Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/G2PjvDiuJS3O5PapDSmb7UV2_FI.roa
File: G2PjvDiuJS3O5PapDSmb7UV2_FI.roa (raw, json)
Hash identifier: ry4RQkP195nsOCF4UafHlwq9oYEW6743vAsj2V+2O+g=
Subject key identifier: 1B:63:E3:BC:38:AE:25:2D:CE:E4:F6:A9:0D:29:9B:ED:45:76:FC:52
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0193B5148A9AD646796FD77F3A9ECB36C76D
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/G2PjvDiuJS3O5PapDSmb7UV2_FI.roa
Signing time: Wed 11 Dec 2024 09:37:22 +0000
ROA not before: Wed 11 Dec 2024 09:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/12 maxlen: 12
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.38.0.0/15 maxlen: 15
82.38.0.0/16 maxlen: 16
82.39.0.0/16 maxlen: 16
82.40.0.0/15 maxlen: 15
82.40.0.0/16 maxlen: 16
82.41.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
82.46.0.0/15 maxlen: 15
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:14:8a:9a:d6:46:79:6f:d7:7f:3a:9e:cb:36:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Dec 11 09:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b63e3bc38ae252dcee4f6a90d299bed4576fc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:72:54:77:ec:65:0c:ff:a2:ff:32:f9:ea:
51:6b:6f:49:2b:7a:ad:1b:39:68:7e:56:63:97:a8:
28:4b:f3:aa:ab:64:8a:34:14:62:a3:cc:77:45:34:
9c:60:be:50:c0:c7:ff:8d:16:ba:85:28:0e:7c:c0:
4b:6a:67:d4:3c:70:33:12:da:c1:fe:42:45:25:85:
40:e4:21:06:e8:2b:b6:d2:26:7a:5a:e0:61:88:cb:
16:fa:21:0b:a0:d2:72:19:b7:db:57:8e:2c:1a:b8:
66:23:d4:60:84:a5:ec:96:3b:39:a2:95:40:e1:2a:
d3:3f:cd:18:02:9f:70:b5:e0:cc:15:af:68:8b:b3:
a3:c9:0e:eb:7b:49:0f:b0:c9:a4:a7:1a:9f:15:b7:
ca:e0:13:34:83:f9:9b:55:5f:90:ba:2f:0d:16:72:
f1:86:5f:a8:f3:f7:30:45:04:63:28:ab:26:d0:41:
3c:aa:38:bb:bd:c9:a4:97:d0:d0:fe:bf:56:2c:f2:
fa:12:fc:15:47:0c:ef:cf:ac:a8:97:83:3c:56:cd:
3a:23:03:b2:da:7e:24:c0:df:e5:83:79:fe:72:d6:
da:bc:98:e8:3d:34:b8:79:13:68:7f:e1:ca:37:bd:
d3:36:b2:fb:28:f9:fc:04:70:52:71:81:cb:f0:a8:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:E3:BC:38:AE:25:2D:CE:E4:F6:A9:0D:29:9B:ED:45:76:FC:52
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/G2PjvDiuJS3O5PapDSmb7UV2_FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.47.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
75:c2:0d:ba:57:a3:78:70:36:f8:12:75:b5:3b:8f:cd:5d:98:
95:6e:47:d0:d9:74:ab:cd:c6:87:20:60:91:34:08:41:d0:2c:
ac:a8:67:8b:b1:59:b1:82:46:b7:a9:c0:cf:40:77:cb:27:96:
ad:81:d3:d7:bd:73:78:94:40:2b:2a:2c:72:05:9f:4e:00:41:
23:da:8f:08:8f:b4:c7:a9:b6:3a:56:cf:26:9d:10:ce:89:f5:
fe:3a:27:23:54:f3:af:5b:ec:41:b9:78:8d:10:35:90:9a:7a:
99:c2:ae:73:90:92:bb:0b:4f:22:5a:6a:40:d8:93:37:d3:80:
3b:b5:d1:5c:a6:50:bc:24:f8:29:cb:36:a5:72:47:43:aa:e7:
b8:5d:51:41:9f:8b:24:25:e0:bf:06:6d:d2:61:b3:bf:dc:98:
b8:72:35:49:db:65:8f:3a:0a:cf:83:67:45:32:37:52:40:03:
ba:21:49:2e:c0:31:3c:6a:cf:85:19:fb:82:dd:e7:07:a6:a6:
1f:e1:8d:7d:5a:d8:0e:9a:6f:07:3c:ac:25:0b:3b:53:e6:84:
dd:c5:6b:0e:fa:e9:00:6b:0e:0a:05:89:bd:31:5f:69:83:eb:
49:70:f4:dd:db:09:c3:9f:a5:4b:cf:1b:f8:4b:39:96:a0:73:
f1:3f:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:01 2024 by rpki-client on console.sobornost.net