Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GV2Dqq_AaGqxMa9sz-hOd6DLBgw.roa
File: GV2Dqq_AaGqxMa9sz-hOd6DLBgw.roa (raw, json)
Hash identifier: 6zXihLyRJkerPhb218xwrv/CaPtHkYcx6TgOxgmkL10=
Subject key identifier: 19:5D:83:AA:AF:C0:68:6A:B1:31:AF:6C:CF:E8:4E:77:A0:CB:06:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019546A43A96A7D63DB72D7B5E23868A9F25
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GV2Dqq_AaGqxMa9sz-hOd6DLBgw.roa
Signing time: Thu 27 Feb 2025 09:02:02 +0000
ROA not before: Thu 27 Feb 2025 09:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:a4:3a:96:a7:d6:3d:b7:2d:7b:5e:23:86:8a:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 09:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=195d83aaafc0686ab131af6ccfe84e77a0cb060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:69:26:f4:7e:4a:95:97:a5:25:06:08:a5:
26:e3:96:a3:ad:46:c3:78:9d:d3:69:ed:1a:50:6e:
67:71:10:79:27:bc:87:33:f4:5d:c8:15:b6:1c:df:
4d:30:fc:db:95:5b:b0:6f:55:e4:64:fd:4d:89:8c:
22:cb:7e:10:63:31:52:83:47:bf:fb:72:7f:37:4a:
f9:33:b6:12:73:7f:5b:25:11:a3:97:87:6e:99:b7:
37:f7:c6:e6:af:0c:20:d0:5e:e2:1a:96:67:22:c3:
a4:6c:96:dc:39:9c:86:f2:a9:1c:fb:7a:9a:2e:12:
d1:25:a3:9c:11:8b:1f:b7:6d:01:9c:07:48:17:5c:
ba:80:35:48:16:88:33:7a:fd:01:bd:21:55:f9:f2:
a0:e8:ba:f9:de:d0:58:c9:f4:fa:d5:95:6c:0f:c6:
b9:66:75:98:1c:43:b9:37:e1:f9:17:a9:4a:21:81:
84:86:b9:bd:e9:69:60:d1:46:47:45:5c:be:35:29:
8f:95:e4:65:dd:25:70:97:25:e2:22:71:c7:d6:4d:
3f:47:a7:c3:20:d1:dd:4a:e8:0b:2d:37:58:cd:3e:
62:59:11:b7:19:21:33:e3:13:80:29:37:22:33:2a:
82:7c:71:c3:5e:10:fe:22:ba:f2:b8:2d:63:44:a1:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:83:AA:AF:C0:68:6A:B1:31:AF:6C:CF:E8:4E:77:A0:CB:06:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GV2Dqq_AaGqxMa9sz-hOd6DLBgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:5e:91:dd:dc:4a:31:07:f5:2b:bc:3d:30:76:a1:38:fa:e1:
8d:7c:76:44:fb:4a:44:ff:66:87:27:71:94:8e:b7:19:d8:71:
f4:13:42:e3:a1:0d:ad:a2:0d:79:28:89:93:45:79:b7:14:9e:
2f:fc:00:26:c5:57:30:69:da:fe:6a:97:1a:ed:e0:15:9e:6d:
79:2f:b5:a8:85:ab:3c:61:7d:0e:96:5d:fd:6e:62:5d:23:bc:
6b:d7:69:f9:ce:73:98:3c:d0:8c:a9:69:43:54:0f:ee:ae:de:
4a:ce:82:09:c1:35:9f:c0:e6:5f:a1:92:f6:8d:78:f7:a8:f2:
17:d5:c7:bc:28:03:34:82:ee:2e:48:75:b2:5d:cd:19:ab:1e:
13:37:37:60:87:78:59:fa:10:c6:70:ce:01:92:54:41:7c:32:
6b:21:91:22:60:4c:3e:3a:3c:d3:36:3a:2a:f9:c9:0a:44:02:
fc:b9:72:b6:ce:bf:67:fb:2b:19:09:42:cc:2a:ae:82:d3:e6:
f8:63:bc:ed:27:3e:66:b4:3b:e1:59:0f:90:1d:c5:dc:04:f0:
e5:50:02:78:a5:c1:94:3d:8f:bf:bd:bf:aa:ba:83:63:0d:17:
7a:84:2f:02:42:d0:cb:18:b3:07:b1:77:de:49:43:40:a6:a2:
b4:c5:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:17 2025 by rpki-client