Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/7A2o7z-kHbbDWetSKaiJQi3M4XI.roa
File: 7A2o7z-kHbbDWetSKaiJQi3M4XI.roa (raw, json)
Hash identifier: I2uoWqxCO5Z59Oe1ncEgLKBlTVMq/c3WvZ2oLXZJNGw=
Subject key identifier: EC:0D:A8:EF:3F:A4:1D:B6:C3:59:EB:52:29:A8:89:42:2D:CC:E1:72
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 0193D95D3320D6DE53563945BAFE94774F86
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/7A2o7z-kHbbDWetSKaiJQi3M4XI.roa
Signing time: Wed 18 Dec 2024 10:43:03 +0000
ROA not before: Wed 18 Dec 2024 10:43:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56630
IP address blocks: 5.182.228.0/22 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
45.135.120.0/22 maxlen: 24
45.141.8.0/22 maxlen: 24
45.150.232.0/22 maxlen: 24
77.72.16.0/23 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
88.210.38.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
89.34.238.0/24 maxlen: 24
89.36.160.0/24 maxlen: 24
89.36.161.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
91.192.83.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
92.119.88.0/22 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.57.0/24 maxlen: 24
93.189.58.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
103.82.100.0/23 maxlen: 23
103.97.88.0/24 maxlen: 24
103.97.89.0/24 maxlen: 24
103.97.90.0/24 maxlen: 24
103.253.37.0/24 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
185.35.220.0/23 maxlen: 23
185.110.216.0/23 maxlen: 23
185.120.136.0/24 maxlen: 24
185.120.137.0/24 maxlen: 24
185.120.138.0/24 maxlen: 24
185.120.139.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
185.140.12.0/22 maxlen: 24
185.140.208.0/24 maxlen: 24
185.140.209.0/24 maxlen: 24
185.224.248.0/24 maxlen: 24
185.224.250.0/24 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
194.59.46.0/24 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.142.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
195.238.124.0/22 maxlen: 24
212.23.200.0/24 maxlen: 24
213.183.32.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.63.0/24 maxlen: 24
213.226.68.0/22 maxlen: 24
217.30.8.0/22 maxlen: 24
2a06:f900::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f902:c000::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f906::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:5d:33:20:d6:de:53:56:39:45:ba:fe:94:77:4f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Dec 18 10:43:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec0da8ef3fa41db6c359eb5229a889422dcce172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:d0:c4:d4:01:b9:1d:e6:89:b9:db:fb:4f:
08:29:97:30:15:f9:98:40:97:51:64:5b:60:58:a1:
64:2a:de:97:52:ad:53:42:31:f7:68:32:cf:55:a2:
8b:3d:90:19:c5:c7:3c:45:e6:d9:3f:6f:e8:0b:c3:
0d:af:da:26:ce:be:42:f2:6c:0e:b9:29:8d:73:55:
ae:a8:08:39:77:90:97:09:0d:c2:00:6d:12:b1:05:
a0:0a:7a:38:57:67:59:fb:fd:9e:86:31:fb:2d:91:
7c:ae:09:36:de:88:5e:51:00:c5:cb:42:46:8b:e6:
8c:90:d9:7c:3c:93:ed:02:2b:7e:15:0e:b7:92:e1:
e3:99:a5:9e:19:88:e2:85:59:c8:c8:da:5a:a2:c4:
9d:34:59:f9:73:a9:0a:fb:99:c0:1d:c1:23:a0:9f:
5d:36:5a:80:e4:94:76:f8:a8:64:9e:e6:44:92:60:
46:2c:d7:44:36:47:48:21:50:5f:68:c0:12:80:ab:
77:6a:b4:38:59:9d:b1:9f:dd:7f:e5:1b:71:2c:6e:
a4:9c:12:f9:33:5e:fa:54:56:87:36:61:84:01:94:
98:fc:69:fe:6a:43:c0:7d:5d:74:92:1b:54:03:04:
54:af:dc:ce:bf:19:64:b9:ac:16:1e:e4:e8:c8:c7:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:A8:EF:3F:A4:1D:B6:C3:59:EB:52:29:A8:89:42:2D:CC:E1:72
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/7A2o7z-kHbbDWetSKaiJQi3M4XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
89.34.238.0/24
89.36.160.0/23
91.192.80.0/24
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
103.82.100.0/23
103.97.88.0-103.97.90.255
103.253.37.0/24
185.6.12.0/22
185.35.220.0/23
185.110.216.0/23
185.120.136.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.248.0/24
185.224.250.0/24
185.246.152.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
212.23.200.0/24
213.183.32.0/23
213.183.36.0-213.183.53.255
213.183.58.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f902:c000::/36
2a06:f903::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
60:9c:b0:b4:ed:5e:30:1e:32:a0:05:b6:e7:21:ca:48:05:70:
b8:11:b8:96:c6:41:0f:d7:03:a3:61:d6:d5:99:d1:24:25:27:
ef:3e:96:b3:69:65:90:9f:42:fb:80:ef:f6:fb:d8:54:e4:40:
5f:1f:b7:d3:40:07:61:ea:95:33:71:a7:57:bd:d1:e6:73:8f:
53:e0:7d:20:e1:43:72:80:37:a3:27:c5:f1:46:e5:63:7f:bd:
c8:f5:50:99:3d:e4:5a:3f:f5:3b:5d:7d:b8:49:8b:4f:87:ed:
42:7c:d2:ab:d3:1a:31:02:04:d7:a1:8f:dc:17:3a:9f:69:ef:
ad:b8:eb:22:1e:23:ed:97:89:15:23:36:85:eb:94:81:91:6c:
89:ad:a9:22:54:b7:36:98:7d:56:e8:0f:a4:d9:a6:64:9a:0b:
29:52:9e:79:6d:19:5f:10:b9:b5:5e:3d:13:01:ef:5d:10:9b:
de:71:69:ba:4a:20:96:de:bc:a6:55:91:9b:c3:3e:fb:01:b0:
2f:f6:58:4f:51:df:21:2f:08:3e:c8:bc:19:2e:79:70:ba:4f:
34:f0:ed:98:34:3d:5b:e7:f1:45:2c:a8:08:46:d4:0b:57:0a:
8f:b6:55:f8:e2:ea:e0:86:c5:f5:38:d3:ff:c9:ca:44:d8:d9:
0c:21:d8:3e
-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgISAZPZXTMg1t5TVjlFuv6Ud0+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3
NDIxYTYwHhcNMjQxMjE4MTA0MzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzBkYThlZjNmYTQxZGI2YzM1OWViNTIyOWE4ODk0MjJkY2NlMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3fQxNQBuR3mibnb+08IKZcwFfmY
QJdRZFtgWKFkKt6XUq1TQjH3aDLPVaKLPZAZxcc8RebZP2/oC8MNr9omzr5C8mwO
uSmNc1WuqAg5d5CXCQ3CAG0SsQWgCno4V2dZ+/2ehjH7LZF8rgk23oheUQDFy0JG
i+aMkNl8PJPtAit+FQ63kuHjmaWeGYjihVnIyNpaosSdNFn5c6kK+5nAHcEjoJ9d
NlqA5JR2+KhknuZEkmBGLNdENkdIIVBfaMASgKt3arQ4WZ2xn91/5RtxLG6knBL5
M176VFaHNmGEAZSY/Gn+akPAfV10khtUAwRUr9zOvxlkuawWHuToyMd/lwIDAQAB
o4IDljCCA5IwHQYDVR0OBBYEFOwNqO8/pB22w1nrUimoiUItzOFyMB8GA1UdIwQY
MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt
N2Q3MDM3NGQ3NmQyLzEvN0Eybzd6LWtIYmJEV2V0U0thaUpRaTNNNFhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy
LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqgYIKwYBBQUHAQcBAf8EggGZMIIBlTCCASoEAgABMIIB
IgMEAgW25AMEAQW8rAMEAgW8tAMEAh8o2AMEAi2HeAMEAi2NCAMEAi2W6AMEA01I
EAMEAVjSJgMEAlja8AMEAFki7gMEAVkkoAMEAFvAUAMEAFvAUwMEAlvJQAMEAlx3
WDAMAwQDXb04AwQAXb06AwQCXb08AwQBZ1JkMAwDBANnYVgDBABnYVoDBABn/SUD
BAK5BgwDBAG5I9wDBAG5btgDBAK5eIgDBAK5g0ADBAK5h1QDBAK5jAwDBAG5jNAD
BAC54PgDBAC54PoDBAK59pgDBADCOy4DBADCOzsDBADCO44DBADCO5sDBALD7nwD
BADUF8gDBAHVtyAwDAMEAtW3JAMEAdW3NDAMAwQB1bc6AwQG1bcAAwQC1eJEAwQC
2R4IMGUEAgACMF8DBgQqBvkAAAMGBCoG+QBAAwYEKgb5AQADBgQqBvkCAAMGBCoG
+QLAAwYEKgb5AwADBgQqBvkEAAMGBCoG+QUAAwYEKgb5BgADBgQqBvkHAAMGBCoG
+QdAAwUAKg2EADANBgkqhkiG9w0BAQsFAAOCAQEAYJywtO1eMB4yoAW25yHKSAVw
uBG4lsZBD9cDo2HW1ZnRJCUn7z6Ws2llkJ9C+4Dv9vvYVORAXx+300AHYeqVM3Gn
V73R5nOPU+B9IOFDcoA3oyfF8UblY3+9yPVQmT3kWj/1O119uEmLT4ftQnzSq9Ma
MQIE16GP3Bc6n2nvrbjrIh4j7ZeJFSM2heuUgZFsia2pIlS3Nph9VugPpNmmZJoL
KVKeeW0ZXxC5tV49EwHvXRCb3nFpukoglt68plWRm8M++wGwL/ZYT1HfIS8IPsi8
GS55cLpPNPDtmDQ9W+fxRSyoCEbUC1cKj7ZV+OLq4IbF9TjT/8nKRNjZDCHYPg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:40 2024 by rpki-client on console.sobornost.net