Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Ja8jEoAFdKAq9jPVrV5r_aM_sDE.roa
File: Ja8jEoAFdKAq9jPVrV5r_aM_sDE.roa (raw, json)
Hash identifier: aPkpHINCNIPcNaF1YN3J73MWU0LUO30n5otRk9vcQU8=
Subject key identifier: 25:AF:23:12:80:05:74:A0:2A:F6:33:D5:AD:5E:6B:FD:A3:3F:B0:31
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01960029EEB386A92A9E422502F88AE03412
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Ja8jEoAFdKAq9jPVrV5r_aM_sDE.roa
Signing time: Fri 04 Apr 2025 09:37:50 +0000
ROA not before: Fri 04 Apr 2025 09:37:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:29:ee:b3:86:a9:2a:9e:42:25:02:f8:8a:e0:34:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 4 09:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25af2312800574a02af633d5ad5e6bfda33fb031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:e2:bd:af:59:c3:5c:4f:29:4d:4e:2e:4f:
3b:da:e2:5f:b4:c2:8d:4b:de:f9:fb:91:68:fd:24:
9f:f4:2d:f7:f3:87:8b:28:e5:70:14:72:da:03:53:
1c:ef:7f:c3:16:d6:54:e2:14:18:7f:f8:39:36:50:
00:5b:ad:94:4b:e9:e3:9c:48:d0:00:6c:3b:2c:21:
54:b3:3c:65:52:a6:17:d6:cd:ac:62:4e:a1:70:65:
54:85:79:cf:34:b1:e2:ca:5d:05:b9:e4:d8:96:b0:
cf:d7:09:98:3b:ae:8c:6d:f9:85:92:de:e1:19:a5:
8c:e0:f5:37:2f:b5:c6:13:0a:14:58:af:91:48:2d:
59:d9:02:4d:14:44:37:44:0c:5d:7b:98:9f:92:31:
a7:ab:d5:58:94:94:ee:70:c9:68:ff:7b:87:c1:6e:
ff:64:a0:ba:ce:4f:21:4e:f8:39:8e:79:ca:fe:3c:
10:17:25:8a:fa:c9:e6:81:c1:02:02:cd:5e:73:f6:
d1:e9:ae:04:a1:02:72:4d:fd:a4:df:51:dd:c5:07:
47:7a:ae:96:5e:85:ac:a5:e8:c5:f1:4d:02:3c:23:
d0:20:0f:ec:2f:84:d4:23:18:cd:58:36:d7:f9:92:
f2:c7:39:15:02:3b:de:ca:4b:54:30:8c:7d:f2:0b:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:23:12:80:05:74:A0:2A:F6:33:D5:AD:5E:6B:FD:A3:3F:B0:31
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Ja8jEoAFdKAq9jPVrV5r_aM_sDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.216.255
93.152.218.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a5:44:a9:5b:22:61:8c:9e:69:ac:17:b7:af:66:f9:12:f9:
5f:54:78:bf:33:69:20:0b:63:0f:98:05:91:e2:7d:df:e0:80:
46:2e:4e:ce:9c:df:e3:66:db:ac:69:f9:b6:27:0c:9e:1f:a4:
05:f9:00:f8:66:08:73:f5:5b:7b:94:f2:c7:8a:51:35:0c:59:
6f:b9:89:92:cc:df:3b:c5:91:b5:b7:6f:b6:2b:86:a0:31:e4:
6c:38:ef:91:3d:1e:bc:56:71:32:86:6e:55:77:26:63:d2:26:
36:37:bd:a2:73:b4:56:b7:eb:1f:5a:8c:13:62:fc:e5:b6:a7:
02:47:70:92:fd:7d:64:a4:e9:30:64:2e:46:16:9b:6b:85:58:
04:1c:90:0f:30:37:83:7a:dc:d1:df:56:6c:bd:46:b9:b8:bd:
f7:11:a7:9b:1a:3f:8d:da:fc:e6:53:fc:92:13:07:d0:19:6a:
66:fa:6e:7b:ef:78:fa:cc:68:a7:2f:d2:0e:10:f0:7d:36:84:
1a:8b:86:fc:46:3c:e3:21:a7:03:92:4d:53:75:0e:dd:5e:29:
b5:51:69:fd:36:84:34:8b:7b:bc:da:9b:f2:3a:c0:87:91:db:
b1:c2:dc:09:1c:fe:d5:94:38:5f:bf:82:c7:e0:dc:a6:06:77:
23:97:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net