Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa
File: ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa (raw, json)
Hash identifier: l2FcCUkM86hTAWJrLWFUiZXNcITlcUDIimETJwhAOes=
Subject key identifier: 8A:F1:AC:1B:11:08:69:08:37:79:35:96:E5:84:11:20:FB:48:B8:36
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0195B3BFDA5026DB066BB0AB1079AD515A8F
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa
Signing time: Thu 20 Mar 2025 13:30:49 +0000
ROA not before: Thu 20 Mar 2025 13:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.0.0/16 maxlen: 16
161.30.5.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.8.0/24 maxlen: 24
161.30.9.0/24 maxlen: 24
161.30.10.0/24 maxlen: 24
161.30.12.0/22 maxlen: 22
161.30.16.0/22 maxlen: 22
161.30.20.0/24 maxlen: 24
161.30.22.0/23 maxlen: 23
161.30.28.0/24 maxlen: 24
161.30.29.0/24 maxlen: 24
161.30.33.0/24 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.42.0/23 maxlen: 24
161.30.44.0/23 maxlen: 24
161.30.112.0/23 maxlen: 23
161.30.114.0/23 maxlen: 23
161.30.115.0/24 maxlen: 24
161.30.116.0/23 maxlen: 23
161.30.118.0/24 maxlen: 24
161.30.119.0/24 maxlen: 24
161.30.120.0/24 maxlen: 24
161.30.121.0/24 maxlen: 24
161.30.124.0/23 maxlen: 23
161.30.126.0/23 maxlen: 23
161.30.128.0/23 maxlen: 23
161.30.129.0/24 maxlen: 24
161.30.130.0/24 maxlen: 24
161.30.155.0/24 maxlen: 24
161.30.163.0/24 maxlen: 24
161.30.164.0/24 maxlen: 24
161.30.165.0/24 maxlen: 24
161.30.166.0/24 maxlen: 24
161.30.169.0/24 maxlen: 24
161.30.171.0/24 maxlen: 24
161.30.176.0/20 maxlen: 20
161.30.193.0/24 maxlen: 24
161.30.194.0/23 maxlen: 23
161.30.201.0/24 maxlen: 24
161.30.202.0/24 maxlen: 24
161.30.203.0/24 maxlen: 24
161.30.220.0/24 maxlen: 24
161.30.221.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
161.30.236.0/24 maxlen: 24
161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.239.0/24 maxlen: 24
161.30.240.0/24 maxlen: 24
161.30.246.0/24 maxlen: 24
161.30.250.0/24 maxlen: 24
161.30.251.0/24 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:bf:da:50:26:db:06:6b:b0:ab:10:79:ad:51:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Mar 20 13:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8af1ac1b1108690837793596e5841120fb48b836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:d7:0f:71:e8:57:fe:09:75:93:90:b1:2c:
76:b4:17:78:04:c5:57:b4:e7:20:80:a6:fd:7e:13:
66:54:0b:bb:05:92:71:c4:40:43:5a:79:db:1f:94:
09:55:bd:b2:44:3e:78:52:44:bf:19:f8:cf:49:6e:
e7:76:a1:da:b8:69:b4:58:98:61:87:13:ef:4d:4d:
ba:db:4f:78:72:29:d3:bc:bd:91:be:77:b1:8f:a9:
ff:84:ef:a6:80:e1:0d:9a:74:51:74:f2:df:b2:36:
e8:8d:b2:f6:1f:4e:b1:f3:4d:dc:8f:f5:82:6c:44:
11:a7:0a:47:4f:c1:72:83:70:67:05:1e:fd:34:f4:
b1:57:d6:29:50:df:74:48:7d:04:2d:88:fd:aa:9a:
7d:db:96:3b:ef:6a:ab:c0:88:01:dc:d0:21:5d:e0:
ce:3a:a1:df:43:e5:a9:c1:57:ba:e5:29:32:ba:4a:
ac:3b:3e:57:e0:ab:96:e2:1e:fd:28:21:3e:4e:5d:
9b:c3:27:d2:06:28:3a:e8:72:e6:8c:6c:17:02:35:
c5:a6:9b:08:a4:85:6a:8c:5c:af:70:85:58:9b:a3:
8e:49:c9:e4:3f:20:1a:0e:0a:2c:bd:73:93:09:d3:
9c:1e:6b:1a:e9:3e:13:d2:d8:77:ba:23:4c:1b:f0:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F1:AC:1B:11:08:69:08:37:79:35:96:E5:84:11:20:FB:48:B8:36
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.0.0/16
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
01:a5:2f:2d:c6:7c:e0:72:47:11:0e:c0:fd:af:1c:de:73:41:
cb:89:31:35:c0:51:67:13:1b:34:db:14:f7:cb:b9:0e:34:f3:
90:92:2a:c7:7c:49:70:12:b9:b3:8c:88:30:7f:c9:d8:81:ce:
2a:bf:1a:08:58:de:50:28:1a:ff:41:cb:03:33:b6:cf:a4:48:
e6:b3:86:5a:48:03:bd:75:a2:f9:02:70:1d:cc:aa:ee:10:ac:
20:16:a6:ae:79:8b:e8:db:39:57:90:ae:8d:57:a3:9b:83:13:
e2:49:2a:44:27:6a:11:6e:61:74:92:dd:8f:e7:bc:42:f3:2a:
b1:76:1f:2b:16:09:0f:a1:5e:ae:2f:70:6b:7e:03:66:f8:81:
12:ed:72:a1:17:c7:02:50:17:1c:88:3c:a2:31:d4:55:8d:a3:
52:84:9c:29:fc:c4:ea:f1:10:97:ce:68:35:d8:31:b2:f2:ef:
61:23:d3:cd:ad:47:12:18:22:c3:7b:86:e2:63:cc:51:44:ec:
57:65:43:e3:12:f7:0c:be:4c:f4:46:fd:5a:a8:b5:0a:24:67:
67:55:ad:3e:f3:79:a4:ee:f2:76:c3:f3:df:65:15:58:2f:21:
4e:c1:22:54:15:4e:66:00:02:c2:c5:c9:38:20:84:b6:bd:f3:
a5:8a:79:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net