Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZuBhUitefUUP0SJhSRXAPeAwxOw.roa
File: ZuBhUitefUUP0SJhSRXAPeAwxOw.roa (raw, json)
Hash identifier: qEVenuiW+iJsfYBMgeJV9Cg8DHTHEflI/EQU5CS9mIQ=
Subject key identifier: 66:E0:61:52:2B:5E:7D:45:0F:D1:22:61:49:15:C0:3D:E0:30:C4:EC
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019426D8AC63C23CFB3A640A6F167707EBFA
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZuBhUitefUUP0SJhSRXAPeAwxOw.roa
Signing time: Thu 02 Jan 2025 11:48:41 +0000
ROA not before: Thu 02 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ac:63:c2:3c:fb:3a:64:0a:6f:16:77:07:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 2 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e061522b5e7d450fd122614915c03de030c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:68:31:6d:3f:9a:38:85:fc:be:16:75:9f:
bc:88:73:dd:c1:48:be:54:67:d5:25:01:fa:2e:35:
d5:e9:e9:e4:8c:e8:93:eb:4b:c0:3e:c9:e5:ec:fa:
4d:e7:d1:29:3c:11:38:e4:5a:0d:57:e1:4f:84:c7:
70:52:d4:c4:f3:5d:51:a6:e0:09:70:9d:2b:8e:79:
c6:94:8c:3a:04:92:f1:0c:fe:4e:e5:54:20:85:0a:
40:c7:86:b7:59:f5:3d:45:6b:5f:26:99:b2:b2:a8:
a3:69:3a:46:13:f8:28:a9:ce:95:8c:9d:aa:39:e2:
75:a9:94:9e:e1:5e:70:fb:b6:f8:b1:ee:49:9e:78:
a7:43:fd:66:ae:66:00:81:d7:92:f4:aa:37:3d:fd:
85:84:c5:5b:48:6d:72:af:ac:d7:34:57:f3:4e:23:
a7:9b:46:93:33:48:19:3a:61:e0:14:7c:48:b8:77:
4f:b5:1c:9b:13:1e:a5:de:4b:bf:ed:d9:12:9a:d3:
95:9d:43:8e:b6:b6:05:a5:d4:f4:31:02:d9:e7:41:
a5:3f:79:f9:87:e3:ec:5b:1f:55:e9:09:84:fd:d6:
f3:a0:36:2f:dc:fb:0d:52:8b:31:87:bb:02:51:f5:
3c:c2:d0:e6:8a:5b:3d:3a:91:17:f1:23:4a:ae:ab:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:61:52:2B:5E:7D:45:0F:D1:22:61:49:15:C0:3D:E0:30:C4:EC
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/ZuBhUitefUUP0SJhSRXAPeAwxOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
20:b1:a2:d6:06:2a:fb:da:3c:7c:76:1b:41:59:28:f2:ba:55:
87:39:4c:8e:5e:8c:83:16:a1:6c:14:e0:ab:2d:d8:99:44:66:
d2:d2:5b:99:16:13:d0:5f:98:8d:a8:89:06:2f:7a:13:3d:fb:
33:cf:60:f2:41:e7:d8:8a:02:68:27:93:d2:e9:ed:c2:5a:91:
8a:2e:63:44:9b:2c:4f:6a:37:db:ed:86:02:89:62:bd:6c:ce:
bc:0c:a9:ef:8c:90:fd:d7:3a:3b:a9:51:06:df:5a:c9:5a:00:
21:ad:86:ca:31:89:0d:1f:14:35:9b:07:b7:53:9b:e2:a9:f5:
54:38:4c:dc:29:f4:ab:cc:0e:c5:fa:a6:06:ae:5a:b6:9a:e6:
ea:4b:97:3d:8a:b9:9f:3f:45:02:4b:e5:1d:f2:24:0e:d2:09:
36:68:ae:bb:de:9e:1b:e6:64:12:91:af:b0:ca:c7:11:e9:96:
a2:65:89:cd:e2:99:b0:cb:56:05:36:b2:94:23:62:b8:ea:b5:
d6:3b:67:2d:09:97:6c:d7:a7:4c:70:9d:fa:4a:fe:cf:29:d7:
33:09:fd:b8:89:75:09:7e:70:ad:fe:ad:34:db:59:62:7c:5b:
f5:73:93:17:19:7d:5c:f3:f8:02:eb:6f:c0:4e:c2:ca:34:a2:
60:da:0d:b8
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZQm2Kxjwjz7OmQKbxZ3B+v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjUwMTAyMTE0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmUwNjE1MjJiNWU3ZDQ1MGZkMTIyNjE0OTE1YzAzZGUwMzBjNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFtoMW0/mjiF/L4WdZ+8iHPdwUi+
VGfVJQH6LjXV6enkjOiT60vAPsnl7PpN59EpPBE45FoNV+FPhMdwUtTE811RpuAJ
cJ0rjnnGlIw6BJLxDP5O5VQghQpAx4a3WfU9RWtfJpmysqijaTpGE/goqc6VjJ2q
OeJ1qZSe4V5w+7b4se5JnninQ/1mrmYAgdeS9Ko3Pf2FhMVbSG1yr6zXNFfzTiOn
m0aTM0gZOmHgFHxIuHdPtRybEx6l3ku/7dkSmtOVnUOOtrYFpdT0MQLZ50GlP3n5
h+PsWx9V6QmE/dbzoDYv3PsNUosxh7sCUfU8wtDmils9OpEX8SNKrqsqiQIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFGbgYVIrXn1FD9EiYUkVwD3gMMTsMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvWnVCaFVpdGVmVVVQMFNKaFNSWEFQZUF3eE93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wZQQCAAEwXzALAwMBXyYD
BAFfJiQwDAMEAF8mJwMEA18mQDAMAwQAXyZJAwQEXyaAMAwDBAVfJqADBABfJs4w
DAMEBF8m0AMEAF8m2jAMAwQCXybcAwQDXybwAwQCXyb8AwQCuRSgMBQEAgACMA4D
BQAqAFLgAwUDKgG9gDANBgkqhkiG9w0BAQsFAAOCAQEAILGi1gYq+9o8fHYbQVko
8rpVhzlMjl6MgxahbBTgqy3YmURm0tJbmRYT0F+YjaiJBi96Ez37M89g8kHn2IoC
aCeT0untwlqRii5jRJssT2o32+2GAolivWzOvAyp74yQ/dc6O6lRBt9ayVoAIa2G
yjGJDR8UNZsHt1Ob4qn1VDhM3Cn0q8wOxfqmBq5atprm6kuXPYq5nz9FAkvlHfIk
DtIJNmiuu96eG+ZkEpGvsMrHEemWomWJzeKZsMtWBTaylCNiuOq11jtnLQmXbNen
THCd+kr+zynXMwn9uIl1CX5wrf6tNNtZYnxb9XOTFxl9XPP4AutvwE7CyjSiYNoN
uA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:26:56 2025 by rpki-client