Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JK_nrWmrQ1oiGFhoK0Qx2WVzIk.roa
File: 9JK_nrWmrQ1oiGFhoK0Qx2WVzIk.roa (raw, json)
Hash identifier: tAkOJTL020ozLetR3T28auPqEWwj+iKs7VAv0ITVHm4=
Subject key identifier: F4:92:BF:9E:B5:A6:AD:0D:68:88:61:61:A0:AD:10:C7:65:95:CC:89
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019532E858644A38D3CC25149A4E9CE9F9F3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JK_nrWmrQ1oiGFhoK0Qx2WVzIk.roa
Signing time: Sun 23 Feb 2025 13:04:02 +0000
ROA not before: Sun 23 Feb 2025 13:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.193.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:e8:58:64:4a:38:d3:cc:25:14:9a:4e:9c:e9:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 23 13:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f492bf9eb5a6ad0d68886161a0ad10c76595cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:46:ef:cc:98:42:5d:ab:9b:eb:a1:fb:45:
8d:d0:2b:35:42:0e:c7:83:e4:5f:44:dd:25:99:c4:
2b:20:9a:1a:42:14:ce:df:97:80:11:a3:69:f5:71:
a1:1b:5d:5d:3f:74:b4:49:a0:cb:37:cb:9c:85:ea:
cd:be:32:e5:a0:8c:72:7d:65:6b:3b:a6:2f:f6:7a:
80:64:69:72:1e:75:a2:32:8e:81:7d:c0:46:5d:df:
d3:67:30:42:eb:55:77:9d:28:12:fb:c0:16:6e:70:
c0:52:f5:44:c3:ae:78:6b:8e:d5:3f:f1:fe:cc:60:
21:a0:9a:73:8c:f1:41:44:b5:24:69:88:09:db:de:
58:fb:86:cb:e8:6c:3c:ac:5e:6d:df:fb:9a:6a:c3:
45:5b:0b:48:2c:31:31:4d:3a:b8:af:e5:2a:5c:47:
f8:92:91:dd:b8:58:e4:6e:76:2a:01:2b:2a:4c:f8:
0b:9a:f0:6e:f0:4f:d6:41:fa:c5:f9:ce:28:79:79:
4c:09:01:df:8f:d1:16:c0:12:e0:83:dd:fe:5c:51:
41:c0:a4:91:47:88:97:88:17:ba:30:38:99:59:3a:
3e:b9:c6:3c:92:99:2a:12:6e:3d:93:7f:fd:46:bf:
1c:2c:c6:c4:ef:05:00:b4:35:15:ea:ca:85:2e:27:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:BF:9E:B5:A6:AD:0D:68:88:61:61:A0:AD:10:C7:65:95:CC:89
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JK_nrWmrQ1oiGFhoK0Qx2WVzIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.193.255
85.133.208.0-85.133.214.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.252.0/24
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:1e:07:03:37:fc:cc:6d:f4:33:00:cc:7b:51:d3:df:5f:53:
43:e8:fc:05:74:db:f0:2d:3e:7c:71:3c:c6:54:2d:c8:98:25:
c2:a5:64:30:67:26:4a:80:71:47:20:86:96:29:ab:dc:f9:8b:
c9:3d:62:2a:84:dd:0a:7c:be:31:b9:d2:4f:65:dc:11:f4:12:
2a:87:92:cd:36:b6:a1:6e:ea:97:c3:52:ad:44:16:33:32:b1:
43:9e:61:ce:a9:34:c8:07:c7:5a:e4:8a:d8:17:af:38:23:3d:
fa:22:5e:6c:70:7a:3a:48:f1:da:0a:8a:79:82:f6:b9:ba:25:
7b:3c:99:ad:97:b9:0a:ea:97:ee:47:3d:e4:13:6e:af:14:c2:
69:2f:a7:da:15:a5:78:a5:7a:90:70:a0:4a:0c:58:c9:f3:62:
53:b2:33:e7:e3:d2:da:1d:f9:83:dc:ab:73:8f:ae:58:9a:76:
be:f5:2f:5c:dc:43:5c:4f:e0:3c:b9:e8:b9:0e:0f:49:19:0d:
7e:69:d8:cd:2e:1e:dc:19:74:ce:8a:af:1b:f7:c8:13:89:20:
ae:8f:c6:d1:d1:e2:bf:99:d9:69:2e:bc:09:41:21:e5:ce:b6:
4b:08:0e:71:c5:49:44:5c:3f:b6:21:59:43:cf:60:dc:1b:bd:
7c:b6:02:97
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZUy6FhkSjjTzCUUmk6c6fnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMjIzMTMwNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDkyYmY5ZWI1YTZhZDBkNjg4ODYxNjFhMGFkMTBjNzY1OTVjYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssRG78yYQl2rm+uh+0WN0Cs1Qg7H
g+RfRN0lmcQrIJoaQhTO35eAEaNp9XGhG11dP3S0SaDLN8ucherNvjLloIxyfWVr
O6Yv9nqAZGlyHnWiMo6BfcBGXd/TZzBC61V3nSgS+8AWbnDAUvVEw654a47VP/H+
zGAhoJpzjPFBRLUkaYgJ295Y+4bL6Gw8rF5t3/uaasNFWwtILDExTTq4r+UqXEf4
kpHduFjkbnYqASsqTPgLmvBu8E/WQfrF+c4oeXlMCQHfj9EWwBLgg93+XFFBwKSR
R4iXiBe6MDiZWTo+ucY8kpkqEm49k3/9Rr8cLMbE7wUAtDUV6sqFLidjQQIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFPSSv561pq0NaIhhYaCtEMdllcyJMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvOUpLX25yV21yUTFvaUdGaG9LMFF4MldWeklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAVVhYAw
DAMEAlWFpAMEAVWFwDAMAwQEVYXQAwQAVYXWAwQAVYXcAwQBVYXeMAwDBABVheED
BABVhegDBABVhesDBABVhe8DBAFVhfQwDAMEAFWF9wMEAVWF+AMEAFWF/AMEAVWF
/jANBAIAAjAHAwUDKgSHwDANBgkqhkiG9w0BAQsFAAOCAQEAfR4HAzf8zG30MwDM
e1HT319TQ+j8BXTb8C0+fHE8xlQtyJglwqVkMGcmSoBxRyCGlimr3PmLyT1iKoTd
Cny+MbnST2XcEfQSKoeSzTa2oW7ql8NSrUQWMzKxQ55hzqk0yAfHWuSK2BevOCM9
+iJebHB6Okjx2gqKeYL2ubolezyZrZe5CuqX7kc95BNurxTCaS+n2hWleKV6kHCg
SgxYyfNiU7Iz5+PS2h35g9yrc4+uWJp2vvUvXNxDXE/gPLnouQ4PSRkNfmnYzS4e
3Bl0zoqvG/fIE4kgro/G0dHiv5nZaS68CUEh5c62SwgOccVJRFw/tiFZQ89g3Bu9
fLYClw==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:22 2025 by rpki-client on console.sobornost.net