Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/9ONRNrbBValrAJuV2y6z566kP6w.roa
File: 9ONRNrbBValrAJuV2y6z566kP6w.roa (raw, json)
Hash identifier: JNoo7S5r35f65oUQwxcPjybT+69dMIFA6KuxH5tUX5Y=
Subject key identifier: F4:E3:51:36:B6:C1:55:A9:6B:00:9B:95:DB:2E:B3:E7:AE:A4:3F:AC
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01941FFA72E0B070DDA14DA0F5F5849D7A81
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/9ONRNrbBValrAJuV2y6z566kP6w.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 24.132.0.0/16 maxlen: 16
24.132.0.0/17 maxlen: 17
24.132.128.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
31.151.0.0/17 maxlen: 17
31.151.128.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.0.0/17 maxlen: 17
46.129.128.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
62.108.0.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.16.0/20 maxlen: 20
62.163.0.0/16 maxlen: 16
62.163.0.0/17 maxlen: 17
62.163.128.0/17 maxlen: 17
62.194.0.0/15 maxlen: 15
62.194.0.0/16 maxlen: 16
62.195.0.0/16 maxlen: 16
77.248.0.0/14 maxlen: 14
77.248.0.0/15 maxlen: 15
77.250.0.0/15 maxlen: 15
80.56.0.0/15 maxlen: 15
80.56.0.0/16 maxlen: 16
80.57.0.0/16 maxlen: 16
80.85.32.0/20 maxlen: 20
80.113.0.0/16 maxlen: 16
80.113.0.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
80.248.32.0/20 maxlen: 20
81.175.64.0/18 maxlen: 18
81.175.64.0/19 maxlen: 19
81.175.96.0/19 maxlen: 19
84.41.128.0/17 maxlen: 17
88.211.128.0/18 maxlen: 18
89.98.0.0/15 maxlen: 15
89.98.0.0/16 maxlen: 16
89.99.0.0/16 maxlen: 16
89.220.0.0/17 maxlen: 17
92.108.0.0/14 maxlen: 14
92.108.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
95.96.0.0/15 maxlen: 15
95.96.0.0/16 maxlen: 16
95.97.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
178.84.0.0/16 maxlen: 16
178.85.0.0/16 maxlen: 16
185.94.92.0/22 maxlen: 22
185.137.200.0/22 maxlen: 22
185.137.200.0/23 maxlen: 23
185.137.202.0/23 maxlen: 23
195.18.64.0/18 maxlen: 18
212.67.160.0/19 maxlen: 19
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
212.83.80.0/20 maxlen: 20
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
212.178.48.0/20 maxlen: 20
212.187.0.0/17 maxlen: 17
212.187.0.0/18 maxlen: 18
212.187.64.0/18 maxlen: 18
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
213.46.0.0/16 maxlen: 16
213.46.0.0/17 maxlen: 17
213.46.128.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
213.93.0.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.124.160.0/19 maxlen: 19
213.124.160.0/20 maxlen: 20
213.124.176.0/20 maxlen: 20
213.124.192.0/18 maxlen: 18
213.124.192.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
213.126.128.0/17 maxlen: 17
213.126.128.0/18 maxlen: 18
213.126.192.0/18 maxlen: 18
213.127.0.0/16 maxlen: 16
213.127.0.0/17 maxlen: 17
213.127.128.0/17 maxlen: 17
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.160.252.0/22 maxlen: 22
217.17.128.0/20 maxlen: 20
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
217.63.160.0/19 maxlen: 19
217.102.0.0/17 maxlen: 17
217.102.0.0/18 maxlen: 18
217.102.64.0/18 maxlen: 18
217.103.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.128.0/17 maxlen: 17
217.104.128.0/17 maxlen: 17
217.104.128.0/18 maxlen: 18
217.104.192.0/18 maxlen: 18
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
217.105.32.0/19 maxlen: 19
217.105.224.0/19 maxlen: 19
217.105.224.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
217.112.112.0/20 maxlen: 20
2a00:18b0::/32 maxlen: 32
2a02:938::/29 maxlen: 29
2a02:a200::/27 maxlen: 27
2a02:a200::/28 maxlen: 28
2a02:a210::/28 maxlen: 28
2a03:4aa0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:e0:b0:70:dd:a1:4d:a0:f5:f5:84:9d:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e35136b6c155a96b009b95db2eb3e7aea43fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:6a:19:ff:f2:59:5f:d9:46:ec:85:16:28:
69:51:63:f1:19:cb:98:75:fa:9d:2f:d2:f1:b4:ba:
07:c9:95:2f:73:9a:34:80:c1:c8:eb:d2:1d:b7:c3:
a0:97:0e:7d:f5:af:05:17:8a:86:46:fc:a4:76:73:
ff:95:1c:f8:7a:e0:a8:3c:19:b6:96:c9:53:a7:42:
14:91:5a:77:60:a3:7b:0f:b4:37:03:43:bf:3e:e7:
58:97:b6:33:cc:11:9d:fc:3c:a3:86:3d:2b:3e:10:
c5:2a:9a:f3:fa:ce:2f:e1:b2:1b:8e:73:95:d4:50:
83:f9:d5:e4:9d:c9:1a:42:f8:ce:72:62:d0:5b:56:
10:c2:dc:65:4b:48:ab:be:c8:60:e5:f7:9e:0c:0b:
09:76:74:d5:c2:83:60:6f:c9:b7:63:2b:b4:cd:d6:
19:7c:f2:40:04:54:fd:bd:80:ac:b1:d2:62:99:fe:
38:c5:08:00:69:5f:48:c6:fd:a7:1f:23:34:73:af:
84:e6:3f:35:6d:6e:81:9c:f1:bb:c0:9c:99:90:35:
db:cd:72:14:59:35:08:9f:10:10:a2:48:7d:d8:46:
2e:c4:bc:af:42:54:fb:e1:ba:6d:ac:b8:b7:f9:30:
a7:21:90:7f:62:e0:40:e4:c0:16:ea:f7:3e:82:b7:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:51:36:B6:C1:55:A9:6B:00:9B:95:DB:2E:B3:E7:AE:A4:3F:AC
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/9ONRNrbBValrAJuV2y6z566kP6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.100.0.0/18
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
80.248.32.0/20
81.175.64.0/18
84.41.128.0/17
88.211.128.0/18
89.98.0.0/15
89.220.0.0/17
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
195.18.64.0/18
212.67.160.0/19
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.17.128.0/20
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
217.112.112.0/20
IPv6:
2a00:18b0::/32
2a02:938::/29
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:97:99:45:d1:ce:a9:cb:7e:a6:61:6b:b1:2b:c6:c7:21:eb:
cf:95:13:73:68:7a:4a:95:9d:3b:47:94:1f:d5:06:77:54:6c:
98:6f:e0:d3:3b:bc:86:43:15:c9:e9:46:45:31:93:af:14:0a:
98:41:9d:17:78:fb:a5:b1:b6:92:66:e3:ad:c2:66:b2:13:00:
f5:ed:32:34:d0:13:9e:20:f6:74:8c:71:5e:0f:10:7e:1a:7f:
a0:85:b4:2e:3e:75:91:2a:7a:c1:8e:a6:a9:fd:fb:4a:e0:4f:
d1:49:bb:5d:57:b1:90:d8:a8:ce:d4:1a:47:1b:63:65:7b:0c:
9e:89:ac:e5:6c:8f:47:e0:b0:80:27:4f:9d:fa:ec:a8:51:9a:
6c:a2:76:c0:e0:58:3c:2a:05:16:47:92:29:b9:5a:ed:af:d8:
10:79:b2:8f:55:1a:84:90:9d:0c:e4:42:d4:3f:2d:9c:82:46:
32:de:0b:d6:10:d6:d3:0b:9f:ea:e7:f0:42:77:a9:3d:60:ce:
d6:36:e3:25:70:0f:8e:23:85:fe:dc:00:8e:b3:13:c7:e2:c0:
29:d4:90:6e:6e:38:70:7b:c2:de:9b:a4:14:4c:c0:45:6d:d4:
10:42:7e:34:b4:07:e3:eb:d7:c7:f4:1e:50:56:16:18:1f:b7:
18:9e:33:90
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgISAZQf+nLgsHDdoU2g9fWEnXqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjUwMTAxMDM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGUzNTEzNmI2YzE1NWE5NmIwMDliOTVkYjJlYjNlN2FlYTQzZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBqGf/yWV/ZRuyFFihpUWPxGcuY
dfqdL9LxtLoHyZUvc5o0gMHI69Idt8Oglw599a8FF4qGRvykdnP/lRz4euCoPBm2
lslTp0IUkVp3YKN7D7Q3A0O/PudYl7YzzBGd/Dyjhj0rPhDFKprz+s4v4bIbjnOV
1FCD+dXknckaQvjOcmLQW1YQwtxlS0irvshg5feeDAsJdnTVwoNgb8m3Yyu0zdYZ
fPJABFT9vYCssdJimf44xQgAaV9Ixv2nHyM0c6+E5j81bW6BnPG7wJyZkDXbzXIU
WTUInxAQokh92EYuxLyvQlT74bptrLi3+TCnIZB/YuBA5MAW6vc+grddGQIDAQAB
o4IDLTCCAykwHQYDVR0OBBYEFPTjUTa2wVWpawCbldsus+eupD+sMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEvOU9OUk5yYkJWYWxyQUp1VjJ5Nno1NjZrUDZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCAQQEAgABMIH9
AwMAGIQDAwAflwMDAC6BAwQGPmQAAwQFPmwAAwMAPqMDAwE+wgMDAk34AwMBUDgD
BARQVSADAwBQcQMEBFD4IAMEBlGvQAMEB1QpgAMEBljTgAMDAVliAwQHWdwAAwMC
XGwDAwFfYAMDAbJUAwQCuV5cAwQCuYnIAwQGwxJAAwQF1EOgAwQF1FNAAwQF1LIg
AwQH1LsAAwQF1SIAAwMA1S4DAwDVXTALAwQF1XygAwMA1XwwCwMEB9V+gAMDB9UA
AwQF1aDAAwQD1aD4AwQE2RGAAwQG2T+AAwQH2WYAAwMA2WcwDAMEB9logAMEBtlp
AAMEBdlp4AMEBNlwcDAiBAIAAjAcAwUAKgAYsAMFAyoCCTgDBQUqAqIAAwUDKgNK
oDANBgkqhkiG9w0BAQsFAAOCAQEAepeZRdHOqct+pmFrsSvGxyHrz5UTc2h6SpWd
O0eUH9UGd1RsmG/g0zu8hkMVyelGRTGTrxQKmEGdF3j7pbG2kmbjrcJmshMA9e0y
NNATniD2dIxxXg8Qfhp/oIW0Lj51kSp6wY6mqf37SuBP0Um7XVexkNioztQaRxtj
ZXsMnoms5WyPR+CwgCdPnfrsqFGabKJ2wOBYPCoFFkeSKbla7a/YEHmyj1UahJCd
DORC1D8tnIJGMt4L1hDW0wuf6ufwQnepPWDO1jbjJXAPjiOF/twAjrMTx+LAKdSQ
bm44cHvC3pukFEzARW3UEEJ+NLQH4+vXx/QeUFYWGB+3GJ4zkA==
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:36:01 2025 by rpki-client on console.sobornost.net