Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa
File: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (raw, json)
Hash identifier: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=
Subject key identifier: 00:8F:93:DF:EC:C8:A7:50:CC:AD:25:C3:E2:F0:4A:60:20:D9:05:5E
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019523CB53E80FB8B7FED855147030AEDFF5
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa
Signing time: Thu 20 Feb 2025 14:38:02 +0000
ROA not before: Thu 20 Feb 2025 14:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 2.84.0.0/14 maxlen: 14
2.84.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
2.85.0.0/16 maxlen: 16
2.86.0.0/16 maxlen: 16
2.86.64.0/19 maxlen: 19
2.87.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
45.139.212.0/22 maxlen: 22
45.139.212.0/23 maxlen: 23
45.139.214.0/23 maxlen: 23
62.103.0.0/16 maxlen: 16
62.103.0.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.147.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
62.103.228.0/24 maxlen: 24
79.128.0.0/14 maxlen: 14
79.128.0.0/16 maxlen: 16
79.128.176.0/24 maxlen: 24
79.128.177.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.129.0.0/16 maxlen: 16
79.130.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
80.106.0.0/15 maxlen: 15
80.106.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
80.107.0.0/16 maxlen: 24
80.107.91.0/24 maxlen: 24
80.107.116.0/22 maxlen: 22
80.107.204.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
83.235.64.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.71.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.77.0/24 maxlen: 24
85.72.0.0/14 maxlen: 14
85.72.0.0/16 maxlen: 16
85.73.0.0/16 maxlen: 16
85.73.128.0/18 maxlen: 18
85.73.192.0/18 maxlen: 18
85.74.0.0/16 maxlen: 16
85.74.160.0/20 maxlen: 20
85.74.192.0/19 maxlen: 19
85.75.0.0/16 maxlen: 16
85.75.0.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.112.0/21 maxlen: 21
85.75.224.0/20 maxlen: 20
87.202.0.0/15 maxlen: 15
87.202.0.0/16 maxlen: 16
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
87.203.0.0/16 maxlen: 16
87.203.64.0/18 maxlen: 18
94.64.0.0/13 maxlen: 13
94.64.0.0/16 maxlen: 16
94.65.0.0/16 maxlen: 16
94.66.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
94.66.96.0/22 maxlen: 22
94.66.128.0/18 maxlen: 18
94.66.220.0/22 maxlen: 22
94.67.0.0/16 maxlen: 16
94.67.128.0/17 maxlen: 17
94.68.0.0/16 maxlen: 16
94.69.0.0/16 maxlen: 16
94.69.64.0/19 maxlen: 19
94.70.0.0/16 maxlen: 16
94.70.0.0/19 maxlen: 20
94.71.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.146.0.0/16 maxlen: 16
178.147.0.0/16 maxlen: 16
185.44.144.0/22 maxlen: 22
185.44.144.0/23 maxlen: 23
185.44.146.0/23 maxlen: 23
195.22.154.0/23 maxlen: 23
195.167.0.0/17 maxlen: 17
195.167.92.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
195.170.0.0/24 maxlen: 24
195.170.2.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
217.195.128.0/20 maxlen: 20
217.195.128.0/21 maxlen: 21
217.195.128.0/22 maxlen: 22
2a02:580::/29 maxlen: 29
2a02:582:1800::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:586::/35 maxlen: 35
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586:4000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:c000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:1800::/38 maxlen: 38
2a02:587:2000::/36 maxlen: 36
2a02:587:3000::/36 maxlen: 36
2a02:587:4000::/34 maxlen: 34
2a02:587:4800::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:501a::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:587:501e::/48 maxlen: 48
2a02:587:50da::/48 maxlen: 48
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:587:5400::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:6400::/38 maxlen: 38
2a02:587:8000::/34 maxlen: 34
2a02:587:8400::/40 maxlen: 40
2a02:587:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:cb:53:e8:0f:b8:b7:fe:d8:55:14:70:30:ae:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Feb 20 14:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008f93dfecc8a750ccad25c3e2f04a6020d9055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:b9:d7:d2:9e:22:26:4d:ed:fc:71:13:cd:
5d:0c:6b:f6:34:fb:10:97:69:dd:c6:8d:1f:a9:73:
f2:53:47:e2:94:84:d7:c1:11:39:f0:b1:bb:b2:af:
0f:25:15:6d:a2:1a:02:ee:3c:c4:17:9f:f3:1d:58:
c6:f7:72:e1:d3:5c:a2:bf:af:87:0c:41:3c:66:e1:
06:a2:b5:18:d2:8c:af:7e:cf:3a:5b:5d:5c:0a:d1:
94:45:88:85:fc:18:66:c5:34:18:5e:f3:0d:f5:a5:
21:22:d5:6a:bf:d0:dd:33:bb:14:59:f9:32:dd:cf:
ca:d3:1c:35:79:c7:b1:b5:4b:51:df:f4:59:49:0a:
92:4b:3c:9d:e9:6d:90:fb:55:fa:b6:3b:98:bc:2b:
90:4e:f2:c8:08:2b:a5:02:28:13:d0:6e:7d:ee:80:
b5:30:dd:cc:69:83:63:49:6d:4b:33:25:36:d3:a4:
21:eb:f9:97:fa:aa:57:4a:7b:74:6f:39:6a:e8:e0:
0f:39:3c:81:48:61:a6:a3:97:3f:f9:ba:8b:ec:6a:
fb:88:cf:d8:92:e1:c1:82:2f:12:84:4d:cc:54:93:
95:3d:65:39:30:69:4c:ca:27:cb:c7:0e:bd:fd:bb:
02:2f:89:bb:be:19:9b:94:c0:b9:71:b7:f6:da:59:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:93:DF:EC:C8:A7:50:CC:AD:25:C3:E2:F0:4A:60:20:D9:05:5E
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
195.22.154.0/23
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
4b:80:2b:80:5d:6c:91:94:5c:97:f5:6a:6a:4b:a7:72:82:d0:
52:73:d4:fc:33:95:77:1c:d2:6b:68:3b:8f:be:c5:79:fc:a9:
b1:0e:9c:72:37:30:ae:90:83:4a:3f:30:f3:9b:8b:dc:ec:3c:
af:31:c7:bf:03:a8:08:74:91:e2:08:17:c6:24:dd:26:80:99:
35:89:18:79:07:97:1c:ce:cc:55:84:61:9d:c4:ce:22:8b:47:
99:d0:ed:e4:d2:2e:f1:da:c8:16:da:cc:de:49:35:2d:6c:83:
7d:9d:5e:df:27:37:ad:b4:6d:cc:b7:d2:84:27:88:ed:a9:5d:
31:8c:47:d4:fc:7b:3e:39:5b:7b:c4:ea:4f:c9:14:27:99:c4:
79:f8:52:57:ae:56:22:c2:03:05:25:9d:24:b2:53:41:0b:c0:
66:f5:5a:74:51:8d:01:03:64:31:3e:80:8a:e0:57:37:61:17:
8d:b8:d0:14:6c:8b:6f:2a:07:ee:25:f8:b0:82:21:74:79:c7:
92:08:05:b1:de:9e:e3:9f:72:4f:70:63:73:f0:e7:77:0b:dc:
95:a3:8c:83:1e:1b:9a:71:07:5b:8d:e0:d7:78:a2:2a:31:dd:
f5:f9:80:32:a9:b6:6a:cd:f6:95:0f:a4:90:96:5c:a1:95:a3:
4e:26:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net