Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7myMBgmqvWfRBN9-5ClGRH38Aw.roa
File: j7myMBgmqvWfRBN9-5ClGRH38Aw.roa (raw, json)
Hash identifier: uU36C6eDwU/smJr30Uf267ASIjbQyv3kIpPL7ncOL8w=
Subject key identifier: 8F:B9:B2:30:18:26:AA:F5:9F:44:13:7D:FB:90:A5:19:11:F7:F0:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195A5622EDFE226AABBE7E52779069AD2A5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7myMBgmqvWfRBN9-5ClGRH38Aw.roa
Signing time: Mon 17 Mar 2025 18:33:49 +0000
ROA not before: Mon 17 Mar 2025 18:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.93.31.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
89.144.5.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:62:2e:df:e2:26:aa:bb:e7:e5:27:79:06:9a:d2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 18:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fb9b2301826aaf59f44137dfb90a51911f7f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:2a:0c:ce:e5:a0:ab:73:18:04:c8:67:e5:
f3:5a:71:bd:ed:df:18:c3:b9:42:3f:49:66:c4:b6:
f9:d6:fd:a1:f0:f3:7e:df:27:90:9d:f2:39:7d:90:
cb:f5:22:c6:b8:68:4a:75:f8:1e:e9:13:74:98:09:
a4:4a:a9:2c:04:57:36:78:b3:64:69:c9:8c:1b:98:
26:3e:b4:72:f6:4a:d4:68:b4:a5:8d:3e:53:d9:b3:
b7:55:9d:9c:cc:b8:9a:50:e1:b0:c2:10:3d:4e:f6:
13:26:b2:04:45:cc:91:69:82:6a:8d:80:d3:1b:38:
d6:3a:cb:32:4c:75:31:5c:e7:e4:5d:67:cb:07:e5:
37:81:46:23:6f:78:02:ba:4b:ad:07:b6:9e:90:7d:
47:1b:f4:f8:57:71:85:c5:97:b1:89:d8:26:56:e9:
6d:0b:66:1c:d2:e2:1d:8f:25:7d:d3:06:84:26:86:
a7:f0:4b:55:e6:1d:f4:42:4c:04:be:1f:93:61:86:
a4:e4:9a:d8:97:6e:02:e4:72:51:26:aa:82:cd:d6:
34:76:9e:b7:21:8b:6d:9f:81:f3:e1:01:76:53:0b:
da:6a:bc:25:16:b5:b9:7c:ef:91:29:b2:1b:c5:3f:
56:c5:3e:6b:65:6d:68:5a:e1:bd:31:99:33:8f:01:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:B2:30:18:26:AA:F5:9F:44:13:7D:FB:90:A5:19:11:F7:F0:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7myMBgmqvWfRBN9-5ClGRH38Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:82:d8:f6:42:00:e7:8a:eb:e1:9c:56:f0:de:47:e7:be:57:
01:53:76:52:65:33:7e:fb:e1:7c:d4:3e:c0:34:01:27:8e:51:
a6:1a:99:90:53:ba:c5:0d:87:ba:62:2a:f5:33:0e:25:2f:9d:
d9:b1:b6:8e:85:51:82:3d:3b:cf:b1:3e:6e:bb:6d:af:41:c4:
d1:82:52:8c:13:a2:de:46:39:8c:ea:bc:46:74:80:bd:b2:04:
14:98:9c:fe:e7:1c:ca:a1:49:13:cf:8a:4a:c1:b9:15:e7:96:
f0:e4:40:0e:fb:dc:be:d4:56:e7:6a:99:22:1f:87:37:68:99:
56:59:08:b1:1c:8f:78:49:e8:1c:05:0c:ac:ac:0d:40:fc:ab:
15:2e:e1:eb:f2:76:18:2e:fa:db:a9:05:ff:1e:0a:c8:e8:99:
06:8c:d8:cb:ca:dd:00:04:5a:3f:c2:29:22:27:dd:3a:22:44:
af:7e:f1:4d:9d:4f:08:2e:23:6e:5f:a7:0c:7c:b1:7f:bf:6b:
d9:5f:cf:96:5e:4d:51:68:40:9b:d2:36:b8:da:39:93:52:ed:
c8:64:73:f0:42:3d:81:59:fd:39:15:25:16:d1:b3:bf:36:69:
59:75:7c:92:32:e6:39:f6:fe:dc:1c:80:6a:1d:ac:98:cc:3e:
44:6d:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:03 2025 by rpki-client