Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ok5BZCax1NDSQDsVT_UCaO-srbo.roa
File: Ok5BZCax1NDSQDsVT_UCaO-srbo.roa (raw, json)
Hash identifier: Y3mTPHhq8eKntcsSusmXnLiXkV/ZUKJmWS4nCAX4o4M=
Subject key identifier: 3A:4E:41:64:26:B1:D4:D0:D2:40:3B:15:4F:F5:02:68:EF:AC:AD:BA
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193C982F35C2AB98E02B42989AC645F2E29
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ok5BZCax1NDSQDsVT_UCaO-srbo.roa
Signing time: Sun 15 Dec 2024 08:50:22 +0000
ROA not before: Sun 15 Dec 2024 08:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 45.11.45.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
45.13.199.0/24 maxlen: 24
45.80.188.0/22 maxlen: 24
45.82.76.0/22 maxlen: 32
45.89.232.0/22 maxlen: 32
45.90.210.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
45.94.40.0/22 maxlen: 32
45.128.208.0/22 maxlen: 32
45.129.8.0/22 maxlen: 32
45.130.20.0/22 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.23.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
62.133.32.0/22 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.35.0/24 maxlen: 24
78.142.192.0/22 maxlen: 24
78.142.193.0/24 maxlen: 32
78.142.195.0/24 maxlen: 32
78.142.228.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
88.218.192.0/22 maxlen: 32
91.200.241.0/24 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.40.0/24 maxlen: 24
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.118.190.0/24 maxlen: 32
94.124.116.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
109.94.168.0/22 maxlen: 24
109.94.168.0/24 maxlen: 32
141.98.196.0/22 maxlen: 24
147.78.176.0/22 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.240.0/24 maxlen: 24
147.78.241.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
176.113.68.0/22 maxlen: 32
185.49.32.0/22 maxlen: 24
185.64.79.0/24 maxlen: 24
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 24
185.194.52.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
185.207.152.0/22 maxlen: 32
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
185.248.84.0/22 maxlen: 24
185.254.73.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.254.75.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
193.187.116.0/22 maxlen: 32
194.36.24.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
194.36.27.0/24 maxlen: 32
194.36.222.0/23 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
194.124.228.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.180.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
213.232.112.0/22 maxlen: 24
2a03:d9c0::/29 maxlen: 128
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a09::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a09:0:9000::/40 maxlen: 128
2a0b:4080::/32 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a0c:59c0:3000::/40 maxlen: 128
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a10:480::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c9:82:f3:5c:2a:b9:8e:02:b4:29:89:ac:64:5f:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 15 08:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a4e416426b1d4d0d2403b154ff50268efacadba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:96:97:45:1e:80:f5:e9:b0:59:46:fa:de:
47:e7:aa:fc:ef:c1:e4:32:22:3c:b7:c4:25:3c:dc:
58:60:de:80:e8:f7:e4:01:a5:af:09:30:54:d1:dd:
65:a5:48:a7:da:38:b1:05:39:93:6c:f8:62:a2:77:
37:a6:62:d1:49:38:1b:c0:5a:51:cf:58:06:e6:8e:
58:dd:48:68:fc:94:18:fe:f6:55:23:d2:5e:6a:62:
32:bf:1a:f1:be:5f:84:db:01:8c:4a:c7:d4:ce:20:
88:1c:b9:37:75:27:74:99:77:79:87:0c:ff:9b:54:
94:50:3f:27:fa:96:da:e9:8d:80:f7:4c:37:5a:8b:
36:f1:d5:64:4e:85:89:b0:2a:ea:64:bb:ad:52:33:
49:ae:e1:63:a4:ea:b5:73:c4:d1:86:d7:4e:51:9d:
f7:6a:32:fd:2f:ed:49:11:9c:a4:ec:4c:85:a4:a6:
3d:ee:e4:f6:9c:13:1d:5a:1a:79:32:c0:20:8c:2c:
55:34:f9:eb:a8:7f:18:20:5b:7c:8f:cb:36:ba:6e:
a4:74:f6:ea:07:cb:77:c2:75:45:8b:1b:86:ca:db:
e3:d3:16:14:ac:f1:19:98:02:d4:f6:5a:78:11:de:
87:8c:c5:cc:c2:06:ec:6c:e6:dd:64:34:3b:01:0b:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:41:64:26:B1:D4:D0:D2:40:3B:15:4F:F5:02:68:EF:AC:AD:BA
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ok5BZCax1NDSQDsVT_UCaO-srbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.82.76.0/22
45.89.232.0/22
45.90.210.0/24
45.92.157.0/24
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.131.152.0/22
45.134.168.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/23
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
78.142.228.0/22
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
88.218.192.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
92.118.190.0/24
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
147.78.240.0/23
149.62.44.0/22
176.113.68.0/22
185.49.32.0/22
185.64.79.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.207.152.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
193.187.116.0/22
194.36.24.0/23
194.36.27.0/24
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
213.232.112.0/22
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
35:96:f4:55:dd:5d:7b:24:a7:ac:8b:74:67:31:32:1b:84:eb:
be:2d:a3:36:73:d6:1c:13:fd:d0:f2:0d:94:a7:5c:24:b4:1a:
02:d6:7f:66:48:53:48:f5:2c:d9:ab:de:7a:99:fa:de:fc:c4:
a2:e2:92:d7:b1:3b:fe:40:84:13:b1:be:f1:c6:4e:0d:47:48:
df:7e:fd:42:20:6f:0f:85:fd:92:20:fd:a5:ef:cc:f5:43:5b:
58:90:91:61:a8:1c:47:d1:37:fc:8d:d1:33:a8:1f:30:b3:43:
fb:f2:ce:e1:ba:3e:6c:ee:c3:81:b7:b9:40:49:4b:37:18:69:
0d:9a:3c:ca:6c:cd:9f:1f:50:b4:b5:48:ae:69:c7:8e:71:3d:
6f:4b:f9:91:c4:54:9d:8a:cb:4a:27:f2:6d:78:1b:e6:5c:a7:
df:54:90:29:70:09:81:ff:b3:bb:f4:3a:32:d3:0e:cc:c3:d6:
a7:95:90:8a:f4:af:ee:80:c8:8d:f4:2c:a7:fc:6d:ec:87:d3:
43:af:bf:6e:11:32:67:a4:94:d4:9b:7a:d2:e0:64:82:dc:0b:
5c:fa:7d:ad:09:49:b0:de:1e:16:1b:e4:f2:ad:9a:ca:00:7a:
bc:66:77:82:f9:b6:21:98:b1:c1:2d:42:68:02:37:7a:92:3c:
0d:6d:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:50 2025 by rpki-client