Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/9NiEbrG50VzL5n-nwEpR1JuLtLw.roa
File: 9NiEbrG50VzL5n-nwEpR1JuLtLw.roa (raw, json)
Hash identifier: KIgMiox26MmZ5D54RlJRvi65sfJ3+rCzWPc9zqX5xE4=
Subject key identifier: F4:D8:84:6E:B1:B9:D1:5C:CB:E6:7F:A7:C0:4A:51:D4:9B:8B:B4:BC
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 0194F0EDC0098966CE8D4EF0DAF4BDFC659D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/9NiEbrG50VzL5n-nwEpR1JuLtLw.roa
Signing time: Mon 10 Feb 2025 17:35:00 +0000
ROA not before: Mon 10 Feb 2025 17:35:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:ed:c0:09:89:66:ce:8d:4e:f0:da:f4:bd:fc:65:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Feb 10 17:35:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d8846eb1b9d15ccbe67fa7c04a51d49b8bb4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:1d:8b:95:37:49:3f:29:ae:74:31:b9:a2:
f6:73:67:cf:c8:bf:76:ad:9c:00:7f:cc:70:c7:9f:
3e:df:23:a9:65:d5:d4:16:b2:6b:10:b0:83:ed:fe:
73:f3:32:db:ef:19:46:12:fb:cc:2a:5f:e2:8b:93:
3b:e5:58:2c:a1:1d:64:b1:6b:91:46:c8:a5:aa:df:
b4:04:f4:9d:01:e6:18:cc:12:e6:ff:87:d4:0f:56:
db:2f:1b:06:77:50:2a:61:9d:51:97:7d:10:18:ea:
76:0c:94:8c:75:ea:ee:91:90:a1:24:e1:3f:21:76:
82:77:c0:8d:e1:6b:c9:3d:9d:cd:bb:78:25:17:7c:
e3:88:1b:4e:69:ed:7a:57:86:91:79:c0:32:5a:a2:
d6:86:14:56:c0:9c:bb:8f:67:7a:35:37:ca:f5:67:
3d:4a:47:0a:3d:a5:58:1e:b5:f5:a0:7e:e8:6a:47:
c5:25:ac:6d:ef:28:4c:7e:f7:e8:08:5f:7d:18:94:
00:f0:20:03:e2:9b:9f:9c:b8:64:6a:27:6a:86:5b:
23:48:31:b9:71:97:f8:60:5d:0d:e5:aa:ac:64:9c:
5c:f3:26:b7:c3:cb:a7:b0:13:d3:98:a6:26:9d:52:
d5:37:8c:f1:56:32:55:48:19:7d:7a:f4:37:42:28:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:84:6E:B1:B9:D1:5C:CB:E6:7F:A7:C0:4A:51:D4:9B:8B:B4:BC
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/9NiEbrG50VzL5n-nwEpR1JuLtLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.23.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0/24
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
2d:44:7f:e2:2b:49:57:fa:1f:7b:ee:41:d4:67:12:4e:fc:2a:
e0:e3:bb:4a:56:09:a5:f9:33:90:77:36:2c:20:0e:4c:5e:13:
ce:4b:dc:2e:82:69:94:fd:9a:ae:8c:e4:77:4a:6e:c5:fa:0a:
1f:fb:08:4b:6f:fc:b7:35:df:11:c3:da:db:93:e4:39:ee:df:
69:13:9c:71:98:6a:14:9d:a9:07:f5:20:c7:36:c1:fd:fb:a6:
8d:d0:ac:a8:1e:3f:fe:fd:7d:f0:d4:fd:33:6c:af:44:68:32:
85:fd:7f:93:4e:21:70:03:7e:5a:ce:13:34:94:a2:7f:66:e7:
0f:2e:8d:a4:ea:99:06:11:57:68:9a:f6:9c:1b:af:2e:6d:ef:
37:f2:86:e1:7c:36:c2:b5:dc:9b:65:dc:4a:87:db:74:74:69:
a8:1e:8b:4f:a5:3d:2b:58:12:b3:fc:f5:1a:a5:b1:2b:98:d5:
9b:dd:63:cc:db:a2:92:01:88:11:9c:7e:f0:02:d5:93:12:84:
d2:b1:bd:97:5b:e6:12:d0:28:74:e0:3d:0e:99:34:87:e8:5c:
e9:af:d4:cd:53:f9:80:d8:52:4e:4d:23:37:ab:d9:86:98:c3:
4b:bc:15:c6:7e:06:9c:36:94:5d:a5:a3:7d:37:f7:8a:8b:23:
5b:04:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:25:01 2025 by rpki-client on console.sobornost.net