Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hJXFyQI0vRdqQJDXLfSYNYSnSTo.roa
File: hJXFyQI0vRdqQJDXLfSYNYSnSTo.roa (raw, json)
Hash identifier: GCS0tdSBWLH2zpjfM3SJMAMnOsV/lxfhh6ADg6zfNCQ=
Subject key identifier: 84:95:C5:C9:02:34:BD:17:6A:40:90:D7:2D:F4:98:35:84:A7:49:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193F91BBDC93BE81F8B56EBD874C00DAAF5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hJXFyQI0vRdqQJDXLfSYNYSnSTo.roa
Signing time: Tue 24 Dec 2024 14:39:25 +0000
ROA not before: Tue 24 Dec 2024 14:39:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:1b:bd:c9:3b:e8:1f:8b:56:eb:d8:74:c0:0d:aa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 24 14:39:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8495c5c90234bd176a4090d72df4983584a7493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:76:e7:31:99:ed:8d:24:ba:68:54:5a:e6:
a3:32:06:e5:c9:cb:5c:d3:a2:d9:a2:f6:7f:b2:2b:
74:48:f0:f5:99:50:08:d1:28:d1:cb:cf:25:c8:89:
c6:a4:d2:a3:3f:00:59:b8:5c:7b:12:8b:28:c1:9e:
fd:e8:bd:86:db:25:7d:15:77:3f:53:52:87:c7:c1:
de:5e:83:9d:76:3c:f0:13:1d:56:0c:be:f4:e1:fd:
27:0c:c9:39:c6:d1:60:68:44:90:c8:fe:30:db:73:
80:e2:25:24:86:4b:61:aa:8e:a0:69:8d:4e:6f:07:
a5:91:7d:ce:09:b0:6e:ad:88:0e:87:55:40:9e:25:
f1:5b:ab:3b:2d:97:61:07:11:31:05:d2:18:04:10:
b4:19:df:98:83:f5:05:09:9a:eb:7c:2e:ca:c3:a2:
77:39:42:f4:a7:aa:17:97:64:5d:50:05:f8:e7:f9:
4e:0b:81:95:33:77:f3:25:22:00:d2:d6:ed:78:22:
0b:c3:65:3e:28:67:e9:99:d3:2c:e5:ab:59:e5:db:
2a:67:d4:8a:9b:e5:3e:6c:5e:be:d1:f2:2c:d4:93:
79:ba:31:c7:37:2b:34:42:11:92:22:db:b2:e4:90:
9c:57:83:c7:9a:06:96:4a:4c:e5:09:e6:a5:29:0b:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:C5:C9:02:34:BD:17:6A:40:90:D7:2D:F4:98:35:84:A7:49:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hJXFyQI0vRdqQJDXLfSYNYSnSTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
76:d3:2a:60:ab:0c:49:3e:78:cd:61:ba:4b:46:6b:9b:8f:6a:
df:34:eb:98:a0:f9:b7:36:43:f5:11:08:3c:8d:7d:98:55:b5:
b3:7a:7a:30:a2:1e:e0:18:c8:d7:d5:97:76:2a:e9:0f:95:13:
3c:5e:4a:c0:7a:ed:aa:10:23:7d:bb:1c:21:88:77:3b:4e:1d:
da:8a:56:7a:59:1a:86:06:05:60:27:c5:42:57:58:9f:c2:62:
60:84:4c:be:94:92:d8:ce:81:1b:2a:a8:ce:93:10:85:63:7c:
27:46:c2:06:38:19:0d:56:31:1b:10:bd:2d:03:80:58:62:0e:
8f:54:ed:12:75:f1:da:9a:9f:f0:2d:6c:ce:13:60:f0:3c:b8:
4e:4d:42:9e:ce:85:9f:ba:d6:cc:0b:f4:38:89:7f:05:15:14:
c3:85:c6:95:3b:17:19:d5:f0:ae:45:de:bc:54:45:3e:d8:41:
da:8e:da:e3:41:be:33:1a:92:c0:3a:fb:29:fa:80:7a:e0:c9:
1f:5b:da:61:05:55:8b:fc:9e:78:63:d5:d4:62:3b:93:16:08:
20:62:3d:ec:4e:99:c6:8c:0d:05:e0:9e:e1:e1:46:7f:52:a9:
48:55:7b:c6:01:da:7f:87:50:dc:ac:57:b2:d7:76:8a:24:44:
19:26:01:f2
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgISAZP5G73JO+gfi1br2HTADar1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMjI0MTQzOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDk1YzVjOTAyMzRiZDE3NmE0MDkwZDcyZGY0OTgzNTg0YTc0OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw125zGZ7Y0kumhUWuajMgblyctc
06LZovZ/sit0SPD1mVAI0SjRy88lyInGpNKjPwBZuFx7EosowZ796L2G2yV9FXc/
U1KHx8HeXoOddjzwEx1WDL704f0nDMk5xtFgaESQyP4w23OA4iUkhkthqo6gaY1O
bwelkX3OCbBurYgOh1VAniXxW6s7LZdhBxExBdIYBBC0Gd+Yg/UFCZrrfC7Kw6J3
OUL0p6oXl2RdUAX45/lOC4GVM3fzJSIA0tbteCILw2U+KGfpmdMs5atZ5dsqZ9SK
m+U+bF6+0fIs1JN5ujHHNys0QhGSItuy5JCcV4PHmgaWSkzlCealKQsFNQIDAQAB
o4IC9TCCAvEwHQYDVR0OBBYEFISVxckCNL0XakCQ1y30mDWEp0k6MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaEpYRnlRSTB2UmRxUUpEWExmU1lOWVNuU1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgcEEAgABMIG6AwQF
BVOAAwQCBa+AAwQABa+FMAwDBAEFr9oDBAAFr9wwDAMEAAWv4QMEAAWv6AMEAAWv
6zAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQDU/NQAwQF
VV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQCX9cgAwQE
shKQAwQCuQ2cAwQBuS+MAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAEAgACMCoD
BQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8AwDQYJKoZI
hvcNAQELBQADggEBAHbTKmCrDEk+eM1huktGa5uPat8065ig+bc2Q/URCDyNfZhV
tbN6ejCiHuAYyNfVl3Yq6Q+VEzxeSsB67aoQI327HCGIdztOHdqKVnpZGoYGBWAn
xUJXWJ/CYmCETL6UktjOgRsqqM6TEIVjfCdGwgY4GQ1WMRsQvS0DgFhiDo9U7RJ1
8dqan/AtbM4TYPA8uE5NQp7OhZ+61swL9DiJfwUVFMOFxpU7FxnV8K5F3rxURT7Y
QdqO2uNBvjMaksA6+yn6gHrgyR9b2mEFVYv8nnhj1dRiO5MWCCBiPexOmcaMDQXg
nuHhRn9SqUhVe8YB2n+HUNysV7LXdookRBkmAfI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:48 2025 by rpki-client