Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/nq039P0QzjAHO-SmHvjGspLonuw.roa
File: nq039P0QzjAHO-SmHvjGspLonuw.roa (raw, json)
Hash identifier: siBBxf/uaX8fXaeIsIZ3VgYORsdBHJXEMxLEzkRp9JE=
Subject key identifier: 9E:AD:37:F4:FD:10:CE:30:07:3B:E4:A6:1E:F8:C6:B2:92:E8:9E:EC
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0193A55885E0810321ADAAE0B1677E042528
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/nq039P0QzjAHO-SmHvjGspLonuw.roa
Signing time: Sun 08 Dec 2024 08:17:42 +0000
ROA not before: Sun 08 Dec 2024 08:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.213.255.0/26 maxlen: 26
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 24
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:f::/49 maxlen: 49
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:f8::/45 maxlen: 49
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a5:58:85:e0:81:03:21:ad:aa:e0:b1:67:7e:04:25:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Dec 8 08:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ead37f4fd10ce30073be4a61ef8c6b292e89eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:d8:07:a4:42:44:7f:ff:6d:0c:a3:8b:ab:
79:3f:32:b4:1f:74:98:b0:cb:68:36:35:64:ef:3f:
1f:ee:0e:f6:e5:72:53:5f:b5:30:9f:46:f3:e0:81:
a1:3f:f6:0e:28:e7:1f:6b:aa:89:6f:c3:19:e2:3d:
8c:58:3c:26:d8:2f:cb:61:6b:96:37:e6:42:1b:9d:
4a:8c:b4:fc:53:ef:50:c7:b3:7d:3d:a0:ce:f2:f4:
8a:79:60:c2:b2:c6:55:66:5e:c9:dc:34:bb:81:62:
8d:ff:ef:05:80:38:e3:e1:f1:72:d8:74:15:7c:94:
3c:d3:5b:55:a7:a1:f9:4b:7f:c2:b3:12:71:97:9f:
c9:28:28:67:d3:d6:02:80:f9:37:dd:d6:70:8a:5d:
c0:6e:5f:c6:ac:ef:dc:2e:27:00:0e:e6:d9:89:15:
b0:24:e5:80:b2:e6:78:c0:a1:07:d3:39:78:60:81:
d7:6a:5f:65:9b:bd:db:b7:c9:de:e2:4e:48:72:2a:
31:62:4f:19:81:d6:8c:0e:06:81:75:ee:2b:d7:02:
d9:b5:82:12:a5:e9:b4:d2:00:5f:e4:9c:d0:c7:d3:
b2:bd:4a:ce:d6:ee:e6:aa:f4:ea:27:13:75:c7:04:
16:e5:ed:31:97:39:7b:11:eb:08:80:4f:cf:6d:42:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AD:37:F4:FD:10:CE:30:07:3B:E4:A6:1E:F8:C6:B2:92:E8:9E:EC
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/nq039P0QzjAHO-SmHvjGspLonuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:f8::-2a02:4540:103:ffff:ffff:ffff:ffff:ffff
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
63:78:81:9c:2a:9d:9b:40:84:ee:43:ac:d6:c7:85:56:3f:cd:
13:6d:b0:75:b1:1c:b6:ad:f1:47:3d:f0:e5:27:1d:3c:60:77:
82:02:89:e5:15:dc:b8:54:7d:30:5a:6e:85:af:90:21:42:4f:
ab:c9:33:22:28:a0:4e:91:c1:2b:d1:c9:03:3d:e4:28:71:17:
ac:9d:59:23:52:71:df:55:d0:4c:3a:33:7d:9a:96:22:09:e2:
0e:12:50:33:ca:b5:0e:31:6e:fe:a7:6b:5e:4d:33:71:05:98:
8e:17:3f:c8:db:68:f4:30:9a:3b:ec:91:0a:79:61:59:26:3a:
14:ab:ab:3f:47:b9:e9:2a:41:6e:cb:f4:8a:65:98:0c:86:9a:
82:e1:89:84:fb:63:56:ae:e5:cc:aa:62:4c:97:95:75:01:80:
d0:a3:cd:2b:ea:98:d1:ed:68:b1:47:2c:2f:2b:b8:d1:f7:41:
48:bb:5e:fc:aa:4a:b1:f4:b1:8a:14:14:c7:6c:89:d4:33:2e:
8a:2c:98:e9:73:be:97:14:79:0b:25:70:45:18:f4:ef:0c:07:
0f:9d:f4:7c:e1:54:b1:03:73:ca:72:dc:bb:6b:34:8b:ec:ff:
46:75:f7:52:3b:80:43:0e:18:7a:8b:47:30:88:0e:58:79:f2:
92:b2:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net