Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P_Ieg4518Hj2XPe-1P_Sx3_f4dk.roa
File: P_Ieg4518Hj2XPe-1P_Sx3_f4dk.roa (raw, json)
Hash identifier: Vqx91GIA9Y0HAqE+B7O9MxGmPKkiLhBdbe0eIuwuYB0=
Subject key identifier: 3F:F2:1E:83:8E:75:F0:78:F6:5C:F7:BE:D4:FF:D2:C7:7F:DF:E1:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019548AF4311DD12E0354E869428A61F94A8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P_Ieg4518Hj2XPe-1P_Sx3_f4dk.roa
Signing time: Thu 27 Feb 2025 18:33:20 +0000
ROA not before: Thu 27 Feb 2025 18:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.20.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.37.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
89.144.41.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:af:43:11:dd:12:e0:35:4e:86:94:28:a6:1f:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 18:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff21e838e75f078f65cf7bed4ffd2c77fdfe1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:52:33:78:19:02:1e:4c:4e:d1:5e:c2:2b:
2b:4a:4c:9a:63:46:db:66:ad:28:8c:28:b4:88:43:
60:f5:22:63:14:de:9a:64:2f:90:92:80:17:3e:c8:
aa:1f:14:9c:ca:77:58:52:f7:fc:8e:68:08:2c:5f:
35:65:6d:db:7b:a6:6f:4b:35:b8:ba:4d:aa:6c:2c:
e3:0f:a8:bf:55:0a:ef:1c:59:c2:8e:61:ca:50:d6:
bc:ab:78:55:c1:fb:18:b5:b9:03:63:3c:80:b8:e7:
95:4d:4f:3c:b5:88:1d:ff:22:3a:57:23:7b:6e:59:
9e:39:57:1e:d6:6e:45:bf:1c:0d:ca:a8:e6:ea:82:
d8:56:f7:da:4f:81:c0:39:01:f7:2b:18:ec:dc:f2:
7a:f4:78:2f:1f:ac:e7:0b:c0:04:f9:11:eb:1b:b8:
c3:95:76:20:d9:b1:77:62:d7:0f:b5:cd:30:77:a6:
73:25:99:35:e9:e6:ef:3a:fd:4a:70:04:12:6d:86:
9c:41:b0:4a:36:7d:7f:06:a0:82:44:46:8a:5a:f4:
f0:d3:73:7d:96:c6:3a:08:9c:cc:64:00:01:10:94:
be:74:e3:f1:0c:63:e3:4c:07:80:93:e1:3f:80:f9:
7a:e8:3b:54:68:ce:13:c1:e9:49:6f:29:35:78:5e:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:1E:83:8E:75:F0:78:F6:5C:F7:BE:D4:FF:D2:C7:7F:DF:E1:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P_Ieg4518Hj2XPe-1P_Sx3_f4dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:aa:fb:78:09:5f:ad:d1:f5:02:06:0f:12:31:1d:d6:21:38:
e4:3d:cd:3e:15:ab:98:74:f0:7e:9c:39:13:91:f4:c1:d6:41:
f6:cd:03:9d:3a:72:84:b6:f9:de:27:d0:70:dc:e9:6b:4b:09:
9f:64:17:d4:26:c1:84:ce:19:1a:6f:8e:8f:d0:b9:4e:f6:d6:
f7:89:fb:59:7c:a1:ba:05:80:39:fe:a8:46:12:e4:36:24:58:
66:64:4a:2f:a5:30:41:8a:4e:22:4f:88:42:1b:3c:51:59:06:
d5:ef:a1:f2:2b:92:56:a0:dc:bb:a6:97:96:87:ea:95:d1:84:
0c:67:3b:f6:46:d3:0d:ed:70:af:ca:80:dd:c3:7d:bb:01:55:
fa:b1:46:55:7c:bd:89:4e:3e:98:b3:c4:2b:e9:fa:56:16:f8:
85:eb:11:c8:8f:cb:08:b3:3f:7d:e7:76:55:b7:b5:52:88:2c:
9c:bd:ed:43:1b:43:16:eb:d6:98:51:dc:96:71:4b:02:5e:1f:
3e:ea:3f:27:db:9b:ab:76:74:dd:fa:e4:f8:fd:b8:e3:3d:bf:
22:dc:ca:d5:2f:e6:3a:3e:70:2a:fb:7a:00:bb:c0:a1:64:2f:
ae:2c:47:3c:00:c2:2e:72:20:67:24:ba:6e:28:4e:9b:c0:59:
bf:3c:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:23 2025 by rpki-client