Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/urbklb_tMgWulJwput0Uvsn9CsE.roa
File: urbklb_tMgWulJwput0Uvsn9CsE.roa (raw, json)
Hash identifier: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=
Subject key identifier: BA:B6:E4:95:BF:ED:32:05:AE:94:9C:29:BA:DD:14:BE:C9:FD:0A:C1
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 0195EB7999AA017AC51184CDC3B0C8F03CF8
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/urbklb_tMgWulJwput0Uvsn9CsE.roa
Signing time: Mon 31 Mar 2025 09:12:49 +0000
ROA not before: Mon 31 Mar 2025 09:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16202
IP address blocks: 77.64.128.0/17 maxlen: 20
77.64.128.0/18 maxlen: 18
77.64.128.0/19 maxlen: 19
77.64.146.0/23 maxlen: 23
77.64.160.0/19 maxlen: 19
77.64.192.0/19 maxlen: 19
77.64.192.0/20 maxlen: 20
77.64.208.0/20 maxlen: 20
77.64.224.0/20 maxlen: 20
77.64.240.0/20 maxlen: 20
77.64.252.0/23 maxlen: 23
77.64.254.0/23 maxlen: 23
83.221.64.0/19 maxlen: 23
83.221.64.0/20 maxlen: 23
83.221.64.0/21 maxlen: 21
83.221.72.0/21 maxlen: 21
83.221.80.0/20 maxlen: 20
83.221.80.0/21 maxlen: 21
83.221.88.0/21 maxlen: 21
89.186.128.0/19 maxlen: 19
89.186.128.0/20 maxlen: 20
89.186.128.0/21 maxlen: 21
89.186.136.0/21 maxlen: 21
89.186.144.0/20 maxlen: 20
89.186.144.0/21 maxlen: 21
89.186.152.0/21 maxlen: 21
92.206.0.0/16 maxlen: 16
92.206.0.0/17 maxlen: 17
92.206.0.0/18 maxlen: 18
92.206.64.0/18 maxlen: 23
92.206.128.0/18 maxlen: 23
92.206.160.0/19 maxlen: 19
92.206.190.0/23 maxlen: 23
92.206.192.0/18 maxlen: 23
92.206.224.0/19 maxlen: 19
95.168.128.0/19 maxlen: 19
95.168.128.0/20 maxlen: 20
95.168.144.0/20 maxlen: 20
185.44.148.0/22 maxlen: 22
185.44.150.0/23 maxlen: 23
217.68.160.0/19 maxlen: 19
217.68.160.0/20 maxlen: 20
217.68.176.0/20 maxlen: 20
2a00:c1a0::/32 maxlen: 32
2a00:c1a0::/34 maxlen: 34
2a00:c1a0:4000::/34 maxlen: 34
2a00:c1a0:8000::/34 maxlen: 34
2a00:c1a0:c000::/34 maxlen: 34
2a02:2454:8000::/33 maxlen: 36
2a02:2457:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:79:99:aa:01:7a:c5:11:84:cd:c3:b0:c8:f0:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Mar 31 09:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bab6e495bfed3205ae949c29badd14bec9fd0ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:fe:da:40:9a:b0:2e:b1:a6:05:00:db:8a:
e1:65:9d:51:18:ee:1c:db:35:61:1f:c7:d5:a6:44:
3d:37:c9:91:65:2f:90:54:92:f0:0a:c1:ff:fb:84:
7e:98:a5:30:4b:8e:e9:0e:5c:c9:d8:7c:54:10:f0:
14:18:83:d4:bd:c5:02:62:7c:62:f9:f0:b8:d1:d2:
b4:ef:05:be:4b:fe:7c:dd:3a:a9:bb:57:ce:0b:d9:
35:e6:9a:6f:cc:0e:06:9e:46:85:da:28:76:dc:b6:
33:68:7a:4c:ca:6f:f2:36:d0:eb:7f:2b:87:42:34:
9f:34:d9:53:f9:c3:fe:b3:1e:75:35:91:93:f6:96:
20:f8:72:88:5c:de:c4:af:76:25:b9:d6:d0:15:4e:
7c:c2:18:69:6e:c2:47:eb:93:82:25:89:08:fc:81:
27:05:d1:83:b9:aa:3d:58:68:8f:bd:d5:b9:cd:af:
bd:ef:aa:de:37:22:8f:8b:cb:e0:02:e5:a0:42:ab:
be:9b:fb:64:be:1d:49:d2:38:8a:b5:62:58:98:b9:
7b:4f:4e:90:19:b4:cb:34:2f:cb:42:60:77:b6:9e:
3f:90:0a:12:6e:56:53:79:71:5f:49:31:7b:48:8b:
b0:03:49:3b:ed:73:e2:5b:36:7b:0d:94:8d:fb:d9:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:E4:95:BF:ED:32:05:AE:94:9C:29:BA:DD:14:BE:C9:FD:0A:C1
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/urbklb_tMgWulJwput0Uvsn9CsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.128.0/17
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
95.168.128.0/19
185.44.148.0/22
217.68.160.0/19
IPv6:
2a00:c1a0::/32
2a02:2454:8000::/33
2a02:2457:100::/40
Signature Algorithm: sha256WithRSAEncryption
9c:4a:69:56:89:d7:66:b6:a7:80:91:81:3e:9b:ff:0d:89:1a:
63:6a:0e:d1:4d:30:51:36:4c:be:5e:ea:7e:7b:bf:8a:ae:01:
43:67:e9:e5:27:7e:e7:d3:4e:2e:42:13:eb:e5:0b:40:ce:bc:
85:99:10:94:50:78:a4:27:52:74:62:7c:b1:84:cc:4a:72:22:
68:dd:b2:8c:bc:e5:d3:4f:97:82:bb:d8:2b:2d:ec:f6:b7:8b:
40:ef:75:2e:fb:7c:e9:8f:3b:d2:74:1f:7e:32:30:9e:4e:d6:
0a:31:b5:79:53:cb:1f:23:f2:a9:7e:2e:03:8d:3d:cb:31:27:
b1:e4:64:9a:8e:e0:c8:bb:f2:cb:13:4f:3d:bd:f7:fe:d8:3a:
b5:5a:13:53:2b:e7:6b:6a:7b:3c:49:79:fd:ae:d1:bd:b7:82:
9a:58:5b:3d:5a:d9:a7:94:55:7c:69:ea:04:ee:1f:ed:42:84:
7a:93:9e:ad:a1:73:64:4c:07:e8:7e:a2:32:09:f2:6c:2b:19:
52:10:50:fb:e4:96:55:ef:db:19:aa:25:6d:f2:d3:e2:e2:16:
31:31:c7:35:7d:e8:ed:f7:6f:d3:22:04:6e:8c:f5:e5:1c:67:
55:ef:2d:fb:9d:78:b6:8e:f0:89:58:21:df:97:da:17:60:24:
3a:8d:ea:a8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZXreZmqAXrFEYTNw7DI8Dz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUwMzMxMDkxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWI2ZTQ5NWJmZWQzMjA1YWU5NDljMjliYWRkMTRiZWM5ZmQwYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjb+2kCasC6xpgUA24rhZZ1RGO4c
2zVhH8fVpkQ9N8mRZS+QVJLwCsH/+4R+mKUwS47pDlzJ2HxUEPAUGIPUvcUCYnxi
+fC40dK07wW+S/583Tqpu1fOC9k15ppvzA4GnkaF2ih23LYzaHpMym/yNtDrfyuH
QjSfNNlT+cP+sx51NZGT9pYg+HKIXN7Er3YludbQFU58whhpbsJH65OCJYkI/IEn
BdGDuao9WGiPvdW5za+976reNyKPi8vgAuWgQqu+m/tkvh1J0jiKtWJYmLl7T06Q
GbTLNC/LQmB3tp4/kAoSblZTeXFfSTF7SIuwA0k77XPiWzZ7DZSN+9keHwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFLq25JW/7TIFrpScKbrdFL7J/QrBMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvdXJia2xiX3RNZ1d1bEp3cHV0MFV2c245Q3NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAvBAIAATApAwQHTUCAAwQF
U91AAwQFWbqAAwMAXM4DBAVfqIADBAK5LJQDBAXZRKAwHQQCAAIwFwMFACoAwaAD
BgcqAiRUgAMGACoCJFcBMA0GCSqGSIb3DQEBCwUAA4IBAQCcSmlWiddmtqeAkYE+
m/8NiRpjag7RTTBRNky+Xup+e7+KrgFDZ+nlJ37n004uQhPr5QtAzryFmRCUUHik
J1J0YnyxhMxKciJo3bKMvOXTT5eCu9grLez2t4tA73Uu+3zpjzvSdB9+MjCeTtYK
MbV5U8sfI/Kpfi4DjT3LMSex5GSajuDIu/LLE089vff+2Dq1WhNTK+drans8SXn9
rtG9t4KaWFs9WtmnlFV8aeoE7h/tQoR6k56toXNkTAfofqIyCfJsKxlSEFD75JZV
79sZqiVt8tPi4hYxMcc1fejt92/TIgRujPXlHGdV7y37nXi2jvCJWCHfl9oXYCQ6
jeqo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net