Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ToZLErsSkbpl7Gieu9f3LQF10SY.roa
File: ToZLErsSkbpl7Gieu9f3LQF10SY.roa (raw, json)
Hash identifier: dtkWxPvkQ7rwdets+Cyk4a3zGtoYQw0LGZRdf1yx45g=
Subject key identifier: 4E:86:4B:12:BB:12:91:BA:65:EC:68:9E:BB:D7:F7:2D:01:75:D1:26
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0194252171D2A8CD99829796C5FDBB6615A4
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ToZLErsSkbpl7Gieu9f3LQF10SY.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/23 maxlen: 23
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:71:d2:a8:cd:99:82:97:96:c5:fd:bb:66:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e864b12bb1291ba65ec689ebbd7f72d0175d126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:e8:56:39:14:13:e7:95:c7:31:72:6f:73:
5e:b7:98:9d:64:b1:ef:2d:0c:e2:3d:03:86:1e:f7:
82:60:be:75:3f:79:20:58:fc:d4:1d:57:ef:46:9a:
14:1b:65:e0:31:ca:f3:50:e2:51:76:97:f1:8b:d8:
e2:0b:c3:a1:4e:86:25:51:03:33:87:83:16:ff:aa:
87:0b:b7:70:0d:1d:c6:49:a0:d9:33:0e:dd:bd:5d:
c5:19:86:cb:dc:95:c0:12:73:79:ae:be:e5:93:48:
54:d9:eb:c1:5e:14:63:59:69:57:e1:f8:31:5a:41:
01:71:a4:e6:92:00:a7:82:11:44:d9:f9:2f:e6:94:
7f:a8:a2:6d:9c:79:f1:8c:b6:48:9c:4e:ba:0b:52:
16:68:35:f5:8a:36:9d:de:22:e8:83:8d:4a:41:f7:
5d:5f:b0:90:f8:96:1b:54:ae:d2:6b:41:51:f1:08:
f4:88:ff:4c:6c:13:c2:ad:e5:61:ae:ae:c9:b4:43:
d7:b6:86:a3:a8:bc:97:38:67:19:7b:ad:8c:9a:34:
a6:dd:00:9d:09:58:d0:ae:1f:e7:91:2f:d6:1a:10:
3c:9f:e2:af:d8:b1:3b:17:da:34:fe:4b:72:87:be:
be:89:d6:f7:33:32:b8:11:a2:36:f3:e1:0c:8e:c4:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:4B:12:BB:12:91:BA:65:EC:68:9E:BB:D7:F7:2D:01:75:D1:26
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ToZLErsSkbpl7Gieu9f3LQF10SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:7a:f2:64:f5:29:d9:5f:e1:bc:0d:d4:96:ee:b6:ca:84:0b:
4c:76:f6:8c:39:f8:f8:1b:7a:8c:41:9e:51:6b:94:95:77:b8:
0b:94:6b:de:92:40:78:e7:1c:9e:4c:98:30:59:47:1c:3c:51:
e9:4c:dc:66:bc:1e:f0:2c:a5:60:3f:0f:fd:57:a0:f6:71:85:
01:ce:b0:11:31:29:c9:4d:f9:6f:f4:ba:16:12:e7:f9:9a:36:
ac:94:bc:40:cf:be:4f:2f:79:33:37:68:00:db:1c:63:2e:71:
e0:3d:86:ae:01:a1:26:8f:0c:6f:b8:83:c4:7c:f3:50:58:74:
e3:d9:6d:83:57:71:ea:5e:e9:80:55:a5:80:4c:57:40:09:6b:
5c:f7:32:7e:eb:53:5f:2d:22:f0:e4:20:0d:2d:7a:36:d1:b8:
cc:61:23:b2:63:d4:95:75:7a:94:72:4b:98:de:e0:a3:61:d0:
04:fb:93:45:0b:56:de:94:f0:f4:a3:f2:9a:e7:96:01:80:5e:
b7:b5:ec:21:cf:26:1e:f7:10:46:52:52:8b:79:f0:70:6e:7f:
0b:fa:19:52:e0:2b:0e:3c:73:d8:83:d1:17:37:bd:ff:40:67:
ec:dd:53:cb:9d:f6:f8:75:77:06:c4:0e:b2:6a:a0:6b:14:46:
e5:8b:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net