Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F1p0yXHCYxLBgLKXKb8A6Zaf-7Q.roa
File: F1p0yXHCYxLBgLKXKb8A6Zaf-7Q.roa (raw, json)
Hash identifier: LzmWTWV3QtFIhCrguGtXHSSDdrv1dUcuH6kQZpM/foY=
Subject key identifier: 17:5A:74:C9:71:C2:63:12:C1:80:B2:97:29:BF:00:E9:96:9F:FB:B4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B3BCEEEF8830F5F2EAEB295BAC1D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F1p0yXHCYxLBgLKXKb8A6Zaf-7Q.roa
Signing time: Thu 09 Jan 2025 09:28:21 +0000
ROA not before: Thu 09 Jan 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b3:bc:ee:ef:88:30:f5:f2:ea:eb:29:5b:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175a74c971c26312c180b29729bf00e9969ffbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:24:0a:2e:51:2a:63:1a:64:57:4b:0b:e6:
e0:10:f5:e9:63:4b:08:a8:d1:18:35:01:93:18:17:
eb:ce:15:ab:6a:b2:23:5e:00:e3:60:77:fc:ae:ca:
48:c3:e7:2b:cd:16:5f:f2:d0:f4:7a:48:73:c3:21:
d5:3f:a0:ec:68:9e:37:0b:8a:cc:e5:c1:0b:86:53:
4c:39:36:87:59:cc:0e:a7:69:25:31:78:f6:ec:c0:
a0:5c:21:58:a8:67:27:4a:a5:23:12:a8:a5:f2:52:
03:bf:0e:97:fd:a3:bf:fd:6e:61:9b:1b:c4:f3:aa:
ad:25:da:b7:5d:92:72:47:7b:01:25:3d:3e:70:79:
83:83:a3:a1:8d:f2:11:6c:48:27:94:d1:96:30:ec:
cb:3a:74:2b:96:35:a2:b8:2f:00:75:c5:ed:5c:b0:
55:c4:a4:d5:c6:c1:c8:c7:73:4d:e2:ec:0a:a2:c8:
26:40:6d:ff:e6:d7:eb:3a:8c:30:e2:29:91:e4:24:
6a:7a:bc:f0:74:d2:2f:8b:bf:af:f1:49:4b:4b:ad:
c2:fa:7e:a5:31:4c:f8:6c:46:76:7a:1c:e1:d2:a0:
d1:6a:92:d1:9e:27:be:66:d4:19:dc:b0:e4:7d:7b:
5a:40:60:84:b9:6a:63:f4:29:0b:39:2d:10:0f:5a:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:74:C9:71:C2:63:12:C1:80:B2:97:29:BF:00:E9:96:9F:FB:B4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/F1p0yXHCYxLBgLKXKb8A6Zaf-7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
91.148.168.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
a9:96:da:8b:5e:99:46:c6:fd:cf:2b:5f:52:ab:d9:51:ac:b8:
9e:8d:cd:b8:6e:ae:28:be:db:7c:ec:8a:85:21:16:c5:47:da:
40:db:d2:e1:42:a3:45:44:e9:b4:9b:42:84:a5:78:b2:e4:74:
d6:31:44:13:66:af:19:c1:10:84:8e:26:f3:fa:33:31:7c:bd:
28:d9:f6:b9:e9:ce:dc:be:88:be:83:7f:b5:03:dd:56:76:16:
7e:10:65:72:48:3d:21:e5:f1:93:2b:5e:39:d2:29:74:c1:fa:
53:3d:44:16:9d:63:71:5c:f6:1d:59:0f:9d:54:86:e5:d0:f2:
82:f4:5c:83:df:e8:27:b4:c2:c5:fc:d0:ea:58:74:9e:d5:19:
14:43:2e:33:c9:90:c9:47:54:f2:38:ae:95:64:b5:36:f5:dc:
ce:b3:23:0e:77:11:ed:d6:86:5e:7a:58:ad:e4:f9:74:4b:92:
b2:36:b1:ec:96:ed:e5:d2:49:02:81:de:20:75:15:f3:47:1e:
ba:f0:43:15:ca:6c:b8:d8:d2:e0:20:a9:e4:df:58:20:d9:3d:
72:38:5d:ee:ff:f4:68:b3:85:6d:24:c4:fc:11:e9:ed:58:6c:
e1:83:18:87:d0:55:0f:3a:fb:df:05:53:64:02:38:44:c0:62:
af:30:01:cf
-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgISAZRKZLO87u+IMPXy6uspW6wdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTA5MDkyODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVhNzRjOTcxYzI2MzEyYzE4MGIyOTcyOWJmMDBlOTk2OWZmYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQkCi5RKmMaZFdLC+bgEPXpY0sI
qNEYNQGTGBfrzhWrarIjXgDjYHf8rspIw+crzRZf8tD0ekhzwyHVP6DsaJ43C4rM
5cELhlNMOTaHWcwOp2klMXj27MCgXCFYqGcnSqUjEqil8lIDvw6X/aO//W5hmxvE
86qtJdq3XZJyR3sBJT0+cHmDg6OhjfIRbEgnlNGWMOzLOnQrljWiuC8AdcXtXLBV
xKTVxsHIx3NN4uwKosgmQG3/5tfrOoww4imR5CRqerzwdNIvi7+v8UlLS63C+n6l
MUz4bEZ2ehzh0qDRapLRnie+ZtQZ3LDkfXtaQGCEuWpj9CkLOS0QD1rhdwIDAQAB
o4ID0DCCA8wwHQYDVR0OBBYEFBdadMlxwmMSwYCylym/AOmWn/u0MB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvRjFwMHlYSENZeExCZ0xLWEtiOEE2WmFmLTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5AYIKwYBBQUHAQcBAf8EggHTMIIBzzCCAbwEAgABMIIB
tAMEAQVoqAMEAAVorgMEAE1MCAMEAU1MCgMEAE6AAAMEAE6ACAMEAE6AKwMEAE6A
PAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6AUQMEAE6AXAMEAE6AXgMEAE6A
YgMEAU6AbAMEAE6OAQMEAU6OBAMEAE6OEQMEAE6OFAMEAE6OGDAMAwQATo4hAwQA
To4iMAwDBABOji8DBABOjjADBABOjjwDBABOjj8DBABPfAADBABPfA8DBAFPfBQw
DAMEAE98FwMEAE98HAMEAU98MjAMAwQAT3xJAwQAT3xKAwQAT3xMAwQAT3xPAwQA
T3xSAwQAUnbgAwQAUnbsAwQAUnbuAwQAUnb0AwQBUnb2AwQAV/YCAwQAW5SDAwQA
W5SMAwQAW5SgAwQAW5SoAwQBW7/YAwQAXkiRAwQCXkiUAwQBXkieAwQAgrngAwQA
grniAwQAgrnlMAwDBACCuesDBAGCuewDBACCufgDBACCufoDBAGw8bAwDAMEBLKE
UAMEAbKEVAMEArmUoAMEALnonzAMAwQC2a6UAwQA2a6WMAwDBAPZrpgDBADZrpoD
BADZrp8wDQQCAAIwBwMFACoBh0AwDQYJKoZIhvcNAQELBQADggEBAKmW2otemUbG
/c8rX1Kr2VGsuJ6Nzbhurii+23zsioUhFsVH2kDb0uFCo0VE6bSbQoSleLLkdNYx
RBNmrxnBEISOJvP6MzF8vSjZ9rnpzty+iL6Df7UD3VZ2Fn4QZXJIPSHl8ZMrXjnS
KXTB+lM9RBadY3Fc9h1ZD51UhuXQ8oL0XIPf6Ce0wsX80OpYdJ7VGRRDLjPJkMlH
VPI4rpVktTb13M6zIw53Ee3Whl56WK3k+XRLkrI2seyW7eXSSQKB3iB1FfNHHrrw
QxXKbLjY0uAgqeTfWCDZPXI4Xe7/9GizhW0kxPwR6e1YbOGDGIfQVQ86+98FU2QC
OETAYq8wAc8=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:26 2025 by rpki-client on console.sobornost.net