Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/wqKsJAafv-d9i7XHa1GJ9am0IXY.roa
File: wqKsJAafv-d9i7XHa1GJ9am0IXY.roa (raw, json)
Hash identifier: 5oUXZoNnXv6yl4YYul/doJww9E3eYTl34oRbQSXh7Pw=
Subject key identifier: C2:A2:AC:24:06:9F:BF:E7:7D:8B:B5:C7:6B:51:89:F5:A9:B4:21:76
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019538A6AFB1EA41E11C364F634A99C96F1E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/wqKsJAafv-d9i7XHa1GJ9am0IXY.roa
Signing time: Mon 24 Feb 2025 15:50:02 +0000
ROA not before: Mon 24 Feb 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48146
IP address blocks: 5.182.80.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.152.12.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
92.118.248.0/22 maxlen: 24
94.103.244.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
151.237.131.0/24 maxlen: 24
185.25.52.0/22 maxlen: 24
185.87.63.0/24 maxlen: 24
185.148.52.0/22 maxlen: 24
185.189.225.0/24 maxlen: 24
185.189.226.0/23 maxlen: 24
185.192.72.0/22 maxlen: 24
185.192.116.0/22 maxlen: 24
185.195.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
185.210.60.0/22 maxlen: 24
185.210.72.0/22 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
188.240.236.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
193.228.204.0/23 maxlen: 24
194.36.104.0/22 maxlen: 24
194.59.196.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:a6:af:b1:ea:41:e1:1c:36:4f:63:4a:99:c9:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Feb 24 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a2ac24069fbfe77d8bb5c76b5189f5a9b42176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:ef:63:6c:53:7f:09:6e:e0:82:44:1b:c6:
04:6c:ad:f5:5a:0e:0c:56:02:12:92:e3:2f:2e:9c:
e0:5b:28:22:87:8a:a4:82:56:2f:f4:bb:a6:ea:ff:
17:f0:5b:3b:25:df:cc:3b:12:9a:52:e9:23:37:53:
96:e0:7a:35:22:f5:83:e0:6b:96:a8:22:19:0d:55:
e6:47:7c:86:41:bf:a0:ea:1a:88:fe:2d:b4:44:10:
f0:06:e5:9a:f2:18:65:2a:a2:23:64:3c:76:4c:71:
a6:1a:11:7c:95:56:d5:c0:21:23:1b:25:0c:63:f5:
d8:9f:52:dc:92:f3:b4:ee:d3:2f:34:25:c8:48:12:
42:fd:9c:f2:89:b7:f1:7e:1e:c1:fa:50:b3:23:06:
f7:62:24:8f:a3:26:e1:5f:e5:aa:68:9f:92:1f:8e:
df:9d:cb:55:36:20:e7:ce:18:5e:bc:0d:f7:0c:fb:
b4:e3:99:75:b8:c3:a5:f4:8e:7f:42:23:a6:56:5a:
87:a6:26:6d:55:85:25:e1:81:ec:ee:8e:bf:fa:40:
b5:c5:c8:64:30:4b:f0:85:b8:d9:1d:69:2c:ff:91:
26:8d:e1:d1:af:6d:28:41:a1:23:59:f4:3f:88:68:
44:29:67:ef:f6:d0:f4:f5:c1:a3:6f:a9:28:bb:d6:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:AC:24:06:9F:BF:E7:7D:8B:B5:C7:6B:51:89:F5:A9:B4:21:76
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/wqKsJAafv-d9i7XHa1GJ9am0IXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.136.32.0/22
45.147.204.0/22
45.152.12.0/22
81.22.232.0/22
92.118.248.0/22
94.103.244.0/22
151.237.59.0/24
151.237.131.0/24
185.25.52.0/22
185.87.63.0/24
185.148.52.0/22
185.189.225.0-185.189.227.255
185.192.72.0/22
185.192.116.0/22
185.195.36.0/22
185.198.108.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.22.0/23
185.255.72.0/22
188.240.236.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.59.196.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
99:c7:15:74:92:50:76:7f:b8:43:14:01:c0:60:75:04:ed:44:
3f:00:78:fc:65:3d:d4:3a:58:3a:b0:6e:19:f8:c3:43:d7:cc:
f2:b9:c7:8b:69:a4:ea:8b:c5:86:b3:c2:e7:43:81:35:e2:e2:
73:c3:33:c4:03:4b:b8:b6:fa:55:36:fb:6a:b1:d2:04:11:a2:
da:26:3b:02:ba:57:4e:bd:0b:26:a7:86:91:f6:11:b3:b3:67:
a4:60:aa:e6:b6:a0:0b:48:86:7a:79:c8:e7:fe:8c:9c:fe:05:
c1:38:0a:76:3f:22:47:5e:6c:87:e5:e9:26:9a:a6:01:29:6c:
63:37:4b:7d:0f:37:75:07:aa:ec:dd:fb:03:06:af:1f:c7:fb:
13:b9:82:29:1a:66:b9:ff:51:c3:5a:82:11:c3:b9:d7:e8:49:
68:64:48:fc:3f:5e:fe:27:77:30:d1:52:29:ac:a6:75:9a:23:
cd:19:eb:a4:20:57:67:89:bc:8f:7e:68:49:7e:b4:59:45:4d:
90:53:47:be:3c:0f:fa:c1:ec:7a:6d:7c:09:2a:94:da:96:81:
7d:46:f1:b0:ed:6c:99:0b:36:ea:e7:d7:16:2b:7c:2e:a6:6a:
55:be:bd:bb:58:43:2a:30:27:da:44:1b:e8:2f:da:07:c3:8b:
af:f7:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:59 2025 by rpki-client on console.sobornost.net