Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XaLOgehtLVk9tnd5XGEcDwcRBlU.roa
File: XaLOgehtLVk9tnd5XGEcDwcRBlU.roa (raw, json)
Hash identifier: sAB4FXAJmcnZC1T63F+PdpUH7XimmJjr5xENx6fn19Q=
Subject key identifier: 5D:A2:CE:81:E8:6D:2D:59:3D:B6:77:79:5C:61:1C:0F:07:11:06:55
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0195AB0F8288AB02EC3F2B2AA4AE105166E3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XaLOgehtLVk9tnd5XGEcDwcRBlU.roa
Signing time: Tue 18 Mar 2025 21:01:15 +0000
ROA not before: Tue 18 Mar 2025 21:01:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/23 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ab:0f:82:88:ab:02:ec:3f:2b:2a:a4:ae:10:51:66:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 18 21:01:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da2ce81e86d2d593db677795c611c0f07110655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:50:16:0d:95:5f:50:d2:e0:fc:fb:32:c0:
db:ac:3f:34:18:44:80:21:41:4e:ba:aa:66:22:bd:
8d:73:91:20:7b:9a:dc:11:e7:b4:65:5b:9e:3a:1a:
cc:d0:ae:fe:18:bc:8f:93:95:93:09:8f:36:a8:35:
82:be:87:ef:a2:06:90:65:f5:4f:47:43:53:1c:8a:
15:0b:4c:f2:45:be:39:60:56:6b:c6:0d:a1:00:25:
f6:b5:ec:53:51:ad:fa:70:c3:1a:0d:fb:f2:e8:3f:
a1:39:f6:97:63:ea:52:84:01:08:e4:76:f7:73:c5:
f8:07:0a:9b:3b:38:97:6e:bb:77:cf:4a:77:74:bb:
53:c5:29:94:c0:6a:72:c8:e6:4f:2b:07:9f:8a:81:
f0:4e:e4:4f:23:57:8e:01:81:a4:5d:25:10:24:64:
67:5f:e6:dd:51:8d:df:fe:a6:b9:c3:86:03:eb:0d:
58:d6:5b:41:bb:d4:4e:c6:9d:7f:c0:20:fb:1a:95:
6b:78:f0:fa:e5:d6:fb:3f:b8:00:10:0a:61:06:2c:
85:df:e0:07:2f:13:1f:3e:f3:70:d2:01:cd:d5:30:
a3:7c:0a:0f:ef:a1:86:18:3c:a6:42:16:68:dd:d7:
75:2f:ff:79:19:6b:e3:4f:c6:ce:09:a9:a1:cf:48:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:CE:81:E8:6D:2D:59:3D:B6:77:79:5C:61:1C:0F:07:11:06:55
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XaLOgehtLVk9tnd5XGEcDwcRBlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.192.255
85.133.208.0-85.133.213.255
85.133.220.0/24
85.133.223.0/24
85.133.226.0/24
85.133.229.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0-85.133.249.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:5f:df:5a:92:e4:3a:35:43:e3:99:ec:3b:2a:b3:d7:32:2b:
9f:33:51:8c:1d:58:e7:ba:2e:8e:df:f4:6c:c9:c6:1c:73:b1:
97:d4:5a:8f:9e:05:35:77:f8:96:e5:30:9e:79:74:e6:d8:29:
6c:6c:09:2f:a0:1d:fa:9a:c4:48:05:01:e9:27:ce:48:4c:1b:
b2:d2:f8:ae:25:2f:49:66:30:9b:03:2a:93:44:db:15:35:90:
56:4e:e0:91:65:17:26:25:22:ab:1d:ce:be:80:a8:01:d1:c1:
34:53:53:ab:20:b8:c8:9b:6e:50:cc:f3:a2:de:30:b7:bd:47:
35:db:f0:5d:6d:48:17:b8:f6:c2:a1:0f:c7:d3:7b:4c:4e:65:
35:2f:db:0e:3f:24:08:75:7e:20:d7:14:dd:ca:5c:e4:cf:56:
36:c4:2e:8f:ae:5c:49:56:e0:28:e4:d4:66:39:c6:fc:21:6f:
e3:73:6d:fc:60:af:c6:09:79:90:9d:3a:d6:f6:be:d4:a1:0b:
b0:20:c9:90:74:dd:6a:43:1a:8b:62:0a:09:31:93:51:c4:9c:
f9:20:aa:21:15:f6:35:be:8f:d9:30:ce:48:fd:05:41:52:3a:
8a:87:d9:a7:af:f2:50:6a:39:d9:f3:70:d0:d2:19:05:29:f9:
61:a3:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:17:52 2025 by rpki-client on console.sobornost.net