Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0BDV4PoV5X4F__dwougvjtVPUss.roa
File: 0BDV4PoV5X4F__dwougvjtVPUss.roa (raw, json)
Hash identifier: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=
Subject key identifier: D0:10:D5:E0:FA:15:E5:7E:05:FF:F7:70:A2:E8:2F:8E:D5:4F:52:CB
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0194221F811781F5FE29D018961E833AA892
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0BDV4PoV5X4F__dwougvjtVPUss.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16371
IP address blocks: 45.6.48.0/22 maxlen: 23
77.240.112.0/20 maxlen: 20
77.240.112.0/21 maxlen: 21
77.240.120.0/21 maxlen: 21
77.240.124.0/23 maxlen: 23
77.240.124.0/24 maxlen: 24
77.240.125.0/24 maxlen: 24
77.240.126.0/24 maxlen: 24
79.139.120.0/21 maxlen: 21
79.139.120.0/22 maxlen: 22
79.139.124.0/22 maxlen: 22
82.194.64.0/19 maxlen: 19
82.194.64.0/20 maxlen: 20
82.194.64.0/24 maxlen: 24
82.194.80.0/20 maxlen: 20
85.187.56.0/22 maxlen: 22
85.187.56.0/23 maxlen: 23
85.187.58.0/23 maxlen: 23
86.109.96.0/19 maxlen: 19
86.109.96.0/20 maxlen: 20
86.109.97.0/24 maxlen: 24
86.109.99.0/24 maxlen: 24
86.109.102.0/24 maxlen: 24
86.109.112.0/20 maxlen: 20
86.109.124.0/22 maxlen: 22
86.109.124.0/23 maxlen: 23
86.109.126.0/23 maxlen: 23
87.238.88.0/21 maxlen: 22
89.17.192.0/20 maxlen: 20
89.17.192.0/21 maxlen: 21
89.17.200.0/21 maxlen: 21
89.17.208.0/20 maxlen: 20
89.17.208.0/21 maxlen: 21
89.17.216.0/21 maxlen: 21
89.37.224.0/23 maxlen: 23
89.37.224.0/24 maxlen: 24
89.37.225.0/24 maxlen: 24
93.90.16.0/20 maxlen: 20
93.90.16.0/21 maxlen: 21
93.90.24.0/21 maxlen: 21
93.90.28.0/22 maxlen: 22
93.90.28.0/23 maxlen: 23
93.90.30.0/23 maxlen: 23
109.70.32.0/21 maxlen: 21
109.70.32.0/22 maxlen: 22
109.70.32.0/24 maxlen: 24
109.70.36.0/22 maxlen: 22
176.28.96.0/19 maxlen: 19
176.28.96.0/20 maxlen: 20
176.28.97.0/24 maxlen: 24
176.28.103.0/24 maxlen: 24
176.28.112.0/20 maxlen: 20
176.28.119.0/24 maxlen: 24
176.28.126.0/23 maxlen: 23
176.28.126.0/24 maxlen: 24
176.28.127.0/24 maxlen: 24
185.2.68.0/22 maxlen: 22
185.2.68.0/24 maxlen: 24
185.2.69.0/24 maxlen: 24
185.2.70.0/23 maxlen: 23
185.78.24.0/22 maxlen: 23
194.116.184.0/23 maxlen: 23
194.116.184.0/24 maxlen: 24
194.116.185.0/24 maxlen: 24
213.149.224.0/20 maxlen: 20
213.149.224.0/21 maxlen: 21
213.149.232.0/21 maxlen: 21
213.149.240.0/20 maxlen: 20
213.149.240.0/21 maxlen: 21
213.149.248.0/21 maxlen: 21
217.116.0.0/20 maxlen: 20
217.116.0.0/21 maxlen: 21
217.116.0.0/24 maxlen: 24
217.116.2.0/24 maxlen: 24
217.116.8.0/21 maxlen: 21
217.116.15.0/24 maxlen: 24
217.116.16.0/20 maxlen: 20
217.116.16.0/21 maxlen: 21
217.116.18.0/24 maxlen: 24
217.116.24.0/21 maxlen: 21
217.116.27.0/24 maxlen: 24
217.116.28.0/24 maxlen: 24
2a02:3b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:81:17:81:f5:fe:29:d0:18:96:1e:83:3a:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d010d5e0fa15e57e05fff770a2e82f8ed54f52cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:4a:3e:52:2c:fc:8c:45:c6:47:93:52:54:
7b:e8:ed:bc:49:a7:de:48:ed:e8:28:c3:8f:e9:12:
97:a2:10:d8:15:4b:b9:93:d6:1b:d8:c7:60:2e:2e:
2c:09:04:27:a3:b7:ac:e1:31:82:19:be:bd:e6:b9:
1d:78:ed:3a:3d:76:36:4c:04:23:22:8d:ef:91:87:
16:c7:17:fe:94:9c:84:e4:df:34:5d:1d:e7:2b:d0:
e8:25:69:26:d6:d6:19:6b:a5:3d:9b:c2:b8:20:ac:
9b:82:25:7b:57:ec:4a:e9:87:12:8d:7e:ed:47:c0:
51:75:d2:dc:68:b3:66:3a:40:75:18:d3:3e:44:c1:
2d:36:c5:3c:24:d8:74:53:7a:6b:cf:44:61:7c:e5:
61:b4:f3:de:14:e2:13:59:f7:48:c2:df:37:fc:e0:
da:10:67:8e:fd:c3:8f:57:40:be:7e:56:6b:c6:d2:
79:00:18:1f:1a:fe:92:75:85:cb:d5:0f:e4:f4:f1:
27:b7:22:09:7d:56:b1:75:cd:7c:e0:50:ec:34:0b:
77:4b:bc:92:f2:2b:84:69:b0:fe:bf:60:b9:5f:ed:
3e:bf:7c:31:e9:44:aa:2e:74:cd:48:de:e1:4a:90:
06:66:e7:ca:45:d1:f4:ed:60:b6:28:f6:18:b0:fa:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:D5:E0:FA:15:E5:7E:05:FF:F7:70:A2:E8:2F:8E:D5:4F:52:CB
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0BDV4PoV5X4F__dwougvjtVPUss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
77.240.112.0/20
79.139.120.0/21
82.194.64.0/19
85.187.56.0/22
86.109.96.0/19
87.238.88.0/21
89.17.192.0/19
89.37.224.0/23
93.90.16.0/20
109.70.32.0/21
176.28.96.0/19
185.2.68.0/22
185.78.24.0/22
194.116.184.0/23
213.149.224.0/19
217.116.0.0/19
IPv6:
2a02:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
64:63:95:77:1f:46:75:9e:28:94:8d:16:e3:be:39:3f:44:0c:
bd:1b:c0:04:48:dc:9f:37:5a:b7:3a:ee:e7:c6:95:c6:b8:88:
04:d8:df:0f:a8:22:2e:19:c4:61:f6:76:c5:1e:88:fa:55:e9:
21:e3:ea:2e:5d:31:d7:04:84:d2:30:fd:66:bb:61:26:41:79:
1d:e5:d2:4e:9d:6c:51:18:74:c0:61:a8:84:b2:73:da:ad:01:
63:4e:f7:62:db:b0:f9:d1:a2:13:02:31:1f:06:64:3f:00:a4:
b3:b8:c6:21:90:3c:31:be:48:68:b1:f2:08:49:4d:56:40:b1:
ea:50:07:7d:d8:02:fb:8c:ad:8c:f5:85:ed:ab:21:21:b2:bd:
4b:f7:7b:c3:3e:04:54:ab:e3:ee:60:b9:d2:dc:92:4d:0f:af:
a8:67:55:68:26:02:dd:f9:ab:82:3e:a1:4b:f1:66:14:90:d9:
7d:9d:7b:25:00:57:fb:3c:75:38:aa:cd:f9:c7:45:e1:17:75:
6a:c4:9c:1d:4c:48:b6:69:e1:3e:95:37:d7:ed:9d:09:40:d3:
6d:6e:4a:1a:a7:6c:b9:9b:14:12:17:a3:2e:37:d1:79:8b:07:
27:cc:a4:8b:30:63:40:8f:5e:b8:d7:bf:70:33:15:d2:a5:6e:
8e:8c:b7:e9
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZQiH4EXgfX+KdAYlh6DOqiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjUwMTAxMTM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDEwZDVlMGZhMTVlNTdlMDVmZmY3NzBhMmU4MmY4ZWQ1NGY1MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPtKPlIs/IxFxkeTUlR76O28Safe
SO3oKMOP6RKXohDYFUu5k9Yb2MdgLi4sCQQno7es4TGCGb695rkdeO06PXY2TAQj
Io3vkYcWxxf+lJyE5N80XR3nK9DoJWkm1tYZa6U9m8K4IKybgiV7V+xK6YcSjX7t
R8BRddLcaLNmOkB1GNM+RMEtNsU8JNh0U3prz0RhfOVhtPPeFOITWfdIwt83/ODa
EGeO/cOPV0C+flZrxtJ5ABgfGv6SdYXL1Q/k9PEntyIJfVaxdc184FDsNAt3S7yS
8iuEabD+v2C5X+0+v3wx6USqLnTNSN7hSpAGZufKRdH07WC2KPYYsPqV1QIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFNAQ1eD6FeV+Bf/3cKLoL47VT1LLMB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvMEJEVjRQb1Y1WDRGX19kd291Z3ZqdFZQVXNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAi0GMAME
BE3wcAMEA0+LeAMEBVLCQAMEAlW7OAMEBVZtYAMEA1fuWAMEBVkRwAMEAVkl4AME
BF1aEAMEA21GIAMEBbAcYAMEArkCRAMEArlOGAMEAcJ0uAMEBdWV4AMEBdl0ADAN
BAIAAjAHAwUAKgIDuDANBgkqhkiG9w0BAQsFAAOCAQEAZGOVdx9GdZ4olI0W4745
P0QMvRvABEjcnzdatzru58aVxriIBNjfD6giLhnEYfZ2xR6I+lXpIePqLl0x1wSE
0jD9ZrthJkF5HeXSTp1sURh0wGGohLJz2q0BY073Ytuw+dGiEwIxHwZkPwCks7jG
IZA8Mb5IaLHyCElNVkCx6lAHfdgC+4ytjPWF7ashIbK9S/d7wz4EVKvj7mC50tyS
TQ+vqGdVaCYC3fmrgj6hS/FmFJDZfZ17JQBX+zx1OKrN+cdF4Rd1asScHUxItmnh
PpU31+2dCUDTbW5KGqdsuZsUEhejLjfReYsHJ8ykizBjQI9euNe/cDMV0qVujoy3
6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net