Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Z37sxKC_QZOplxW8OhZLv0FFjH0.roa
File: Z37sxKC_QZOplxW8OhZLv0FFjH0.roa (raw, json)
Hash identifier: asFfJLzjA7EIZ3j2D5v1xS1GItsJ85CBmWkdUGYL7OM=
Subject key identifier: 67:7E:EC:C4:A0:BF:41:93:A9:97:15:BC:3A:16:4B:BF:41:45:8C:7D
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0193445DACF873EB079072ACC13DB3B416E5
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Z37sxKC_QZOplxW8OhZLv0FFjH0.roa
Signing time: Tue 19 Nov 2024 12:20:09 +0000
ROA not before: Tue 19 Nov 2024 12:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:5d:ac:f8:73:eb:07:90:72:ac:c1:3d:b3:b4:16:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 19 12:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677eecc4a0bf4193a99715bc3a164bbf41458c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:98:0f:86:7a:cd:74:2e:40:31:5d:0f:6f:
f6:67:c2:d2:5c:02:b6:20:4b:7b:61:1c:32:73:3a:
4d:55:60:13:95:81:cd:a7:d9:a1:e4:19:89:9d:b2:
70:49:21:a4:8e:af:a6:e8:a4:47:16:48:b8:fd:52:
0f:e0:2a:aa:fa:46:4a:35:50:bd:c2:db:ea:99:66:
14:58:fd:34:ea:38:88:7f:02:62:a8:ad:fe:bc:64:
ed:f1:ea:76:a4:ec:32:88:dd:33:2d:24:91:a9:bf:
90:43:4c:c6:43:04:63:4c:f7:b9:eb:02:8d:26:fc:
75:55:18:85:dd:7b:95:df:2d:95:f0:08:4a:5c:25:
c6:db:5a:3a:9b:79:6e:67:e1:dc:7a:60:6a:18:26:
ef:0d:28:f8:88:99:63:0c:c5:89:fa:88:77:76:30:
d4:2f:1f:7d:ff:80:1b:d0:0c:e7:76:94:85:38:e3:
85:26:69:02:10:d7:75:4c:6f:cd:09:26:ad:32:13:
97:87:7b:c2:38:b9:8d:ae:1d:b0:24:0f:f8:7e:0c:
1d:ad:2d:2a:a7:60:7c:bf:14:23:46:4a:24:0a:17:
8e:52:c0:f8:30:82:3f:90:bb:03:69:af:0c:b8:df:
6b:f9:b4:c0:34:84:d1:61:ad:9a:87:63:f8:37:0c:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:EC:C4:A0:BF:41:93:A9:97:15:BC:3A:16:4B:BF:41:45:8C:7D
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Z37sxKC_QZOplxW8OhZLv0FFjH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
08:2a:06:17:1f:b8:75:1a:64:c9:d8:c9:91:67:95:0e:a8:2b:
21:22:ee:53:fc:dc:d1:9b:c9:ef:0f:c7:bb:82:2e:55:75:46:
09:d4:63:0b:80:14:8f:38:5c:88:6a:b3:1c:9d:12:55:f6:2a:
48:a9:23:ec:83:be:51:3a:79:0f:63:52:f7:ab:b1:81:60:65:
b8:8d:12:69:c0:4b:e8:af:83:a6:32:a6:50:c6:c4:d4:fd:51:
3e:61:87:69:8d:10:2d:1c:13:df:4c:f4:4e:f0:f8:20:12:50:
40:d4:89:f8:5e:9b:75:c6:5f:7b:8a:4c:9a:4c:44:a4:9a:58:
d7:6b:c7:35:f4:98:24:1c:74:e2:df:49:62:7b:6a:95:13:ed:
da:40:3b:d3:aa:77:d3:85:85:19:14:73:ac:1a:1f:c5:4b:32:
b0:6c:ae:70:46:2d:a0:5c:30:2f:0d:2a:e8:88:71:3a:8b:e8:
7d:2f:ca:bb:cb:52:06:40:e1:20:d6:55:87:0f:81:3d:5b:49:
39:9f:02:94:18:2e:7c:17:d4:b4:25:2e:5b:f4:aa:08:f4:7e:
38:16:9e:40:28:dc:90:70:46:53:80:34:d2:75:84:84:93:c3:
24:49:60:6b:97:3d:3b:a0:06:a8:91:74:ef:37:33:a3:c4:42:
d4:1e:08:8f
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZNEXaz4c+sHkHKswT2ztBblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjQxMTE5MTIyMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzdlZWNjNGEwYmY0MTkzYTk5NzE1YmMzYTE2NGJiZjQxNDU4YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wGYD4Z6zXQuQDFdD2/2Z8LSXAK2
IEt7YRwyczpNVWATlYHNp9mh5BmJnbJwSSGkjq+m6KRHFki4/VIP4Cqq+kZKNVC9
wtvqmWYUWP006jiIfwJiqK3+vGTt8ep2pOwyiN0zLSSRqb+QQ0zGQwRjTPe56wKN
Jvx1VRiF3XuV3y2V8AhKXCXG21o6m3luZ+HcemBqGCbvDSj4iJljDMWJ+oh3djDU
Lx99/4Ab0AzndpSFOOOFJmkCENd1TG/NCSatMhOXh3vCOLmNrh2wJA/4fgwdrS0q
p2B8vxQjRkokCheOUsD4MII/kLsDaa8MuN9r+bTANITRYa2ah2P4NwxM2wIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFGd+7MSgv0GTqZcVvDoWS79BRYx9MB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvWjM3c3hLQ19RWk9wbHhXOE9oWkx2MEZGakgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDHwswAwQF
JbogAwQEUEygAwQCZxEAAwQBZxd8AwQCZ8dYAwQCZ+FIAwQF1EZgMA0EAgACMAcD
BQMqBH+AMA0GCSqGSIb3DQEBCwUAA4IBAQAIKgYXH7h1GmTJ2MmRZ5UOqCshIu5T
/NzRm8nvD8e7gi5VdUYJ1GMLgBSPOFyIarMcnRJV9ipIqSPsg75ROnkPY1L3q7GB
YGW4jRJpwEvor4OmMqZQxsTU/VE+YYdpjRAtHBPfTPRO8PggElBA1In4Xpt1xl97
ikyaTESkmljXa8c19JgkHHTi30lie2qVE+3aQDvTqnfThYUZFHOsGh/FSzKwbK5w
Ri2gXDAvDSroiHE6i+h9L8q7y1IGQOEg1lWHD4E9W0k5nwKUGC58F9S0JS5b9KoI
9H44Fp5AKNyQcEZTgDTSdYSEk8MkSWBrlz07oAaokXTvNzOjxELUHgiP
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:06:33 2024 by rpki-client on console.sobornost.net