Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1PV1cOVIlHElv9_QT3Ka5bZXG7E.roa
File: 1PV1cOVIlHElv9_QT3Ka5bZXG7E.roa (raw, json)
Hash identifier: j1eVOROtsn6NRpO3E2vdBj8OTKqTry5i7ZL4X8prmpU=
Subject key identifier: D4:F5:75:70:E5:48:94:71:25:BF:DF:D0:4F:72:9A:E5:B6:57:1B:B1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193C39B6A48CB8261EAF0DD147BD7B0E2F0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1PV1cOVIlHElv9_QT3Ka5bZXG7E.roa
Signing time: Sat 14 Dec 2024 05:19:22 +0000
ROA not before: Sat 14 Dec 2024 05:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.249.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c3:9b:6a:48:cb:82:61:ea:f0:dd:14:7b:d7:b0:e2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 14 05:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4f57570e548947125bfdfd04f729ae5b6571bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:9b:f7:5d:7d:15:ca:65:54:ca:ee:79:e5:
12:c6:0d:2b:13:be:79:37:1e:4d:68:0c:ab:bf:e7:
67:46:00:5e:63:aa:a4:b2:92:27:e8:75:51:f6:58:
70:7b:e5:88:14:9c:93:bc:5e:a0:7b:97:8c:7d:3c:
8d:fe:fb:06:c3:7e:aa:94:34:7f:ab:24:17:86:1e:
d1:04:41:c5:7d:95:f6:e0:70:4a:48:ff:39:12:a2:
d2:2a:1e:17:83:8f:04:17:bd:39:6e:d6:1d:63:e0:
06:06:5b:d8:2a:69:36:bf:20:03:86:53:81:bb:98:
94:d8:fd:09:38:24:b7:ae:f4:04:aa:62:89:0e:88:
e2:53:6a:a4:f0:25:1d:40:b5:96:b2:06:2d:de:9e:
67:b3:94:b7:83:e5:7e:18:e9:91:22:80:14:3e:9c:
c6:3f:8e:ad:6a:c0:90:34:69:1e:49:c3:70:1d:7d:
0e:06:e3:f7:7c:11:2b:c3:7a:ec:89:a8:6d:e8:60:
b6:50:0f:58:eb:d0:5f:d3:0f:98:54:07:e8:7d:c7:
9f:10:5d:bc:f2:15:31:09:66:f7:bc:7f:ed:2a:3b:
e5:8e:c9:34:34:7c:c3:96:e7:0c:a6:15:07:41:61:
90:30:87:aa:91:19:b7:bc:57:0c:5a:cd:00:d3:60:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:75:70:E5:48:94:71:25:BF:DF:D0:4F:72:9A:E5:B6:57:1B:B1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1PV1cOVIlHElv9_QT3Ka5bZXG7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/23
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:c0:b7:7e:87:a6:cf:5b:f0:ca:4a:68:7d:38:d4:a8:25:1a:
9b:77:d0:3d:f7:db:fd:31:48:18:ba:2e:8d:af:a8:5d:6f:0f:
de:8d:c2:71:75:b9:78:67:b1:3f:2a:db:99:d7:f4:2e:7e:81:
51:79:1a:5e:78:d7:ff:f5:ea:11:73:09:9c:0d:13:6d:3d:58:
03:26:d6:99:69:50:8e:e3:22:59:ed:07:f4:50:97:6b:07:6a:
87:4c:01:fd:c6:23:31:5f:3f:28:af:f6:c7:b2:76:dd:02:a9:
4c:7f:08:89:5a:1d:b1:a1:83:d6:63:0c:1b:60:6c:0a:d6:61:
63:91:9f:6b:df:2f:81:d4:5c:8d:fe:f9:77:b6:5e:20:4d:ee:
93:ad:df:35:09:83:ea:bf:a7:d8:bb:40:e0:8a:62:e9:c6:98:
88:a4:68:07:9f:c7:ac:7a:10:82:45:e5:03:c7:52:19:60:37:
c5:d7:83:8c:0a:32:58:bf:97:f3:03:59:fa:82:74:bc:4e:06:
4f:2f:ec:68:0c:9f:a1:e6:cb:45:56:32:78:eb:05:09:e5:7e:
71:1a:04:ab:92:b7:e7:b0:f4:a6:bd:20:d6:59:17:85:de:66:
dd:36:6e:d2:bb:9d:ca:30:9f:01:5c:c1:47:63:bb:a1:b8:0d:
39:20:ef:fb
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAZPDm2pIy4Jh6vDdFHvXsOLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMjE0MDUxOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGY1NzU3MGU1NDg5NDcxMjViZmRmZDA0ZjcyOWFlNWI2NTcxYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu2b9119FcplVMrueeUSxg0rE755
Nx5NaAyrv+dnRgBeY6qkspIn6HVR9lhwe+WIFJyTvF6ge5eMfTyN/vsGw36qlDR/
qyQXhh7RBEHFfZX24HBKSP85EqLSKh4Xg48EF705btYdY+AGBlvYKmk2vyADhlOB
u5iU2P0JOCS3rvQEqmKJDojiU2qk8CUdQLWWsgYt3p5ns5S3g+V+GOmRIoAUPpzG
P46tasCQNGkeScNwHX0OBuP3fBErw3rsiaht6GC2UA9Y69Bf0w+YVAfofcefEF28
8hUxCWb3vH/tKjvljsk0NHzDlucMphUHQWGQMIeqkRm3vFcMWs0A02A+FwIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFNT1dXDlSJRxJb/f0E9ymuW2VxuxMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMVBWMWNPVklsSEVsdjlfUVQzS2E1YlpYRzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgccEAgABMIHAAwQF
BVOAAwQCBa+AAwQABa+FMAwDBAEFr9oDBAAFr9wwDAMEAAWv4QMEAAWv6AMEAAWv
6zAMAwQEBa/wAwQABa/0AwQBBa/4MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQBuS+MAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAE
AgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8Aw
DQYJKoZIhvcNAQELBQADggEBADzAt36Hps9b8MpKaH041KglGpt30D332/0xSBi6
Lo2vqF1vD96NwnF1uXhnsT8q25nX9C5+gVF5Gl541//16hFzCZwNE209WAMm1plp
UI7jIlntB/RQl2sHaodMAf3GIzFfPyiv9seydt0CqUx/CIlaHbGhg9ZjDBtgbArW
YWORn2vfL4HUXI3++Xe2XiBN7pOt3zUJg+q/p9i7QOCKYunGmIikaAefx6x6EIJF
5QPHUhlgN8XXg4wKMli/l/MDWfqCdLxOBk8v7GgMn6Hmy0VWMnjrBQnlfnEaBKuS
t+ew9Ka9INZZF4XeZt02btK7ncownwFcwUdju6G4DTkg7/s=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:03 2025 by rpki-client