Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa
File: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (raw, json)
Hash identifier: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=
Subject key identifier: 3E:BE:D8:18:62:CF:7B:CB:3F:4B:82:D1:CF:DC:E2:BF:9B:9C:6C:0C
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01941F8C9D912F5EE1779CCA960D9B7750FC
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35567
IP address blocks: 87.250.96.0/19 maxlen: 24
87.250.96.0/24 maxlen: 24
87.250.97.0/24 maxlen: 24
87.250.98.0/24 maxlen: 24
87.250.99.0/24 maxlen: 24
87.250.101.0/24 maxlen: 24
87.250.102.0/24 maxlen: 24
87.250.103.0/24 maxlen: 24
87.250.104.0/24 maxlen: 24
87.250.105.0/24 maxlen: 24
87.250.106.0/24 maxlen: 24
87.250.107.0/24 maxlen: 24
87.250.108.0/24 maxlen: 24
87.250.109.0/24 maxlen: 24
87.250.112.0/24 maxlen: 24
87.250.113.0/24 maxlen: 24
87.250.114.0/24 maxlen: 24
87.250.115.0/24 maxlen: 24
87.250.117.0/24 maxlen: 24
87.250.118.0/24 maxlen: 24
87.250.119.0/24 maxlen: 24
87.250.120.0/24 maxlen: 24
87.250.121.0/24 maxlen: 24
87.250.122.0/24 maxlen: 24
87.250.123.0/24 maxlen: 24
87.250.124.0/24 maxlen: 24
87.250.125.0/24 maxlen: 24
87.250.127.0/24 maxlen: 24
91.191.0.0/24 maxlen: 24
91.191.1.0/24 maxlen: 24
91.191.2.0/24 maxlen: 24
91.191.3.0/24 maxlen: 24
91.191.4.0/24 maxlen: 24
91.191.5.0/24 maxlen: 24
91.191.6.0/24 maxlen: 24
91.191.7.0/24 maxlen: 24
91.191.8.0/24 maxlen: 24
91.191.9.0/24 maxlen: 24
91.191.10.0/24 maxlen: 24
91.191.11.0/24 maxlen: 24
91.191.12.0/24 maxlen: 24
91.191.13.0/24 maxlen: 24
91.191.14.0/24 maxlen: 24
91.191.15.0/24 maxlen: 24
91.191.16.0/24 maxlen: 24
91.191.17.0/24 maxlen: 24
91.191.18.0/24 maxlen: 24
91.191.19.0/24 maxlen: 24
91.191.20.0/24 maxlen: 24
91.191.21.0/24 maxlen: 24
91.191.22.0/24 maxlen: 24
91.191.23.0/24 maxlen: 24
91.191.24.0/21 maxlen: 24
91.191.24.0/24 maxlen: 24
91.191.26.0/24 maxlen: 24
91.191.27.0/24 maxlen: 24
91.191.29.0/24 maxlen: 24
91.191.30.0/24 maxlen: 24
91.191.31.0/24 maxlen: 24
91.191.32.0/24 maxlen: 24
91.191.33.0/24 maxlen: 24
91.191.34.0/24 maxlen: 24
91.191.35.0/24 maxlen: 24
91.191.36.0/24 maxlen: 24
91.191.37.0/24 maxlen: 24
91.191.38.0/24 maxlen: 24
91.191.39.0/24 maxlen: 24
91.191.40.0/24 maxlen: 24
91.191.41.0/24 maxlen: 24
91.191.42.0/24 maxlen: 24
91.191.43.0/24 maxlen: 24
91.191.44.0/24 maxlen: 24
91.191.45.0/24 maxlen: 24
91.191.46.0/24 maxlen: 24
91.191.47.0/24 maxlen: 24
91.191.48.0/24 maxlen: 24
91.191.49.0/24 maxlen: 24
91.191.50.0/24 maxlen: 24
91.191.51.0/24 maxlen: 24
91.191.52.0/24 maxlen: 24
91.191.53.0/24 maxlen: 24
91.191.54.0/24 maxlen: 24
91.191.55.0/24 maxlen: 24
91.191.56.0/24 maxlen: 24
91.191.57.0/24 maxlen: 24
91.191.58.0/24 maxlen: 24
91.191.59.0/24 maxlen: 24
91.191.60.0/24 maxlen: 24
91.191.61.0/24 maxlen: 24
91.191.62.0/24 maxlen: 24
91.191.63.0/24 maxlen: 24
185.16.12.0/22 maxlen: 24
185.16.14.0/24 maxlen: 24
213.196.112.0/24 maxlen: 24
213.196.113.0/24 maxlen: 24
213.196.114.0/23 maxlen: 23
213.196.114.0/24 maxlen: 24
213.196.115.0/24 maxlen: 24
213.196.116.0/24 maxlen: 24
213.196.117.0/24 maxlen: 24
213.196.118.0/24 maxlen: 24
213.196.119.0/24 maxlen: 24
213.196.120.0/24 maxlen: 24
213.196.121.0/24 maxlen: 24
213.196.122.0/24 maxlen: 24
213.196.123.0/24 maxlen: 24
213.196.124.0/24 maxlen: 24
213.196.125.0/24 maxlen: 24
213.196.126.0/24 maxlen: 24
213.196.127.0/24 maxlen: 24
2a02:17a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:91:2f:5e:e1:77:9c:ca:96:0d:9b:77:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ebed81862cf7bcb3f4b82d1cfdce2bf9b9c6c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:7c:6b:28:4a:52:69:c5:cb:2e:ec:9b:c6:
f7:33:75:88:80:a2:60:f8:aa:0a:23:3e:16:4f:8c:
57:80:57:26:3f:0e:e9:98:2f:24:4b:93:7f:68:5b:
4a:8c:a7:8d:a5:e3:e6:57:a7:78:fd:5b:7d:64:63:
14:d2:4a:e7:b0:02:fe:6d:2f:ee:db:ff:7c:27:20:
41:c3:18:f9:80:23:79:5d:ee:18:95:a7:c6:d4:29:
d8:b8:0a:18:1a:33:c6:e4:19:3b:b1:53:a3:03:ea:
c2:88:63:45:38:f3:85:c8:dd:15:3e:2e:cc:23:23:
63:95:a6:35:ca:83:09:64:2c:ee:cc:9a:7c:5c:a5:
d4:d3:c9:78:d6:19:75:66:9f:19:f9:c7:6d:65:dc:
50:ce:ad:c5:60:f8:09:24:73:dc:56:44:09:cd:21:
33:ef:6c:cb:a0:e1:62:9b:5f:df:59:08:67:37:0c:
66:70:1c:06:85:27:c3:4a:3e:a9:36:eb:20:2e:25:
57:97:17:19:05:22:98:1c:5e:c5:96:8f:83:6e:c1:
68:39:cc:52:e8:56:ca:4a:cb:ff:9f:f5:40:a4:76:
f7:f3:c7:13:25:24:78:7b:c7:b3:7a:af:7d:d6:98:
b7:82:8d:8a:eb:c3:d8:4a:59:d2:84:f1:30:22:58:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:D8:18:62:CF:7B:CB:3F:4B:82:D1:CF:DC:E2:BF:9B:9C:6C:0C
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.96.0/19
91.191.0.0/18
185.16.12.0/22
213.196.112.0/20
IPv6:
2a02:17a8::/32
Signature Algorithm: sha256WithRSAEncryption
55:e2:2d:3e:78:ed:de:13:fe:85:5f:80:a6:02:48:12:1d:fe:
1a:f7:ba:15:21:4a:9d:76:6b:56:7e:e4:b9:31:2c:ba:99:d9:
e6:72:d5:e4:fc:0e:fb:76:86:4a:c0:5b:1e:f7:ff:bd:85:e4:
36:67:cf:7e:f2:79:dd:d3:34:86:ef:ac:c9:b0:44:2c:77:48:
7d:48:0d:8f:ee:09:14:7b:34:b5:14:89:75:e5:a0:75:ef:12:
74:5f:f8:25:54:f5:02:87:a2:58:44:be:df:fc:de:78:1b:76:
de:eb:02:cb:aa:5f:e0:16:19:58:5a:43:ab:2a:36:2f:3e:71:
63:04:73:48:c4:5c:0d:15:ff:fc:39:64:db:d9:88:fe:34:36:
ba:73:78:f7:1d:11:2f:d8:e1:43:dd:8a:ca:c9:44:f0:7f:8c:
29:10:3f:be:15:57:5b:8b:02:6a:91:de:89:bc:dc:6e:11:06:
9d:df:01:dd:aa:4d:6a:f2:73:89:84:a1:26:e0:e9:7c:80:0a:
03:58:5c:e6:01:ed:22:e8:ae:91:14:ff:db:73:c5:ad:ac:d1:
44:f6:3e:8e:35:55:fd:9b:a6:32:3e:7e:61:97:53:fd:72:ff:
7c:05:44:5c:46:4d:cc:2d:87:3f:37:37:ca:69:58:2e:59:56:
5b:7e:f4:d2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQfjJ2RL17hd5zKlg2bd1D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWNlM2NhZmI5ZTI2YzFhNjA1NjRmNzBkMmFjZWI0NTdi
ZjUwMDkwHhcNMjUwMTAxMDE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJlZDgxODYyY2Y3YmNiM2Y0YjgyZDFjZmRjZTJiZjliOWM2YzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxh8ayhKUmnFyy7sm8b3M3WIgKJg
+KoKIz4WT4xXgFcmPw7pmC8kS5N/aFtKjKeNpePmV6d4/Vt9ZGMU0krnsAL+bS/u
2/98JyBBwxj5gCN5Xe4YlafG1CnYuAoYGjPG5Bk7sVOjA+rCiGNFOPOFyN0VPi7M
IyNjlaY1yoMJZCzuzJp8XKXU08l41hl1Zp8Z+cdtZdxQzq3FYPgJJHPcVkQJzSEz
72zLoOFim1/fWQhnNwxmcBwGhSfDSj6pNusgLiVXlxcZBSKYHF7Flo+DbsFoOcxS
6FbKSsv/n/VApHb388cTJSR4e8ezeq991pi3go2K68PYSlnShPEwIlj1mQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFD6+2Bhiz3vLP0uC0c/c4r+bnGwMMB8GA1UdIwQY
MBaAFPOs48r7nibBpgVk9w0qzrRXv1AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMt
MzYzZTJkNjY0M2YyLzEvUHI3WUdHTFBlOHNfUzRMUno5eml2NXVjYkF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMtMzYzZTJkNjY0M2Yy
LzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFV/pgAwQG
W78AAwQCuRAMAwQE1cRwMA0EAgACMAcDBQAqAheoMA0GCSqGSIb3DQEBCwUAA4IB
AQBV4i0+eO3eE/6FX4CmAkgSHf4a97oVIUqddmtWfuS5MSy6mdnmctXk/A77doZK
wFse9/+9heQ2Z89+8nnd0zSG76zJsEQsd0h9SA2P7gkUezS1FIl15aB17xJ0X/gl
VPUCh6JYRL7f/N54G3be6wLLql/gFhlYWkOrKjYvPnFjBHNIxFwNFf/8OWTb2Yj+
NDa6c3j3HREv2OFD3YrKyUTwf4wpED++FVdbiwJqkd6JvNxuEQad3wHdqk1q8nOJ
hKEm4Ol8gAoDWFzmAe0i6K6RFP/bc8WtrNFE9j6ONVX9m6YyPn5hl1P9cv98BURc
Rk3MLYc/NzfKaVguWVZbfvTS
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net