Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3W53y00KeiKrhCklgsemdLgntBI.roa
File: 3W53y00KeiKrhCklgsemdLgntBI.roa (raw, json)
Hash identifier: 4NZMWHFbE7Bq5p4/Ux5O+dj/qOTfq+oJbaqEtuHVJDU=
Subject key identifier: DD:6E:77:CB:4D:0A:7A:22:AB:84:29:25:82:C7:A6:74:B8:27:B4:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01956F0037EBA7C8C0D99E16C60F0B76A756
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3W53y00KeiKrhCklgsemdLgntBI.roa
Signing time: Fri 07 Mar 2025 05:07:20 +0000
ROA not before: Fri 07 Mar 2025 05:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:00:37:eb:a7:c8:c0:d9:9e:16:c6:0f:0b:76:a7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 7 05:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd6e77cb4d0a7a22ab84292582c7a674b827b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:d0:1c:7c:30:ae:66:6e:53:aa:70:ce:08:
7c:92:08:ae:76:e4:64:8c:d1:dc:3d:9d:c9:90:42:
55:dc:42:74:55:61:6d:c1:9d:4a:8b:49:5e:06:26:
22:e5:24:1b:7d:d7:37:9a:13:9b:ec:ce:db:68:2e:
b3:37:3a:db:04:19:c3:f0:b1:50:d1:c4:2d:59:27:
a0:93:e9:9a:ab:6a:02:51:d8:a5:1f:70:de:d8:63:
3b:d6:d4:49:d0:0e:e2:f4:18:24:17:0c:2f:4f:d7:
8f:ef:21:32:c5:57:3b:8b:b4:24:db:64:4e:2e:e4:
06:79:95:b9:d1:3f:d2:42:ef:8f:d1:fb:63:a0:59:
b0:35:34:b7:eb:b6:52:0b:b5:3f:d8:20:76:9e:2e:
02:4e:29:f8:45:fe:98:46:02:69:2e:8b:5b:6e:4c:
a2:ca:c4:20:3c:3b:06:12:50:a0:0a:cb:98:84:68:
88:f5:6f:47:82:8c:94:83:f7:2c:60:6d:2c:97:9c:
ae:cd:67:88:2f:9e:64:30:80:19:1f:07:84:a8:22:
1d:b8:08:10:13:b6:91:30:31:87:33:2c:c6:ce:c2:
b2:cf:6d:f4:a7:c0:4c:0a:e4:6f:fa:b3:9a:0f:cc:
a8:e8:68:4a:8d:b4:a6:87:69:87:15:8d:67:47:f8:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:77:CB:4D:0A:7A:22:AB:84:29:25:82:C7:A6:74:B8:27:B4:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3W53y00KeiKrhCklgsemdLgntBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:f0:21:96:4b:72:a7:f0:41:d8:c2:92:1a:7f:e9:20:fe:eb:
16:78:49:9d:94:b4:ac:76:d9:88:11:1f:fa:ab:ed:39:55:88:
1e:2b:68:1e:25:6a:df:36:aa:f7:8c:e4:f4:39:8d:5a:c8:74:
29:26:90:c3:0a:34:05:7f:27:9f:d1:9b:d3:03:a7:95:48:25:
f5:a0:3b:c7:46:d9:12:7f:ea:7b:81:e3:e5:e2:e2:7b:bd:50:
40:47:21:84:5b:11:46:ac:34:57:9f:26:67:40:be:19:79:ed:
df:09:2b:c7:4e:83:c8:63:19:2f:ad:69:1f:8a:c5:7e:3d:c3:
07:04:be:1b:78:ee:a7:76:ec:00:17:bb:bd:6b:cf:c8:51:c2:
aa:3e:b4:15:73:21:e0:c7:db:41:ab:92:a8:b5:9b:7b:8b:11:
70:71:c7:8c:16:bc:ee:8b:ef:8d:18:6b:ac:57:df:f2:bd:d3:
8c:15:ff:7d:ab:93:a9:ee:09:d5:9c:fa:84:d2:c4:49:59:34:
9b:c2:2a:ef:27:fa:f5:3d:14:b3:94:7b:aa:f4:e1:95:e3:da:
25:2b:c2:8a:d7:61:80:0e:d1:f7:6d:86:1a:94:82:f4:05:24:
10:72:d6:2f:5d:5e:cb:d2:32:6d:81:c9:68:f1:b5:32:51:31:
3e:06:98:ab
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAZVvADfrp8jA2Z4Wxg8LdqdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzA3MDUwNzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDZlNzdjYjRkMGE3YTIyYWI4NDI5MjU4MmM3YTY3NGI4MjdiNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukDQHHwwrmZuU6pwzgh8kgiuduRk
jNHcPZ3JkEJV3EJ0VWFtwZ1Ki0leBiYi5SQbfdc3mhOb7M7baC6zNzrbBBnD8LFQ
0cQtWSegk+maq2oCUdilH3De2GM71tRJ0A7i9BgkFwwvT9eP7yEyxVc7i7Qk22RO
LuQGeZW50T/SQu+P0ftjoFmwNTS367ZSC7U/2CB2ni4CTin4Rf6YRgJpLotbbkyi
ysQgPDsGElCgCsuYhGiI9W9HgoyUg/csYG0sl5yuzWeIL55kMIAZHweEqCIduAgQ
E7aRMDGHMyzGzsKyz230p8BMCuRv+rOaD8yo6GhKjbSmh2mHFY1nR/gZNwIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFN1ud8tNCnoiq4QpJYLHpnS4J7QSMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvM1c1M3kwMEtlaUtyaENrbGdzZW1kTGdudEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBywQCAAEwgcQD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48DBAEFr9owDAMEAAWv4QMEAAWv6AMEAAWv
6wMEAAWv7jAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQBuS+MAwQAuS+PAwQAuXlHAwQAwRz7AwQBw24OAwQE
2UWgMDAEAgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMF
AyoCL8AwDQYJKoZIhvcNAQELBQADggEBADjwIZZLcqfwQdjCkhp/6SD+6xZ4SZ2U
tKx22YgRH/qr7TlViB4raB4lat82qveM5PQ5jVrIdCkmkMMKNAV/J5/Rm9MDp5VI
JfWgO8dG2RJ/6nuB4+Xi4nu9UEBHIYRbEUasNFefJmdAvhl57d8JK8dOg8hjGS+t
aR+KxX49wwcEvht47qd27AAXu71rz8hRwqo+tBVzIeDH20Grkqi1m3uLEXBxx4wW
vO6L740Ya6xX3/K904wV/32rk6nuCdWc+oTSxElZNJvCKu8n+vU9FLOUe6r04ZXj
2iUrworXYYAO0fdthhqUgvQFJBBy1i9dXsvSMm2ByWjxtTJRMT4GmKs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:53 2025 by rpki-client