CE:FC:30:19:FC:63:46:82:B3:DA:27
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Z2283uq29NIUzvwwGfxjRoKz2ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
78.110.124.0/22
79.127.0.0/17
85.198.28.0/22
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
7b:be:bd:ab:a0:9e:52:3a:b3:bc:dd:10:b2:b2:f3:52:69:f7:
0c:ac:40:20:6e:ad:d6:31:50:12:c1:e8:0a:44:7f:e8:58:9a:
c8:f9:65:ed:4e:d3:c8:f6:61:6d:ee:c7:c9:b4:86:79:28:7e:
ba:34:10:17:7e:e8:1d:cd:93:ae:63:cc:27:36:16:2b:d1:88:
dc:43:c3:40:03:70:cc:14:12:8f:0f:98:56:61:ef:a5:ba:5c:
44:d4:30:d9:a4:c7:94:cd:67:cc:03:30:42:15:2a:9d:68:c8:
4a:4f:74:b3:4c:cc:d8:b2:f7:4e:3b:26:6f:1d:e1:97:8d:f2:
73:4d:c8:28:0c:9c:d7:fa:e8:8c:49:c9:a5:72:0f:8c:84:83:
fe:29:2c:69:1b:98:62:25:79:44:de:34:91:4e:b9:0a:d8:5d:
91:d4:56:4e:7f:48:af:a1:8a:ba:a7:e2:ce:36:69:40:d7:22:
79:4e:5d:0d:6f:1a:dc:1b:c4:24:b9:ef:bf:96:41:33:df:5e:
9f:f0:e7:1f:06:aa:1b:0b:ad:3c:f6:6d:4c:34:cd:56:69:19:
46:f1:d4:af:31:76:99:17:d2:29:5d:21:99:a7:b8:14:b6:2a:
a5:fb:dd:29:89:ec:bb:b1:49:28:af:b8:21:c6:61:f8:70:83:
e8:53:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:09 2025 by rpki-client on console.sobornost.net