Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/8eWD8Ql-1KtgIOkNC8YKuoueCck.roa
File: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (raw, json)
Hash identifier: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=
Subject key identifier: F1:E5:83:F1:09:7E:D4:AB:60:20:E9:0D:0B:C6:0A:BA:8B:9E:09:C9
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 0194D7D680E67131F1A2D62622FACD829D95
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/8eWD8Ql-1KtgIOkNC8YKuoueCck.roa
Signing time: Wed 05 Feb 2025 20:39:06 +0000
ROA not before: Wed 05 Feb 2025 20:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21430
IP address blocks: 31.7.240.0/21 maxlen: 21
77.78.64.0/22 maxlen: 22
77.78.68.0/23 maxlen: 23
77.78.74.0/23 maxlen: 23
77.78.80.0/21 maxlen: 21
77.78.88.0/23 maxlen: 23
77.78.91.0/24 maxlen: 24
77.78.92.0/23 maxlen: 24
77.78.122.0/24 maxlen: 24
80.250.0.0/19 maxlen: 19
81.0.196.0/23 maxlen: 23
81.0.198.0/24 maxlen: 24
81.0.200.0/22 maxlen: 22
81.0.204.0/23 maxlen: 23
81.0.210.0/23 maxlen: 23
81.0.215.0/24 maxlen: 24
81.0.216.0/24 maxlen: 24
81.0.222.0/23 maxlen: 23
81.0.224.0/24 maxlen: 24
81.0.227.0/24 maxlen: 24
81.0.229.0/24 maxlen: 24
81.0.244.0/23 maxlen: 23
81.0.251.0/24 maxlen: 24
81.0.252.0/23 maxlen: 23
82.208.0.0/22 maxlen: 22
82.208.13.0/24 maxlen: 24
82.208.15.0/24 maxlen: 24
82.208.19.0/24 maxlen: 24
82.208.24.0/23 maxlen: 23
82.208.30.0/23 maxlen: 24
82.208.36.0/23 maxlen: 23
82.208.38.0/24 maxlen: 24
82.208.42.0/23 maxlen: 23
82.208.45.0/24 maxlen: 24
82.208.51.0/24 maxlen: 24
82.208.52.0/22 maxlen: 22
82.208.57.0/24 maxlen: 24
82.208.59.0/24 maxlen: 24
83.136.200.0/21 maxlen: 21
85.239.224.0/23 maxlen: 23
85.239.226.0/24 maxlen: 24
85.239.228.0/23 maxlen: 23
85.239.251.0/24 maxlen: 24
85.239.254.0/23 maxlen: 23
109.123.200.0/23 maxlen: 23
109.123.201.0/24 maxlen: 24
109.123.204.0/24 maxlen: 24
109.123.212.0/23 maxlen: 23
109.123.226.0/24 maxlen: 24
185.33.136.0/22 maxlen: 22
185.161.240.0/22 maxlen: 22
217.11.226.0/24 maxlen: 24
217.11.231.0/24 maxlen: 24
217.11.234.0/24 maxlen: 24
217.11.237.0/24 maxlen: 24
217.11.238.0/23 maxlen: 23
217.11.240.0/23 maxlen: 23
217.11.244.0/24 maxlen: 24
217.11.250.0/24 maxlen: 24
217.11.252.0/23 maxlen: 23
217.11.255.0/24 maxlen: 24
2a01:6400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:d6:80:e6:71:31:f1:a2:d6:26:22:fa:cd:82:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Feb 5 20:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e583f1097ed4ab6020e90d0bc60aba8b9e09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:73:2f:9d:ca:13:1d:2b:f5:72:58:e7:ec:
8c:f3:78:45:b6:8b:08:0e:d7:21:b9:d6:5e:8d:9a:
b9:1f:d4:f5:34:f1:3a:1b:76:a3:a8:0d:c9:d3:f0:
f7:b3:db:8d:cf:c3:e1:73:ad:36:60:c6:01:5d:23:
7f:ed:17:c8:0f:4f:4b:34:77:b2:f4:4f:97:50:9d:
70:f9:bd:ce:76:c0:94:a7:5d:81:c3:93:0c:de:2a:
97:0a:ae:a6:42:8b:79:99:f3:d9:92:60:fe:05:96:
bd:0c:6b:8c:e0:ae:56:6a:bb:57:39:b9:2f:f5:cd:
bb:66:f2:84:93:d3:bc:1f:31:1a:c4:e1:fa:24:44:
a8:4a:5b:eb:cd:4a:9d:3b:2d:2e:7a:1a:3f:58:07:
1b:ec:46:37:74:44:7d:e4:c5:b5:ec:e7:8d:6f:a2:
f0:40:d0:59:00:a2:b6:00:12:c9:44:50:a6:ee:fb:
57:9b:c0:4d:dc:e5:1f:4d:cc:9b:08:50:cf:6f:6d:
44:d3:59:80:e7:0c:73:98:ef:63:52:08:9b:c1:53:
d1:9b:97:a5:c6:df:fa:5f:5f:b2:95:aa:c9:89:e4:
35:82:41:de:12:1e:e2:84:fd:48:a1:ae:d7:fe:43:
28:11:25:53:a3:df:db:60:0b:d1:38:cc:8d:ce:81:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:83:F1:09:7E:D4:AB:60:20:E9:0D:0B:C6:0A:BA:8B:9E:09:C9
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/8eWD8Ql-1KtgIOkNC8YKuoueCck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.240.0/21
77.78.64.0-77.78.69.255
77.78.74.0/23
77.78.80.0-77.78.89.255
77.78.91.0-77.78.93.255
77.78.122.0/24
80.250.0.0/19
81.0.196.0-81.0.198.255
81.0.200.0-81.0.205.255
81.0.210.0/23
81.0.215.0-81.0.216.255
81.0.222.0-81.0.224.255
81.0.227.0/24
81.0.229.0/24
81.0.244.0/23
81.0.251.0-81.0.253.255
82.208.0.0/22
82.208.13.0/24
82.208.15.0/24
82.208.19.0/24
82.208.24.0/23
82.208.30.0/23
82.208.36.0-82.208.38.255
82.208.42.0/23
82.208.45.0/24
82.208.51.0-82.208.55.255
82.208.57.0/24
82.208.59.0/24
83.136.200.0/21
85.239.224.0-85.239.226.255
85.239.228.0/23
85.239.251.0/24
85.239.254.0/23
109.123.200.0/23
109.123.204.0/24
109.123.212.0/23
109.123.226.0/24
185.33.136.0/22
185.161.240.0/22
217.11.226.0/24
217.11.231.0/24
217.11.234.0/24
217.11.237.0-217.11.241.255
217.11.244.0/24
217.11.250.0/24
217.11.252.0/23
217.11.255.0/24
IPv6:
2a01:6400::/32
Signature Algorithm: sha256WithRSAEncryption
40:ba:21:03:18:e6:98:37:a1:09:09:58:b1:94:3f:9f:f6:a8:
b4:b3:6b:17:ea:a2:fe:f1:2d:4e:1c:41:50:24:91:ad:49:79:
e5:9a:0b:8d:eb:10:ba:af:7a:4d:28:79:1a:a0:1b:18:ee:11:
f3:2a:ef:af:22:0c:48:18:47:29:1c:6c:bd:a8:27:19:b7:18:
c3:fc:1b:04:ac:ec:64:ab:61:27:9b:24:ab:02:14:42:c5:76:
ff:3a:53:a9:b0:bc:4f:86:7b:34:43:7c:a0:11:ea:be:be:06:
97:72:9e:45:14:65:b2:68:74:40:30:79:c0:50:db:bd:cf:dd:
a8:2a:ec:34:5a:bb:72:bb:7c:f1:e7:3a:8a:57:b4:5e:3e:64:
fa:43:e3:9b:ab:5b:d9:e7:91:a2:29:dd:74:61:e2:02:db:77:
84:52:4f:a5:bb:80:17:08:b8:5a:e2:e6:c8:0d:56:46:98:1b:
58:bf:b7:dd:ea:79:fd:ec:2a:4e:ae:32:78:9a:94:a9:80:cb:
2f:39:77:0d:75:ce:53:a4:fc:af:8a:a3:08:6c:1b:33:59:90:
b7:49:d9:10:2d:41:eb:68:0a:f1:df:e8:8a:75:77:b6:09:4f:
17:9c:c6:87:05:97:05:c0:a0:41:31:83:9e:a2:00:80:8e:f6:
1c:93:d9:20
-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgISAZTX1oDmcTHxotYmIvrNgp2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjUwMjA1MjAzOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU1ODNmMTA5N2VkNGFiNjAyMGU5MGQwYmM2MGFiYThiOWUwOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ZzL53KEx0r9XJY5+yM83hFtosI
DtchudZejZq5H9T1NPE6G3ajqA3J0/D3s9uNz8Phc602YMYBXSN/7RfID09LNHey
9E+XUJ1w+b3OdsCUp12Bw5MM3iqXCq6mQot5mfPZkmD+BZa9DGuM4K5WartXObkv
9c27ZvKEk9O8HzEaxOH6JESoSlvrzUqdOy0ueho/WAcb7EY3dER95MW17OeNb6Lw
QNBZAKK2ABLJRFCm7vtXm8BN3OUfTcybCFDPb21E01mA5wxzmO9jUgibwVPRm5el
xt/6X1+ylarJieQ1gkHeEh7ihP1Ioa7X/kMoESVTo9/bYAvROMyNzoHzTwIDAQAB
o4IDljCCA5IwHQYDVR0OBBYEFPHlg/EJftSrYCDpDQvGCrqLngnJMB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvOGVXRDhRbC0xS3RnSU9rTkM4WUt1b3VlQ2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqgYIKwYBBQUHAQcBAf8EggGZMIIBlTCCAYIEAgABMIIB
egMEAx8H8DAMAwQGTU5AAwQBTU5EAwQBTU5KMAwDBARNTlADBAFNTlgwDAMEAE1O
WwMEAU1OXAMEAE1OegMEBVD6ADAMAwQCUQDEAwQAUQDGMAwDBANRAMgDBAFRAMwD
BAFRANIwDAMEAFEA1wMEAFEA2DAMAwQBUQDeAwQAUQDgAwQAUQDjAwQAUQDlAwQB
UQD0MAwDBABRAPsDBAFRAPwDBAJS0AADBABS0A0DBABS0A8DBABS0BMDBAFS0BgD
BAFS0B4wDAMEAlLQJAMEAFLQJgMEAVLQKgMEAFLQLTAMAwQAUtAzAwQDUtAwAwQA
UtA5AwQAUtA7AwQDU4jIMAwDBAVV7+ADBABV7+IDBAFV7+QDBABV7/sDBAFV7/4D
BAFte8gDBABte8wDBAFte9QDBABte+IDBAK5IYgDBAK5ofADBADZC+IDBADZC+cD
BADZC+owDAMEANkL7QMEAdkL8AMEANkL9AMEANkL+gMEAdkL/AMEANkL/zANBAIA
AjAHAwUAKgFkADANBgkqhkiG9w0BAQsFAAOCAQEAQLohAxjmmDehCQlYsZQ/n/ao
tLNrF+qi/vEtThxBUCSRrUl55ZoLjesQuq96TSh5GqAbGO4R8yrvryIMSBhHKRxs
vagnGbcYw/wbBKzsZKthJ5skqwIUQsV2/zpTqbC8T4Z7NEN8oBHqvr4Gl3KeRRRl
smh0QDB5wFDbvc/dqCrsNFq7crt88ec6ile0Xj5k+kPjm6tb2eeRoinddGHiAtt3
hFJPpbuAFwi4WuLmyA1WRpgbWL+33ep5/ewqTq4yeJqUqYDLLzl3DXXOU6T8r4qj
CGwbM1mQt0nZEC1B62gK8d/oinV3tglPF5zGhwWXBcCgQTGDnqIAgI72HJPZIA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net