Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/R6yATBC1h2EwfcIFc5v1iDgvxFM.roa
File: R6yATBC1h2EwfcIFc5v1iDgvxFM.roa (raw, json)
Hash identifier: yD0WGrDN2aIkfiLMbi9+H79aakfF+k15A8P07RP+7CI=
Subject key identifier: 47:AC:80:4C:10:B5:87:61:30:7D:C2:05:73:9B:F5:88:38:2F:C4:53
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0194667EC4C743B5ABD1C7F2C94186271966
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/R6yATBC1h2EwfcIFc5v1iDgvxFM.roa
Signing time: Tue 14 Jan 2025 20:26:11 +0000
ROA not before: Tue 14 Jan 2025 20:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:66:7e:c4:c7:43:b5:ab:d1:c7:f2:c9:41:86:27:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jan 14 20:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ac804c10b58761307dc205739bf588382fc453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:12:3f:5f:c5:e7:58:04:df:b3:af:ed:1c:
58:aa:ca:a6:86:22:ac:29:ba:79:25:f5:e7:5f:58:
b4:21:1a:bb:9d:4a:f6:92:0a:30:fe:cf:c7:49:37:
ee:08:0f:5a:e9:17:b0:e2:c0:e3:23:2e:da:12:b6:
4e:67:57:a2:f6:ef:ba:8a:e3:01:0a:26:62:c4:fb:
d4:5e:09:d7:c9:56:c7:4e:6a:cc:4d:97:ef:90:40:
f4:2a:4c:d9:bc:1d:b5:34:41:f1:10:9a:52:c4:59:
c7:90:a7:69:e0:da:8d:3b:8b:7f:bc:fe:e7:47:c5:
51:a2:23:39:50:8f:da:2b:d9:55:a3:bb:93:91:31:
32:41:7b:f3:25:4a:f1:bd:0a:39:c3:cf:9d:07:53:
e4:71:e5:ac:bc:be:e8:56:21:68:43:18:35:b5:c2:
22:97:05:a2:30:f8:7c:6a:3c:30:75:73:76:1e:2a:
44:bc:02:17:23:df:33:04:5c:22:41:c1:ff:ec:c1:
6e:e5:69:32:60:46:64:0e:49:3d:4f:ce:2d:eb:b2:
3f:fa:5a:e4:34:fc:7c:6a:3e:7d:09:83:7c:2a:07:
cc:f5:c0:db:79:7d:74:c3:3f:82:ce:2c:d6:75:3b:
6b:88:4e:b2:9b:6a:e7:3b:ef:f8:3e:03:e0:45:a8:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:80:4C:10:B5:87:61:30:7D:C2:05:73:9B:F5:88:38:2F:C4:53
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/R6yATBC1h2EwfcIFc5v1iDgvxFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0-86.48.197.255
86.48.208.0-86.48.212.255
86.48.214.0-86.48.225.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:62:4a:3f:ec:88:e0:5f:83:bc:26:d4:01:64:f3:13:32:c7:
1e:a8:24:44:2d:14:95:ae:71:7e:38:32:ff:e4:1b:3c:fd:15:
e4:ff:9e:26:4f:19:c8:e0:c0:a2:ad:1a:12:31:e4:88:85:e3:
f1:58:d9:53:9e:e6:76:db:5a:c0:e3:45:90:a1:3b:dd:cf:fe:
32:0b:2b:85:76:13:ac:5a:be:33:a8:bd:b9:23:96:82:c1:66:
e9:17:4e:8f:a2:62:76:68:35:83:47:f4:07:77:0f:95:7c:5e:
12:48:a2:91:97:af:8f:be:91:19:6c:88:4d:a3:5b:5c:0f:ba:
e1:a9:a4:dc:10:65:2f:f7:58:29:36:11:8b:1c:9b:7a:ff:33:
17:13:eb:c6:8d:e5:73:0a:73:3c:cd:2e:ad:b9:3d:31:99:36:
8f:23:94:a0:fb:35:bb:d5:0d:46:59:44:07:51:d8:8e:c5:a9:
66:00:2a:0a:76:5c:9f:2a:db:0a:e1:da:8f:52:f2:b1:7e:17:
50:a6:e5:63:c1:9b:81:73:1b:84:fe:41:0d:8b:ef:e1:fa:9e:
80:34:36:cd:1b:89:43:33:72:5d:3c:18:41:b6:a3:7e:2b:7f:
f5:2c:d5:66:94:88:a4:28:2d:6d:00:fe:e2:4a:b4:21:74:b8:
b7:f4:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:01:48 2025 by rpki-client