Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tS0mr9P6aAWp4mm_dBV7DS7zHic.roa
File: tS0mr9P6aAWp4mm_dBV7DS7zHic.roa (raw, json)
Hash identifier: SAeQRpa38NG1BsuAbjMjRNTf079d6dSAWj2ny4Aarwg=
Subject key identifier: B5:2D:26:AF:D3:FA:68:05:A9:E2:69:BF:74:15:7B:0D:2E:F3:1E:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194DBFF43783E6EBBA02670489FDAA4A6FF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tS0mr9P6aAWp4mm_dBV7DS7zHic.roa
Signing time: Thu 06 Feb 2025 16:02:06 +0000
ROA not before: Thu 06 Feb 2025 16:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:ff:43:78:3e:6e:bb:a0:26:70:48:9f:da:a4:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 16:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b52d26afd3fa6805a9e269bf74157b0d2ef31e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:24:f5:53:37:58:0e:13:b3:ba:bf:ac:d6:
b7:f4:6f:d5:58:ca:3d:fd:2a:74:9f:a2:c8:42:da:
17:f2:15:28:29:b1:33:5e:ab:21:15:4e:09:65:62:
b6:e8:82:e2:52:6b:e1:0d:e8:3b:35:51:ff:b6:e5:
63:1f:a5:72:80:46:31:26:bd:a3:c7:e0:71:8e:b4:
f9:cc:a4:6f:de:3c:c5:a4:a4:6a:e6:76:5a:d3:77:
b6:ad:75:76:e2:26:04:b5:e5:a8:ad:3b:99:82:af:
ed:7f:4e:cf:bb:69:7d:0c:0c:b7:84:38:50:64:28:
58:9a:57:2e:42:2a:c8:72:4f:56:a4:bb:0b:81:28:
11:11:62:a3:a7:66:d8:47:03:f2:f9:fe:2b:44:03:
3b:1c:c2:b9:cb:50:d7:b4:c5:79:cd:2a:2e:69:b8:
e8:cb:70:88:46:9b:8e:08:18:1e:54:a5:ef:c7:48:
fd:bc:91:02:29:7c:6c:13:74:94:0c:b7:ea:f4:6d:
a7:07:8d:3c:cf:31:63:e4:1a:e8:e2:1b:bc:f0:a6:
f8:78:31:ec:33:1c:d6:f0:e0:c8:6c:b2:8b:84:7d:
e6:3a:ee:5e:49:dc:fd:58:5c:7b:ec:b7:54:6f:fc:
3a:6c:41:d9:99:62:0c:db:46:d7:2f:b3:98:12:a8:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:26:AF:D3:FA:68:05:A9:E2:69:BF:74:15:7B:0D:2E:F3:1E:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tS0mr9P6aAWp4mm_dBV7DS7zHic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:7b:ab:12:f5:14:d3:73:ac:9f:2a:4a:43:07:ef:a5:47:64:
5d:a2:7b:44:68:93:99:29:88:0f:05:15:f0:85:c2:1e:9b:c5:
b2:6e:1f:c6:10:56:3d:ac:c5:e3:4f:9a:70:9e:04:91:82:25:
e1:f4:15:b7:c5:c0:7d:51:33:57:de:28:21:80:7e:2f:e6:e4:
cf:5f:2a:4e:51:71:b7:63:e4:25:4b:4d:5a:8b:74:a8:e4:57:
d6:4b:b5:23:72:9c:85:d1:61:00:b7:51:c7:fb:c0:42:94:7a:
36:ae:ac:c7:9e:2e:03:c7:b3:ee:d1:e4:52:76:ea:20:d9:99:
76:55:27:e7:6f:e8:05:24:a7:ad:71:1c:bd:61:b0:0b:a1:8f:
af:40:88:6c:1d:83:bb:16:39:14:9e:f6:83:9e:67:e3:3f:df:
38:b9:2c:91:ad:c2:22:2e:b8:f2:df:68:73:ca:91:36:8e:b6:
1f:bb:b3:b1:1d:0e:7f:63:83:fc:a5:6d:d7:ca:90:8f:d5:09:
5f:d4:6b:35:c2:54:03:d7:6f:30:a4:b5:3a:0a:2d:0e:b8:69:
fd:d4:8d:3b:fd:be:42:cc:c8:f0:f6:d9:bf:31:5c:de:9f:92:
57:e5:c2:b0:48:2b:ea:54:cd:1f:6c:d6:42:37:b0:1b:22:1c:
64:10:a0:e6
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAZTb/0N4Pm67oCZwSJ/apKb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjA2MTYwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTJkMjZhZmQzZmE2ODA1YTllMjY5YmY3NDE1N2IwZDJlZjMxZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Ak9VM3WA4Ts7q/rNa39G/VWMo9
/Sp0n6LIQtoX8hUoKbEzXqshFU4JZWK26ILiUmvhDeg7NVH/tuVjH6VygEYxJr2j
x+BxjrT5zKRv3jzFpKRq5nZa03e2rXV24iYEteWorTuZgq/tf07Pu2l9DAy3hDhQ
ZChYmlcuQirIck9WpLsLgSgREWKjp2bYRwPy+f4rRAM7HMK5y1DXtMV5zSouabjo
y3CIRpuOCBgeVKXvx0j9vJECKXxsE3SUDLfq9G2nB408zzFj5Bro4hu88Kb4eDHs
MxzW8ODIbLKLhH3mOu5eSdz9WFx77LdUb/w6bEHZmWIM20bXL7OYEqjpVQIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFLUtJq/T+mgFqeJpv3QVew0u8x4nMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdFMwbXI5UDZhQVdwNG1tX2RCVjdEUzd6SGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgccEAgABMIHAAwQF
BVOAAwQCBa+AAwQABa+FAwQBBa+OMAwDBAEFr9oDBAAFr9wwDAMEAAWv4QMEAAWv
6AMEAAWv6zAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQBuS+MAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAE
AgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8Aw
DQYJKoZIhvcNAQELBQADggEBADh7qxL1FNNzrJ8qSkMH76VHZF2ie0Rok5kpiA8F
FfCFwh6bxbJuH8YQVj2sxeNPmnCeBJGCJeH0FbfFwH1RM1feKCGAfi/m5M9fKk5R
cbdj5CVLTVqLdKjkV9ZLtSNynIXRYQC3Ucf7wEKUejaurMeeLgPHs+7R5FJ26iDZ
mXZVJ+dv6AUkp61xHL1hsAuhj69AiGwdg7sWORSe9oOeZ+M/3zi5LJGtwiIuuPLf
aHPKkTaOth+7s7EdDn9jg/ylbdfKkI/VCV/UazXCVAPXbzCktToKLQ64af3UjTv9
vkLMyPD22b8xXN6fklflwrBIK+pUzR9s1kI3sBsiHGQQoOY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:10 2025 by rpki-client