Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V_atB3LxTcyw9j2xF4pGMw-b12Q.roa
File: V_atB3LxTcyw9j2xF4pGMw-b12Q.roa (raw, json)
Hash identifier: ZFonNd8kNGBRdxdLZ8Qvzjv/3/sR1iECMXKhlpcO3AY=
Subject key identifier: 57:F6:AD:07:72:F1:4D:CC:B0:F6:3D:B1:17:8A:46:33:0F:9B:D7:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019560ED9E30F988088D05928A813FEAEFE5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V_atB3LxTcyw9j2xF4pGMw-b12Q.roa
Signing time: Tue 04 Mar 2025 11:32:20 +0000
ROA not before: Tue 04 Mar 2025 11:32:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.41.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:ed:9e:30:f9:88:08:8d:05:92:8a:81:3f:ea:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 4 11:32:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f6ad0772f14dccb0f63db1178a46330f9bd764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:76:25:f0:35:50:8d:51:25:98:62:3c:46:
5e:24:b9:63:0f:35:f4:a5:a5:6e:fe:c5:13:84:cf:
e2:c3:7b:67:d0:50:e7:90:d0:50:0f:74:8a:30:df:
85:ba:7c:df:38:1e:de:46:14:f0:35:7f:88:9f:c3:
7c:fb:4f:41:8c:74:70:b2:fb:63:dd:00:bf:ea:fd:
e2:be:f5:ff:da:44:48:44:b2:85:2b:22:a4:ba:d7:
87:05:a7:f7:44:8c:98:32:03:0e:68:1e:9c:ba:e4:
4c:be:5d:ba:4c:94:28:af:ad:2d:40:a7:34:e5:89:
eb:3f:4e:9d:d1:6d:86:3b:51:fb:f7:d3:79:3a:20:
53:29:40:0a:78:80:e3:ae:5b:a9:4d:46:3a:0d:df:
fa:3a:43:b1:5f:94:da:fb:de:bc:98:08:69:f4:dc:
31:4a:22:03:b5:3e:31:c4:fb:b2:38:a5:48:35:fb:
29:3d:12:2a:ca:fa:62:82:b1:7e:f0:8d:4a:b3:bd:
46:7f:bd:64:c2:60:26:7e:84:7b:fa:04:82:46:f5:
41:d7:c8:e2:17:fb:44:b2:ed:e9:ff:a1:6f:73:44:
cb:8f:15:d5:4f:1e:2b:5d:3e:99:23:40:95:f3:4c:
18:9d:fb:dd:68:a7:c6:7a:6b:84:06:02:7d:9e:20:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:AD:07:72:F1:4D:CC:B0:F6:3D:B1:17:8A:46:33:0F:9B:D7:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V_atB3LxTcyw9j2xF4pGMw-b12Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e8:b4:b2:f9:44:e5:b4:bb:85:a8:be:95:89:7e:a2:4b:79:2a:
54:e2:f6:0c:e0:a0:64:ea:35:7e:aa:f7:41:9f:4e:07:b7:ef:
4d:ac:e7:19:93:d5:3f:6a:e6:3b:fd:f8:c0:35:d9:0c:fa:c2:
c7:f4:4d:63:17:6a:59:c8:52:97:46:92:8b:f8:28:87:e9:f4:
4e:a8:fb:3e:5e:25:3a:c8:43:19:4d:a2:c9:55:87:b4:74:12:
2b:52:6b:e4:b9:41:7b:f9:2f:12:7f:7d:99:8d:4d:dd:1e:93:
14:bb:5d:6e:c9:2e:d5:62:1c:68:19:6c:57:a5:6a:e7:29:b5:
91:3e:34:45:9b:35:70:49:b5:93:8e:dd:cb:08:63:6a:47:d1:
d3:c2:f4:a6:c0:b8:e7:fc:b5:9b:14:94:83:ff:f2:1d:85:15:
5e:3e:43:b1:96:8d:88:52:20:ea:3c:3b:da:34:9a:d5:0c:8f:
49:6f:55:78:fd:e1:3c:ae:98:d2:31:de:ca:35:2a:06:27:39:
f0:81:7a:4a:5b:ed:39:4f:8e:e1:92:46:e0:9a:b8:a4:81:58:
9c:83:2b:af:55:31:27:1c:27:e6:99:92:f3:e1:b7:59:ec:74:
4f:e2:7a:38:84:f8:de:6a:bd:5a:2c:e0:67:23:f7:76:0a:e7:
52:9a:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:30 2025 by rpki-client