Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xguk_kf_mdb4h_h1pAITlFy7UwU.roa
File: xguk_kf_mdb4h_h1pAITlFy7UwU.roa (raw, json)
Hash identifier: 2Ti42qe9S32ZOoAwbMJXvdR+AH6Au28JhdevzteYoG0=
Subject key identifier: C6:0B:A4:FE:47:FF:99:D6:F8:87:F8:75:A4:02:13:94:5C:BB:53:05
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FF88EB009477742556BAD349BB9F5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xguk_kf_mdb4h_h1pAITlFy7UwU.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:8e:b0:09:47:77:42:55:6b:ad:34:9b:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60ba4fe47ff99d6f887f875a40213945cbb5305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:f4:60:8d:5c:46:cd:8e:e9:fd:fb:16:9b:
e5:e8:b2:fb:b3:07:36:74:ee:c9:02:e2:17:65:98:
17:13:16:1b:3e:b3:cd:7b:30:f1:f8:c7:34:d7:2b:
f1:39:dc:0e:82:d6:e0:7f:9a:6d:cf:4d:93:a7:47:
e8:dd:c7:5b:4b:e4:13:0c:57:38:9c:e3:1a:67:94:
e1:c0:9f:0f:39:bd:b8:b0:47:35:31:87:e8:39:38:
f9:1c:49:48:93:4f:e8:e0:8c:c8:c6:8c:a0:1e:be:
c4:f7:21:03:6d:36:d1:b9:e1:bc:57:87:d3:81:44:
1c:57:b4:3e:1b:a5:b9:63:a6:28:98:e6:24:f8:72:
02:4c:1d:a2:dc:36:53:17:fa:f3:ef:d4:e7:94:f2:
78:c4:93:7e:50:5e:f7:9e:75:53:ce:4c:73:88:ff:
8f:ba:71:16:fa:61:a5:a8:87:87:c9:14:3a:35:7a:
4d:a8:8d:75:b9:f4:e0:f7:77:6f:32:29:1c:ea:d0:
66:b4:48:6b:da:7b:70:27:5c:ac:93:16:ad:cc:fa:
74:7e:a2:cc:8e:23:6a:08:2d:db:20:5a:3a:69:5e:
b2:d6:9e:f7:25:49:4c:8f:95:f7:2d:68:80:ce:18:
c3:0c:42:0a:a3:72:b2:f1:7c:62:4a:58:ad:25:a2:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:A4:FE:47:FF:99:D6:F8:87:F8:75:A4:02:13:94:5C:BB:53:05
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xguk_kf_mdb4h_h1pAITlFy7UwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
33:ae:10:7d:43:d7:05:ae:88:56:ec:91:bb:20:cb:95:d5:87:
d3:3a:1b:fe:38:e5:f4:dd:4b:da:21:57:94:b9:51:82:66:f5:
50:3e:8b:e9:72:33:8f:22:5b:30:50:d0:24:1b:d1:cf:8d:b2:
10:d3:71:04:de:1b:1a:2b:3b:27:11:99:d9:a4:ba:4d:da:89:
5f:c1:bf:db:76:20:3d:96:a7:8c:6b:c4:4b:81:51:3b:c6:a4:
7e:f5:99:77:b2:a9:75:75:93:d3:cb:d8:c6:78:04:25:4c:83:
1b:0a:1d:30:55:dd:47:a9:eb:1d:ae:6b:33:5d:9f:c7:8e:86:
9e:8f:b3:50:8b:6d:76:d2:bd:26:18:30:9e:0d:46:97:22:1b:
a5:f2:c5:f0:77:98:7b:55:bb:1b:53:fa:eb:a9:79:8f:87:bb:
0b:7b:1a:80:a2:6a:f7:1b:f7:3d:05:2d:31:02:dc:29:7f:ba:
6c:95:8e:86:d2:26:2e:00:95:96:a5:db:0a:e9:f8:a2:16:8d:
cf:17:91:8f:e6:b2:e9:54:92:a2:44:a3:d6:c3:90:7b:db:9b:
98:b3:b9:ce:97:77:d4:4b:a3:6d:49:82:0a:a7:85:c9:c3:27:
ee:17:0e:79:83:f8:12:0e:67:c0:61:c2:77:f0:7c:e9:75:dc:
ae:a8:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:07 2025 by rpki-client