Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/3hSBBEtakLk1jIWXi3hchM-uTBM.roa
File: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (raw, json)
Hash identifier: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=
Subject key identifier: DE:14:81:04:4B:5A:90:B9:35:8C:85:97:8B:78:5C:84:CF:AE:4C:13
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 019422FBF712B41A853C70633C4216A9A477
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/3hSBBEtakLk1jIWXi3hchM-uTBM.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 87.251.32.0/19 maxlen: 24
87.251.32.0/24 maxlen: 24
87.251.33.0/24 maxlen: 24
87.251.34.0/24 maxlen: 24
87.251.35.0/24 maxlen: 24
87.251.36.0/24 maxlen: 24
87.251.37.0/24 maxlen: 24
87.251.38.0/24 maxlen: 24
87.251.39.0/24 maxlen: 24
87.251.40.0/24 maxlen: 24
87.251.41.0/24 maxlen: 24
87.251.42.0/24 maxlen: 24
87.251.43.0/24 maxlen: 24
87.251.44.0/24 maxlen: 24
87.251.45.0/24 maxlen: 24
87.251.46.0/24 maxlen: 24
87.251.47.0/24 maxlen: 24
87.251.48.0/24 maxlen: 24
87.251.49.0/24 maxlen: 24
87.251.50.0/24 maxlen: 24
87.251.51.0/24 maxlen: 24
87.251.52.0/24 maxlen: 24
87.251.53.0/24 maxlen: 24
87.251.54.0/24 maxlen: 24
87.251.55.0/24 maxlen: 24
87.251.56.0/24 maxlen: 24
87.251.57.0/24 maxlen: 24
87.251.58.0/24 maxlen: 24
87.251.59.0/24 maxlen: 24
87.251.60.0/24 maxlen: 24
87.251.61.0/24 maxlen: 24
87.251.62.0/24 maxlen: 24
87.251.63.0/24 maxlen: 24
185.62.16.0/22 maxlen: 24
185.62.16.0/24 maxlen: 24
185.62.17.0/24 maxlen: 24
185.62.18.0/24 maxlen: 24
185.62.19.0/24 maxlen: 24
193.109.122.0/24 maxlen: 24
212.72.232.0/21 maxlen: 24
212.72.232.0/24 maxlen: 24
212.72.233.0/24 maxlen: 24
212.72.234.0/24 maxlen: 24
212.72.235.0/24 maxlen: 24
212.72.236.0/24 maxlen: 24
212.72.237.0/24 maxlen: 24
212.72.238.0/24 maxlen: 24
212.72.239.0/24 maxlen: 24
212.72.240.0/20 maxlen: 24
212.72.240.0/24 maxlen: 24
212.72.241.0/24 maxlen: 24
212.72.242.0/24 maxlen: 24
212.72.243.0/24 maxlen: 24
212.72.244.0/24 maxlen: 24
212.72.245.0/24 maxlen: 24
212.72.246.0/24 maxlen: 24
212.72.247.0/24 maxlen: 24
212.72.248.0/24 maxlen: 24
212.72.249.0/24 maxlen: 24
212.72.250.0/24 maxlen: 24
212.72.251.0/24 maxlen: 24
212.72.252.0/24 maxlen: 24
212.72.253.0/24 maxlen: 24
212.72.254.0/24 maxlen: 24
212.72.255.0/24 maxlen: 24
212.114.96.0/19 maxlen: 24
212.114.96.0/24 maxlen: 24
212.114.97.0/24 maxlen: 24
212.114.98.0/24 maxlen: 24
212.114.99.0/24 maxlen: 24
212.114.100.0/24 maxlen: 24
212.114.101.0/24 maxlen: 24
212.114.102.0/24 maxlen: 24
212.114.103.0/24 maxlen: 24
212.114.104.0/24 maxlen: 24
212.114.105.0/24 maxlen: 24
212.114.106.0/24 maxlen: 24
212.114.107.0/24 maxlen: 24
212.114.108.0/24 maxlen: 24
212.114.109.0/24 maxlen: 24
212.114.110.0/24 maxlen: 24
212.114.111.0/24 maxlen: 24
212.114.112.0/24 maxlen: 24
212.114.113.0/24 maxlen: 24
212.114.114.0/24 maxlen: 24
212.114.115.0/24 maxlen: 24
212.114.116.0/24 maxlen: 24
212.114.117.0/24 maxlen: 24
212.114.118.0/24 maxlen: 24
212.114.119.0/24 maxlen: 24
212.114.120.0/24 maxlen: 24
212.114.121.0/24 maxlen: 24
212.114.122.0/24 maxlen: 24
212.114.123.0/24 maxlen: 24
212.114.124.0/24 maxlen: 24
212.114.125.0/24 maxlen: 24
212.114.126.0/24 maxlen: 24
212.114.127.0/24 maxlen: 24
213.136.0.0/19 maxlen: 24
213.136.0.0/24 maxlen: 24
213.136.1.0/24 maxlen: 24
213.136.2.0/24 maxlen: 24
213.136.3.0/24 maxlen: 24
213.136.4.0/24 maxlen: 24
213.136.5.0/24 maxlen: 24
213.136.6.0/24 maxlen: 24
213.136.7.0/24 maxlen: 24
213.136.8.0/24 maxlen: 24
213.136.9.0/24 maxlen: 24
213.136.10.0/24 maxlen: 24
213.136.11.0/24 maxlen: 24
213.136.12.0/24 maxlen: 24
213.136.13.0/24 maxlen: 24
213.136.14.0/24 maxlen: 24
213.136.15.0/24 maxlen: 24
213.136.16.0/24 maxlen: 24
213.136.17.0/24 maxlen: 24
213.136.18.0/24 maxlen: 24
213.136.19.0/24 maxlen: 24
213.136.20.0/24 maxlen: 24
213.136.21.0/24 maxlen: 24
213.136.22.0/24 maxlen: 24
213.136.23.0/24 maxlen: 24
213.136.24.0/24 maxlen: 24
213.136.25.0/24 maxlen: 24
213.136.26.0/24 maxlen: 24
213.136.27.0/24 maxlen: 24
213.136.28.0/24 maxlen: 24
213.136.29.0/24 maxlen: 24
213.136.30.0/24 maxlen: 24
213.136.31.0/24 maxlen: 24
213.154.224.0/19 maxlen: 24
213.154.224.0/24 maxlen: 24
213.154.225.0/24 maxlen: 24
213.154.226.0/24 maxlen: 24
213.154.227.0/24 maxlen: 24
213.154.228.0/24 maxlen: 24
213.154.229.0/24 maxlen: 24
213.154.230.0/24 maxlen: 24
213.154.231.0/24 maxlen: 24
213.154.232.0/24 maxlen: 24
213.154.233.0/24 maxlen: 24
213.154.234.0/24 maxlen: 24
213.154.235.0/24 maxlen: 24
213.154.236.0/24 maxlen: 24
213.154.237.0/24 maxlen: 24
213.154.238.0/24 maxlen: 24
213.154.239.0/24 maxlen: 24
213.154.240.0/24 maxlen: 24
213.154.241.0/24 maxlen: 24
213.154.242.0/24 maxlen: 24
213.154.243.0/24 maxlen: 24
213.154.244.0/24 maxlen: 24
213.154.245.0/24 maxlen: 24
213.154.246.0/24 maxlen: 24
213.154.247.0/24 maxlen: 24
213.154.248.0/24 maxlen: 24
213.154.249.0/24 maxlen: 24
213.154.250.0/24 maxlen: 24
213.154.251.0/24 maxlen: 24
213.154.252.0/24 maxlen: 24
213.154.253.0/24 maxlen: 24
213.154.254.0/24 maxlen: 24
213.154.255.0/24 maxlen: 24
2001:7b8::/29 maxlen: 48
2001:7be::/48 maxlen: 48
2001:7bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f7:12:b4:1a:85:3c:70:63:3c:42:16:a9:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de1481044b5a90b9358c85978b785c84cfae4c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:09:36:72:eb:0e:e0:d4:4f:7b:1f:9a:59:
a3:47:06:73:74:38:ce:f7:2c:36:99:f4:b2:3f:0e:
b3:08:c5:4d:b4:80:d3:dc:29:eb:a5:0c:20:cc:c4:
d1:d2:6c:90:f8:6f:30:69:a2:b9:49:d2:34:02:17:
0e:b0:78:a2:96:27:35:cf:11:1c:37:e7:51:f2:44:
e6:49:b1:d7:1d:46:95:50:2e:75:20:7a:8d:50:e4:
cc:87:67:77:d1:00:cd:ce:a5:3d:34:44:a6:27:d0:
fd:e5:dc:ca:88:1b:46:a7:17:06:f9:c3:c4:8a:14:
ac:79:9e:0d:0b:b1:7b:fa:ab:0e:86:26:cd:e7:f1:
54:a6:38:99:c8:c4:6a:94:76:f6:ae:c7:de:78:7d:
c2:ad:a3:ea:2f:ac:2f:93:f9:37:db:b7:71:23:b8:
b7:82:c0:fd:05:00:e0:3f:22:a7:f5:c8:55:1a:bc:
b3:b5:3c:35:16:ec:43:ea:67:bc:8e:75:de:fb:6b:
fe:b4:6b:e5:bf:8d:ec:7e:53:ef:ed:c8:c2:c5:7b:
c3:ef:8e:ca:dd:4f:91:05:35:72:dc:d1:28:69:c5:
bd:35:8c:1d:fc:c6:92:89:67:a4:03:5f:09:1e:47:
ca:29:4c:e9:67:4d:6e:ca:ae:1b:f9:a1:b7:a8:0a:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:81:04:4B:5A:90:B9:35:8C:85:97:8B:78:5C:84:CF:AE:4C:13
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/3hSBBEtakLk1jIWXi3hchM-uTBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.32.0/19
185.62.16.0/22
193.109.122.0/24
212.72.232.0-212.72.255.255
212.114.96.0/19
213.136.0.0/19
213.154.224.0/19
IPv6:
2001:7b8::/29
Signature Algorithm: sha256WithRSAEncryption
1a:a4:94:05:54:22:59:29:70:65:cc:d8:a0:a7:8c:ae:5f:89:
9d:8d:2a:e3:89:e9:8d:36:e6:7f:0b:b5:a8:6c:7c:cc:79:48:
dc:30:4c:a3:93:02:76:74:e8:cc:bf:e1:3a:ac:91:21:c1:d4:
09:a7:b7:7b:27:90:3a:67:01:33:06:ed:91:72:5b:bd:b8:3e:
30:d1:37:6b:ba:7f:2b:96:97:02:79:9c:d3:80:2d:84:45:21:
53:0d:ff:4a:83:b8:71:83:46:0a:db:97:72:ae:80:c4:7e:bf:
32:47:0d:d5:23:bc:14:9b:fe:28:d8:1f:02:18:1b:9c:c3:75:
aa:65:e4:76:2c:71:38:10:a6:8a:16:09:4c:1f:c6:e3:75:bf:
17:58:58:25:8e:50:d1:44:f2:00:c1:83:42:ae:2c:e8:53:07:
c4:da:9d:51:28:aa:28:3c:95:50:b0:68:7d:e8:d4:5f:86:b9:
e7:dc:af:38:bd:27:7a:94:71:42:9e:da:56:cc:e0:43:c3:97:
9e:20:6c:ee:7b:5a:bc:c8:63:5b:13:2e:a7:60:0a:93:92:c8:
33:6f:48:2f:74:31:44:31:fc:45:57:b2:bd:c6:be:da:af:62:
aa:f3:89:e6:86:02:5a:82:16:05:31:13:f8:5a:2c:7f:4c:dd:
92:81:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:24 2025 by rpki-client