Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6o4qx9pVZEI5mlA0NOenp9x_4WM.roa
File: 6o4qx9pVZEI5mlA0NOenp9x_4WM.roa (raw, json)
Hash identifier: laQP61IPE3ACLAXCd2ITEqD1UcCUEXJpd9GZuWQOF94=
Subject key identifier: EA:8E:2A:C7:DA:55:64:42:39:9A:50:34:34:E7:A7:A7:DC:7F:E1:63
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0195CD424F75EF1B7D829BD9AAAE00E1E7B9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6o4qx9pVZEI5mlA0NOenp9x_4WM.roa
Signing time: Tue 25 Mar 2025 12:23:49 +0000
ROA not before: Tue 25 Mar 2025 12:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.193.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/23 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:42:4f:75:ef:1b:7d:82:9b:d9:aa:ae:00:e1:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 25 12:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea8e2ac7da556442399a503434e7a7a7dc7fe163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:01:48:78:b9:d2:3c:a5:3e:5d:05:2e:22:
6a:78:45:b3:96:4c:3f:95:b7:bc:a9:ef:5c:b6:ba:
ff:a5:53:6e:e2:01:43:70:1a:55:c3:7b:73:24:7a:
41:33:21:8d:9e:8a:2b:6c:47:d8:5d:ac:5e:84:e0:
de:a5:b6:30:29:14:d2:a0:f8:a6:7d:69:ea:a0:cf:
55:c0:2e:c0:20:62:13:ae:49:04:77:52:cb:c0:70:
ba:ec:8a:22:9c:fa:80:9c:5f:d8:d6:71:2d:f4:00:
a0:7d:5f:e9:34:f7:bc:e2:14:48:5d:41:8b:b7:58:
f9:7c:30:26:1e:a0:55:30:85:e3:53:76:0e:44:59:
1e:33:ef:e6:73:c3:df:e0:a0:34:f2:b8:82:64:bf:
bd:37:32:46:10:c8:7f:2b:8e:db:c6:c8:58:4c:80:
bc:36:80:75:b1:4f:80:af:48:b1:06:d0:fe:ac:09:
0e:89:b2:fb:13:10:5e:03:39:c8:b8:c6:46:35:40:
4d:ef:a6:65:92:92:0e:a6:f8:7a:09:6a:39:6f:d6:
6d:47:d9:7e:36:a3:79:90:25:62:29:43:16:44:7d:
86:ee:2c:17:6b:ce:f8:c7:0a:b6:01:53:c2:69:ec:
72:2f:38:3c:6f:58:f6:f0:32:28:03:ca:72:ff:38:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:2A:C7:DA:55:64:42:39:9A:50:34:34:E7:A7:A7:DC:7F:E1:63
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6o4qx9pVZEI5mlA0NOenp9x_4WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.193.255
85.133.208.0-85.133.214.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.232.255
85.133.234.0/23
85.133.239.0/24
85.133.244.0-85.133.249.255
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:57:35:5f:d0:0a:bb:36:c2:47:39:9b:c2:35:95:cc:3f:18:
c3:d2:2e:78:9f:84:8a:5e:47:e3:7b:70:c8:48:60:94:5a:49:
c2:4e:8a:06:55:4b:84:49:c4:d9:9e:0b:bf:6c:06:ca:b4:c5:
22:4c:99:f4:da:86:ca:a2:96:30:1c:41:6d:d2:80:23:45:22:
e5:7c:8f:02:83:f6:d7:06:44:3d:c0:5e:fc:18:f2:6f:fa:7b:
77:8c:ff:ad:a8:23:f1:ae:9d:08:46:28:e4:55:a9:81:cf:cc:
83:25:70:83:38:fa:c8:7a:b7:43:f0:de:f8:21:9b:cc:3c:5d:
89:d3:f7:dd:5b:07:ab:06:a6:84:19:ee:dd:0f:7d:d9:05:4c:
02:49:6e:4a:29:8a:bf:11:ac:0e:2b:5f:d3:b3:2d:ee:84:76:
5d:93:55:ce:7e:86:ac:43:42:8d:5b:f0:14:b7:13:ec:41:6b:
8f:3c:22:25:ac:a2:08:89:b0:dd:c2:e6:1f:d5:ac:83:83:5b:
d6:e6:cb:37:8c:11:15:b7:07:39:55:d0:53:6b:25:f9:90:5f:
10:14:ef:c7:35:94:45:f6:53:ca:54:44:15:cd:7a:13:2b:89:
0a:af:f5:65:44:0a:54:4a:01:f1:03:55:ff:eb:be:ee:2b:94:
6d:20:ec:72
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZXNQk917xt9gpvZqq4A4ee5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMzI1MTIyMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThlMmFjN2RhNTU2NDQyMzk5YTUwMzQzNGU3YTdhN2RjN2ZlMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrcBSHi50jylPl0FLiJqeEWzlkw/
lbe8qe9ctrr/pVNu4gFDcBpVw3tzJHpBMyGNnoorbEfYXaxehODepbYwKRTSoPim
fWnqoM9VwC7AIGITrkkEd1LLwHC67IoinPqAnF/Y1nEt9ACgfV/pNPe84hRIXUGL
t1j5fDAmHqBVMIXjU3YORFkeM+/mc8Pf4KA08riCZL+9NzJGEMh/K47bxshYTIC8
NoB1sU+Ar0ixBtD+rAkOibL7ExBeAznIuMZGNUBN76ZlkpIOpvh6CWo5b9ZtR9l+
NqN5kCViKUMWRH2G7iwXa874xwq2AVPCaexyLzg8b1j28DIoA8py/zhPbQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOqOKsfaVWRCOZpQNDTnp6fcf+FjMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvNm80cXg5cFZaRUk1bWxBME5PZW5wOXhfNFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQFVYWA
MAwDBAJVhaQDBAFVhcAwDAMEBFWF0AMEAFWF1gMEAFWF3AMEAVWF3jAMAwQAVYXh
AwQAVYXoAwQBVYXqAwQAVYXvMAwDBAJVhfQDBAFVhfgwDAMEAFWF+wMEAFWF/AME
AVWF/jANBAIAAjAHAwUDKgSHwDANBgkqhkiG9w0BAQsFAAOCAQEAgVc1X9AKuzbC
RzmbwjWVzD8Yw9IueJ+Eil5H43twyEhglFpJwk6KBlVLhEnE2Z4Lv2wGyrTFIkyZ
9NqGyqKWMBxBbdKAI0Ui5XyPAoP21wZEPcBe/Bjyb/p7d4z/ragj8a6dCEYo5FWp
gc/MgyVwgzj6yHq3Q/De+CGbzDxdidP33VsHqwamhBnu3Q992QVMAkluSimKvxGs
Ditf07Mt7oR2XZNVzn6GrENCjVvwFLcT7EFrjzwiJayiCImw3cLmH9Wsg4Nb1ubL
N4wRFbcHOVXQU2sl+ZBfEBTvxzWURfZTylREFc16EyuJCq/1ZUQKVEoB8QNV/+u+
7iuUbSDscg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net