Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa
File: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (raw, json)
Hash identifier: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=
Subject key identifier: B6:7E:D9:75:6A:3D:59:08:18:94:1D:19:EA:C3:8A:D8:87:FB:3C:A4
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019421445125A518A4793763A925FA5E2237
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41704
IP address blocks: 46.191.184.0/21 maxlen: 21
46.191.184.0/23 maxlen: 23
46.191.184.0/24 maxlen: 24
46.191.185.0/24 maxlen: 24
46.191.186.0/23 maxlen: 23
46.191.186.0/24 maxlen: 24
46.191.187.0/24 maxlen: 24
46.191.188.0/23 maxlen: 23
46.191.188.0/24 maxlen: 24
46.191.189.0/24 maxlen: 24
46.191.190.0/23 maxlen: 23
46.191.190.0/24 maxlen: 24
46.191.191.0/24 maxlen: 24
46.191.240.0/20 maxlen: 20
46.191.240.0/22 maxlen: 22
46.191.244.0/22 maxlen: 22
46.191.248.0/22 maxlen: 22
46.191.248.0/24 maxlen: 24
46.191.249.0/24 maxlen: 24
46.191.250.0/24 maxlen: 24
46.191.251.0/24 maxlen: 24
46.191.252.0/22 maxlen: 22
79.140.16.0/20 maxlen: 20
79.140.16.0/22 maxlen: 22
79.140.16.0/24 maxlen: 24
79.140.17.0/24 maxlen: 24
79.140.18.0/24 maxlen: 24
79.140.19.0/24 maxlen: 24
79.140.20.0/22 maxlen: 22
79.140.20.0/23 maxlen: 23
79.140.20.0/24 maxlen: 24
79.140.21.0/24 maxlen: 24
79.140.22.0/24 maxlen: 24
79.140.23.0/24 maxlen: 24
79.140.24.0/22 maxlen: 22
79.140.24.0/24 maxlen: 24
79.140.25.0/24 maxlen: 24
79.140.26.0/24 maxlen: 24
79.140.27.0/24 maxlen: 24
79.140.28.0/22 maxlen: 22
79.140.28.0/24 maxlen: 24
79.140.29.0/24 maxlen: 24
79.140.30.0/24 maxlen: 24
79.140.31.0/24 maxlen: 24
84.39.248.0/22 maxlen: 22
84.39.248.0/24 maxlen: 24
84.39.249.0/24 maxlen: 24
84.39.250.0/24 maxlen: 24
84.39.251.0/24 maxlen: 24
84.39.252.0/22 maxlen: 22
84.39.252.0/24 maxlen: 24
84.39.253.0/24 maxlen: 24
84.39.254.0/24 maxlen: 24
84.39.255.0/24 maxlen: 24
94.41.128.0/20 maxlen: 20
94.41.128.0/22 maxlen: 22
94.41.128.0/24 maxlen: 24
94.41.132.0/22 maxlen: 22
94.41.136.0/22 maxlen: 22
94.41.140.0/22 maxlen: 22
94.41.140.0/24 maxlen: 24
94.41.141.0/24 maxlen: 24
94.41.160.0/19 maxlen: 19
94.41.160.0/21 maxlen: 21
94.41.160.0/22 maxlen: 22
94.41.164.0/22 maxlen: 22
94.41.168.0/22 maxlen: 22
94.41.172.0/22 maxlen: 22
94.41.176.0/22 maxlen: 22
94.41.180.0/22 maxlen: 22
94.41.184.0/22 maxlen: 22
94.41.188.0/22 maxlen: 22
95.105.96.0/19 maxlen: 19
95.105.96.0/22 maxlen: 22
95.105.100.0/22 maxlen: 22
95.105.100.0/23 maxlen: 23
95.105.102.0/23 maxlen: 23
95.105.104.0/22 maxlen: 22
95.105.104.0/24 maxlen: 24
95.105.105.0/24 maxlen: 24
95.105.106.0/23 maxlen: 23
95.105.108.0/22 maxlen: 22
95.105.112.0/22 maxlen: 22
95.105.112.0/24 maxlen: 24
95.105.113.0/24 maxlen: 24
95.105.114.0/24 maxlen: 24
95.105.115.0/24 maxlen: 24
95.105.116.0/22 maxlen: 22
95.105.116.0/24 maxlen: 24
95.105.117.0/24 maxlen: 24
95.105.118.0/24 maxlen: 24
95.105.119.0/24 maxlen: 24
95.105.120.0/22 maxlen: 22
95.105.124.0/22 maxlen: 22
95.105.124.0/24 maxlen: 24
95.105.125.0/24 maxlen: 24
95.105.126.0/24 maxlen: 24
95.105.127.0/24 maxlen: 24
136.169.240.0/20 maxlen: 20
136.169.240.0/22 maxlen: 22
136.169.241.0/24 maxlen: 24
136.169.243.0/24 maxlen: 24
136.169.244.0/22 maxlen: 22
136.169.248.0/22 maxlen: 22
136.169.252.0/22 maxlen: 22
136.169.252.0/24 maxlen: 24
136.169.253.0/24 maxlen: 24
136.169.254.0/24 maxlen: 24
136.169.255.0/24 maxlen: 24
145.255.16.0/21 maxlen: 21
145.255.16.0/22 maxlen: 22
145.255.18.0/24 maxlen: 24
145.255.19.0/24 maxlen: 24
145.255.20.0/22 maxlen: 22
145.255.20.0/24 maxlen: 24
145.255.21.0/24 maxlen: 24
145.255.22.0/24 maxlen: 24
145.255.23.0/24 maxlen: 24
2a02:1c8:7::/48 maxlen: 48
2a02:1c8:700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:51:25:a5:18:a4:79:37:63:a9:25:fa:5e:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b67ed9756a3d590818941d19eac38ad887fb3ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:8a:7e:f7:97:68:44:fc:d9:84:3b:f4:a5:
79:2c:5c:e8:ca:85:a7:c3:bc:0c:aa:ab:1c:d8:75:
2f:10:9e:4c:7c:f1:bb:ca:9c:2f:8b:1c:d9:8b:64:
5a:68:32:31:43:3a:d2:cc:89:2e:11:f5:d9:9f:6e:
a1:b2:93:db:51:11:35:ce:55:4c:c2:7e:9d:44:5e:
13:cd:58:2b:49:fc:cf:93:b5:c2:45:72:55:fb:69:
9d:b6:88:27:51:d2:b5:90:cd:cd:b4:fe:43:cd:c7:
64:52:cf:c1:89:47:a1:02:5f:7b:c7:66:f3:b0:cf:
ec:7a:f7:ac:c1:f9:07:6b:69:2b:75:fd:2f:08:e7:
86:e2:ab:ad:a6:5d:d0:ef:63:7d:06:ac:26:bd:3f:
2a:fe:22:9f:b2:f1:f7:ad:58:a4:b2:07:6a:94:87:
34:c8:98:bd:73:fb:4a:a6:83:fd:6c:51:e3:95:8e:
3b:b2:31:4e:be:f9:d0:85:84:ba:bb:9f:9a:79:e5:
45:a4:e3:7b:27:25:0e:f1:2f:f7:3e:d4:80:38:2a:
f4:19:0f:60:69:10:68:8b:94:0e:f0:d3:45:a7:f5:
ef:a2:f3:01:66:cc:46:58:14:54:1a:5d:f5:9c:f4:
9c:70:c3:10:e5:71:33:72:7b:a6:3a:53:9b:b9:09:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:D9:75:6A:3D:59:08:18:94:1D:19:EA:C3:8A:D8:87:FB:3C:A4
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
46.191.240.0/20
79.140.16.0/20
84.39.248.0/21
94.41.128.0/20
94.41.160.0/19
95.105.96.0/19
136.169.240.0/20
145.255.16.0/21
IPv6:
2a02:1c8:7::/48
2a02:1c8:700::/40
Signature Algorithm: sha256WithRSAEncryption
32:e2:42:2c:78:b6:6b:93:f1:67:ce:9d:f2:61:bd:cf:95:d7:
1a:17:23:c1:34:a2:e0:00:90:4d:7d:99:50:e7:5d:e5:28:46:
7a:d5:d8:c6:e2:d6:88:7a:5d:df:dd:4a:05:8e:fd:47:23:1e:
42:39:ae:45:38:8f:ea:1e:d7:73:81:7e:d4:f0:85:76:ff:93:
c2:91:6f:9b:95:d1:7d:48:f2:a6:34:e5:cd:de:e2:a9:66:db:
69:86:01:7b:48:c3:2b:c6:9f:42:9d:a0:1b:7f:7b:df:11:ac:
3f:6f:ee:3a:d7:aa:60:a5:e8:51:18:b2:14:a9:4d:b7:27:0b:
ab:1d:0d:22:a6:cc:04:af:65:47:b1:35:96:42:d0:cc:7d:d3:
8f:8f:b7:21:07:e3:8f:5f:01:2c:ea:94:25:56:76:6a:a3:aa:
67:f9:ae:94:41:54:f7:d4:ce:08:0a:9d:8b:6b:00:58:85:6a:
22:c6:13:85:db:0c:c4:de:43:7a:ad:1a:f8:ed:f2:d0:ef:5f:
2a:c5:11:5a:09:29:60:5f:f3:ef:b1:2e:fa:3c:c6:9a:53:12:
29:61:4c:a9:34:4f:b9:5a:d5:cd:28:f8:e7:c2:b5:1c:8e:74:
4d:36:e8:58:2d:10:10:86:bf:6e:c1:da:27:c3:44:d7:b4:49:
b5:9f:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net