Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/s4VQNuobGsRlgR3J8_KzptiHPNc.roa
File: s4VQNuobGsRlgR3J8_KzptiHPNc.roa (raw, json)
Hash identifier: KGkwdbfR1NjMrRkauUlwjzA4LLz70essh+CeGiOAo3g=
Subject key identifier: B3:85:50:36:EA:1B:1A:C4:65:81:1D:C9:F3:F2:B3:A6:D8:87:3C:D7
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01948DBCC6D3C1BA022A20D97C3E4E2FD346
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/s4VQNuobGsRlgR3J8_KzptiHPNc.roa
Signing time: Wed 22 Jan 2025 11:19:06 +0000
ROA not before: Wed 22 Jan 2025 11:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/47 maxlen: 47
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/47 maxlen: 47
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:30::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/44 maxlen: 44
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/44 maxlen: 44
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:1000::/40 maxlen: 40
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:bc:c6:d3:c1:ba:02:2a:20:d9:7c:3e:4e:2f:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 22 11:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3855036ea1b1ac465811dc9f3f2b3a6d8873cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:8c:97:e7:27:39:46:a7:6b:75:16:46:7c:
57:e0:b0:9b:b0:ca:90:b9:9b:59:ce:f1:7f:39:be:
ce:bf:10:e3:84:b2:c1:2b:e1:48:af:d2:52:78:a5:
58:16:ca:70:73:8f:1e:ab:86:fa:0e:f0:24:25:6f:
3d:88:32:73:06:cd:00:79:96:7b:e9:fa:88:96:4c:
15:73:7b:0a:fb:86:3c:6b:9c:b4:35:e6:e0:13:ea:
da:55:85:c1:68:8f:00:4a:4d:47:93:ee:76:fa:a0:
5f:75:3b:2a:70:27:4a:53:97:a2:24:cb:02:eb:d8:
20:3c:ab:ae:b1:32:02:0d:d7:42:d7:56:e7:90:40:
77:da:11:12:10:9f:25:44:05:05:fd:c8:d8:8f:14:
28:d7:68:91:13:c6:1d:5f:dd:ee:d8:8c:91:00:18:
e5:6b:88:6b:df:83:f3:79:4e:b3:3f:65:b9:75:d0:
b1:30:52:13:d9:8e:8a:e8:bc:7b:5b:7b:5e:b0:3f:
09:68:93:ed:dd:67:12:ca:bf:05:fd:b3:93:81:98:
15:33:b6:3a:3c:17:a1:44:cd:cc:3d:9a:5d:ac:b6:
4a:3c:a1:d1:2f:ee:68:90:ac:54:11:57:cb:84:62:
ea:eb:df:a1:d5:1a:d5:56:ee:e8:f9:f8:12:e4:d9:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:50:36:EA:1B:1A:C4:65:81:1D:C9:F3:F2:B3:A6:D8:87:3C:D7
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/s4VQNuobGsRlgR3J8_KzptiHPNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/24
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
94:1f:21:5b:7d:c3:bd:c6:39:20:fe:09:43:31:40:15:f9:1d:
96:38:85:3f:c0:db:5d:0f:b7:a6:d8:8d:ee:26:5a:be:3a:53:
5e:47:ab:ae:19:6a:cc:d7:5d:12:b6:16:d6:ba:c9:1e:61:e3:
93:db:d1:78:21:d5:49:d3:2f:e4:41:ae:5d:9b:72:b5:f3:a0:
cd:63:71:3d:dd:18:43:f5:97:68:e9:c5:00:d4:37:7d:84:71:
ec:98:3a:91:61:09:1d:91:3f:ae:9b:9a:93:73:3e:c5:ee:20:
ec:70:db:4c:a7:ab:00:bd:e2:fc:ea:a0:0c:00:3e:20:a3:8a:
06:e4:b5:06:9e:5e:20:1c:b5:0e:c6:f1:3c:71:08:3c:a7:45:
f8:d3:8e:19:d0:ef:ef:35:58:49:f0:c3:a0:86:d0:f7:c9:2e:
a7:f0:74:10:89:6a:70:76:f2:63:69:2e:bf:cc:6a:a3:c5:08:
4a:c3:cc:ba:16:d2:ea:84:40:80:7f:9c:a2:4d:95:d4:15:4f:
c5:bb:81:f4:4c:da:28:85:72:59:36:f7:f3:45:7f:a4:3c:63:
83:52:5d:37:05:5e:7b:8a:1c:c7:57:9f:f6:f2:8c:14:e0:26:
da:2d:9c:bf:83:7e:97:7a:48:ff:dc:e5:89:2e:e6:fa:40:d5:
68:df:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:11 2025 by rpki-client on console.sobornost.net