Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa
File: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (raw, json)
Hash identifier: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=
Subject key identifier: B5:12:7E:04:53:AE:97:95:47:97:77:4D:31:78:2C:B8:EC:15:DD:FA
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019421B1C8700B635A4B1A1343411E0A0A50
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49273
IP address blocks: 45.153.60.0/24 maxlen: 24
45.153.61.0/24 maxlen: 24
45.153.62.0/24 maxlen: 24
45.153.63.0/24 maxlen: 24
45.153.64.0/24 maxlen: 24
45.153.65.0/24 maxlen: 24
45.153.66.0/24 maxlen: 24
45.153.67.0/24 maxlen: 24
185.208.176.0/24 maxlen: 24
185.208.177.0/24 maxlen: 24
185.208.178.0/24 maxlen: 24
185.208.179.0/24 maxlen: 24
188.113.192.0/24 maxlen: 24
188.113.193.0/24 maxlen: 24
188.113.194.0/24 maxlen: 24
188.113.195.0/24 maxlen: 24
188.113.196.0/24 maxlen: 24
188.113.197.0/24 maxlen: 24
188.113.198.0/24 maxlen: 24
188.113.199.0/24 maxlen: 24
188.113.200.0/24 maxlen: 24
188.113.201.0/24 maxlen: 24
188.113.202.0/24 maxlen: 24
188.113.203.0/24 maxlen: 24
188.113.204.0/24 maxlen: 24
188.113.205.0/24 maxlen: 24
188.113.206.0/24 maxlen: 24
188.113.207.0/24 maxlen: 24
188.113.208.0/24 maxlen: 24
188.113.209.0/24 maxlen: 24
188.113.210.0/24 maxlen: 24
188.113.211.0/24 maxlen: 24
188.113.212.0/24 maxlen: 24
188.113.213.0/24 maxlen: 24
188.113.214.0/24 maxlen: 24
188.113.215.0/24 maxlen: 24
188.113.216.0/24 maxlen: 24
188.113.217.0/24 maxlen: 24
188.113.218.0/24 maxlen: 24
188.113.219.0/24 maxlen: 24
188.113.221.0/24 maxlen: 24
188.113.222.0/24 maxlen: 24
188.113.224.0/24 maxlen: 24
188.113.225.0/24 maxlen: 24
188.113.226.0/24 maxlen: 24
188.113.227.0/24 maxlen: 24
188.113.228.0/24 maxlen: 24
188.113.229.0/24 maxlen: 24
188.113.230.0/24 maxlen: 24
188.113.231.0/24 maxlen: 24
188.113.232.0/24 maxlen: 24
188.113.233.0/24 maxlen: 24
188.113.234.0/24 maxlen: 24
188.113.235.0/24 maxlen: 24
188.113.236.0/24 maxlen: 24
188.113.237.0/24 maxlen: 24
188.113.238.0/24 maxlen: 24
188.113.239.0/24 maxlen: 24
188.113.240.0/24 maxlen: 24
188.113.241.0/24 maxlen: 24
188.113.242.0/24 maxlen: 24
188.113.243.0/24 maxlen: 24
188.113.244.0/24 maxlen: 24
188.113.245.0/24 maxlen: 24
188.113.246.0/24 maxlen: 24
188.113.247.0/24 maxlen: 24
188.113.248.0/24 maxlen: 24
188.113.249.0/24 maxlen: 24
188.113.250.0/24 maxlen: 24
188.113.251.0/24 maxlen: 24
188.113.252.0/24 maxlen: 24
188.113.253.0/24 maxlen: 24
188.113.254.0/24 maxlen: 24
188.113.255.0/24 maxlen: 24
2a02:f7c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c8:70:0b:63:5a:4b:1a:13:43:41:1e:0a:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5127e0453ae97954797774d31782cb8ec15ddfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:da:d5:34:b1:88:20:b7:7a:b0:d4:10:7d:
9d:7b:0a:8c:e5:9d:ac:2c:a6:42:1d:27:d1:d7:a2:
6c:9d:57:04:0b:70:b4:cd:46:a6:e9:6f:a7:df:1a:
4c:b9:50:67:c2:68:73:1a:5e:c2:08:8f:5d:d2:eb:
f4:2b:82:0f:32:46:47:18:c4:22:2c:a0:f1:8a:41:
40:d9:8b:c0:f4:ff:ba:6d:db:c7:fa:2e:1f:61:dd:
ed:c0:0b:9a:c5:f8:0b:ff:8e:28:5b:91:ac:37:29:
f7:23:e1:15:53:bc:90:d9:a0:0e:1b:d6:d8:dd:e5:
4c:ba:80:a1:76:d0:9d:59:c7:2e:23:9c:33:0d:ec:
af:a7:35:03:b6:70:17:0d:c3:a9:30:a8:04:d9:69:
2f:90:de:ec:cc:6e:8c:a6:e9:89:53:5c:da:b6:a0:
de:54:b7:78:7c:bd:83:b5:d2:b1:01:bf:84:e3:57:
09:49:10:c6:05:a8:08:e1:6c:d9:1c:c3:78:99:b1:
9e:4a:dc:a2:94:f2:ed:e1:22:fa:b6:a1:d4:9d:31:
11:87:11:db:01:5e:bb:32:50:24:3c:f5:45:cb:fd:
7f:e7:e2:77:3e:b5:b5:90:19:4a:8c:15:ee:ee:ac:
18:44:29:e0:89:dd:0e:ea:fd:9e:ed:41:12:89:f7:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:7E:04:53:AE:97:95:47:97:77:4D:31:78:2C:B8:EC:15:DD:FA
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.60.0-45.153.67.255
185.208.176.0/22
188.113.192.0-188.113.219.255
188.113.221.0-188.113.222.255
188.113.224.0/19
IPv6:
2a02:f7c0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:7a:85:0d:6d:09:36:26:d1:fc:a3:61:20:fe:d3:0a:cd:0c:
39:88:07:84:d9:bc:e3:a6:9c:1e:d9:d9:bd:8a:e4:ce:5c:d2:
a8:0d:98:62:54:fa:f0:4d:ef:f8:1c:5b:0f:4f:bd:e9:12:c8:
39:cc:2b:af:da:df:71:3c:78:1a:71:8a:b9:19:6c:04:d7:2d:
99:b1:92:49:7c:23:1c:c8:59:c7:32:76:1f:38:5c:ac:7d:f2:
b4:bb:49:bc:cb:94:e4:54:93:36:bc:54:b5:c6:f4:e6:39:18:
75:e5:13:f7:43:90:09:a9:41:0c:ec:5b:64:b8:34:4f:10:53:
6f:f0:29:b5:49:13:8c:ad:59:33:2b:64:58:6b:ad:03:fa:7c:
65:db:28:76:e3:59:57:51:6b:42:2e:84:35:8e:36:9d:93:6a:
a5:43:bf:cf:19:25:83:4d:e9:ec:99:44:7b:1f:23:24:e9:36:
b7:9d:be:22:cd:2b:e6:e1:d2:4b:c3:b8:45:3a:66:29:46:77:
ef:ef:ab:18:f4:f1:f6:14:38:1e:96:cc:76:a2:bd:57:3c:91:
2e:98:dd:bb:38:aa:3e:b9:59:d8:a3:2b:cd:e2:0e:a5:9d:69:
08:66:38:d8:f3:ca:10:c5:23:94:b3:b0:e3:51:9d:d9:5b:f7:
7f:52:d7:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZQhschwC2NaSxoTQ0EeCgpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5
NjQ5YmIwHhcNMjUwMTAxMTE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTEyN2UwNDUzYWU5Nzk1NDc5Nzc3NGQzMTc4MmNiOGVjMTVkZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ3a1TSxiCC3erDUEH2dewqM5Z2s
LKZCHSfR16JsnVcEC3C0zUam6W+n3xpMuVBnwmhzGl7CCI9d0uv0K4IPMkZHGMQi
LKDxikFA2YvA9P+6bdvH+i4fYd3twAuaxfgL/44oW5GsNyn3I+EVU7yQ2aAOG9bY
3eVMuoChdtCdWccuI5wzDeyvpzUDtnAXDcOpMKgE2WkvkN7szG6MpumJU1zatqDe
VLd4fL2DtdKxAb+E41cJSRDGBagI4WzZHMN4mbGeStyilPLt4SL6tqHUnTERhxHb
AV67MlAkPPVFy/1/5+J3PrW1kBlKjBXu7qwYRCngid0O6v2e7UESifdVlQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFLUSfgRTrpeVR5d3TTF4LLjsFd36MB8GA1UdIwQY
MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt
ZWVkZjc2MDc3ZjA5LzEvdFJKLUJGT3VsNVZIbDNkTk1YZ3N1T3dWM2ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5
LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2MAwDBAItmTwD
BAItmUADBAK50LAwDAMEBrxxwAMEArxx2DAMAwQAvHHdAwQAvHHeAwQFvHHgMA0E
AgACMAcDBQAqAvfAMA0GCSqGSIb3DQEBCwUAA4IBAQC8eoUNbQk2JtH8o2Eg/tMK
zQw5iAeE2bzjppwe2dm9iuTOXNKoDZhiVPrwTe/4HFsPT73pEsg5zCuv2t9xPHga
cYq5GWwE1y2ZsZJJfCMcyFnHMnYfOFysffK0u0m8y5TkVJM2vFS1xvTmORh15RP3
Q5AJqUEM7FtkuDRPEFNv8Cm1SROMrVkzK2RYa60D+nxl2yh241lXUWtCLoQ1jjad
k2qlQ7/PGSWDTensmUR7HyMk6Ta3nb4izSvm4dJLw7hFOmYpRnfv76sY9PH2FDge
lsx2or1XPJEumN27OKo+uVnYoyvN4g6lnWkIZjjY88oQxSOUs7DjUZ3ZW/d/UtfY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net