Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AEmQUZBTkQdZq1h5UIKSwLxUtJU.roa
File: AEmQUZBTkQdZq1h5UIKSwLxUtJU.roa (raw, json)
Hash identifier: DhWQyXz4x7c1fmzq7DhlOP5FRmd3ks6u0uUZinZj9oY=
Subject key identifier: 00:49:90:51:90:53:91:07:59:AB:58:79:50:82:92:C0:BC:54:B4:95
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019464B417E0D70F3EBAF7E26E47EE37684D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AEmQUZBTkQdZq1h5UIKSwLxUtJU.roa
Signing time: Tue 14 Jan 2025 12:05:11 +0000
ROA not before: Tue 14 Jan 2025 12:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.14.0/23 maxlen: 23
80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:b4:17:e0:d7:0f:3e:ba:f7:e2:6e:47:ee:37:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 14 12:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004990519053910759ab5879508292c0bc54b495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:b4:61:95:15:f4:b3:bd:65:7b:44:9f:a6:
1c:c2:c3:6d:a3:0c:79:40:eb:b9:a9:36:9f:88:6e:
92:2c:28:70:1f:0b:d9:87:10:a2:18:00:f5:b1:11:
8a:07:38:2b:54:8f:0c:a9:31:50:2c:0d:4d:a8:dd:
8e:e3:21:9d:35:a2:da:2e:c2:39:55:cb:d7:1b:03:
d7:e2:09:63:3a:15:1d:2a:59:e2:83:8d:9a:5e:2e:
2f:25:d3:3a:50:ca:8c:39:6c:3d:22:f5:c8:43:47:
e4:dd:2e:c7:e9:ac:6f:f0:6f:0a:82:7c:48:44:45:
23:01:fd:f2:49:7f:15:e8:81:6d:fb:b8:28:83:05:
c5:c9:a3:16:32:3d:05:40:37:ed:72:07:47:e5:c3:
9b:8f:a6:4a:3d:81:1e:ed:fe:01:93:a3:6b:4c:12:
87:2b:b6:4d:33:93:cb:2b:40:76:70:3d:dd:7f:a2:
90:0f:08:41:5d:b3:5e:27:63:2d:64:41:d9:42:d2:
25:75:ff:12:96:df:37:74:35:fe:a7:40:cf:7f:1b:
9a:79:5d:19:08:b9:b2:29:64:66:69:aa:d9:19:ee:
c8:da:e6:4c:05:be:12:be:c7:b8:c5:fa:c9:75:0c:
c1:e7:29:ee:05:19:87:bd:3a:18:c4:ef:d5:71:69:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:90:51:90:53:91:07:59:AB:58:79:50:82:92:C0:BC:54:B4:95
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AEmQUZBTkQdZq1h5UIKSwLxUtJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.192.0/24
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
15:30:3d:25:dc:96:ff:5b:91:da:2e:bb:12:a6:d0:6e:7f:42:
3f:ae:ba:5b:fb:71:c4:ff:17:83:78:a1:6f:94:d7:2d:25:8c:
da:b7:e2:76:52:79:83:83:79:ad:a1:d9:69:5e:74:49:81:54:
90:83:ba:c5:50:73:a1:67:5c:8a:03:97:76:82:a6:83:18:ea:
70:3c:b3:82:68:c8:6c:8e:00:e7:a2:39:26:c3:02:cd:f2:c4:
86:c7:59:0d:c3:af:f7:f3:60:00:54:71:bd:96:e1:f2:69:44:
4a:31:f4:56:61:e0:4f:47:fa:e5:79:dc:d4:23:e0:3a:af:ed:
03:4f:8c:00:63:19:59:ec:12:47:13:94:fb:fb:71:5a:ec:d1:
f3:3d:2c:26:51:7f:07:16:f3:eb:e8:fb:58:d4:23:d5:98:1a:
e3:e6:f7:ed:ae:c5:28:b7:a3:26:2f:e6:40:52:c4:ce:77:1f:
0e:50:1c:26:e1:07:5d:d5:d2:51:a0:77:83:c4:cf:88:a0:98:
e0:29:24:e4:b7:68:c8:c3:16:fa:f9:d2:e7:04:93:c3:e4:40:
8d:1b:2d:3b:22:5a:3a:8c:11:d1:15:77:c3:9f:ab:da:df:ae:
54:29:8b:8d:a8:81:81:7f:92:02:db:12:78:cf:ca:47:f1:2d:
96:2b:4a:4a
-----BEGIN CERTIFICATE-----
MIIIpTCCB42gAwIBAgISAZRktBfg1w8+uvfibkfuN2hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTE0MTIwNTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDQ5OTA1MTkwNTM5MTA3NTlhYjU4Nzk1MDgyOTJjMGJjNTRiNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH60YZUV9LO9ZXtEn6YcwsNtowx5
QOu5qTafiG6SLChwHwvZhxCiGAD1sRGKBzgrVI8MqTFQLA1NqN2O4yGdNaLaLsI5
VcvXGwPX4gljOhUdKlnig42aXi4vJdM6UMqMOWw9IvXIQ0fk3S7H6axv8G8KgnxI
REUjAf3ySX8V6IFt+7gogwXFyaMWMj0FQDftcgdH5cObj6ZKPYEe7f4Bk6NrTBKH
K7ZNM5PLK0B2cD3df6KQDwhBXbNeJ2MtZEHZQtIldf8Slt83dDX+p0DPfxuaeV0Z
CLmyKWRmaarZGe7I2uZMBb4Svse4xfrJdQzB5ynuBRmHvToYxO/VcWmrRQIDAQAB
o4IFsTCCBa0wHQYDVR0OBBYEFABJkFGQU5EHWatYeVCCksC8VLSVMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvQUVtUVVaQlRrUWRacTFoNVVJS1N3THhVdEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDxQYIKwYBBQUHAQcBAf8EggO0MIIDsDCCA50EAgABMIID
lQMEAVBgDgMEAFBgEQMEAFBgSTAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGBzAwQA
UGCIAwQAUGCqAwQAUGC1AwQAUGC3AwQAUGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQA
UGDcAwQAUGDkAwQBUGDmAwQAUGDuAwQAUGD/AwQAUGEIAwQAUGEPAwQAUGE2AwQA
UGGQAwQAUGGrAwQBUGGwAwQAUbSPAwQAUbTqAwQAUbTvAwQAUbUAAwQAUbVKAwQA
UbVkAwQAUbWUAwQAUbWYMAwDBABRtZsDBABRtZwDBABRtcADBABRtccDBAFRtdQD
BAFVeAwDBAFVeCgDBAFVeEIDBABVeJsDBABVeKoDBABVeLIDBANVeMADBAFVeQYD
BABVeSYDBANVeSgwDAMEAlV5PAMEA1V5QAMEA1V5WAMEAVV5lAMEAFV5lzAMAwQC
VXmcAwQCVXmgAwQAVXm4AwQAVXnGAwQCVXncAwQCVXn8AwQBVXpSAwQAVXpqMAwD
BARVenADBABVenIwDAMEAFV6tQMEA1V6sDALAwQGVXtAAwMCVXgDBADAohADBADB
4hsDBADB4iMDBADB4i0DBADB4kEDBAHB4lADBADB4lQDBADB4mMDBADB4mUwDAME
AMHibwMEAMHicAMEAMHieAMEAMHiewMEB8HmAAMEAcHmhgMEAMHmjQMEAMHmjwME
AcHmpAMEAcHmuAMEAMHmwDAMAwQAwebPAwQAwebQMAwDBADB5tMDBADB5tQDBADB
5tsDBADB5uEDBADB5vQDBADB51EDBADB53ADBADB53IDBAHB53QDBADB53cDBADB
56MDBADB56gDBADB58ADBADB58wDBADB5/ADBADB5/QDBADB5/cDBADB5/kDBADB
5/4DBADCPnoDBADCZkEDBADCZocDBADCZo8DBADCZpoDBADCZp0DBADCZqMDBALC
ZqgDBADCZrEDBADCZvcDBADCaQYDBADCaQsDBADCaRADBADCmeoDBADCme4DBAHC
mfIDBADCmfUDBADCsL0DBAXUI4ADBADZnAADBADZnAIDBAHZnAYDBADZnA0DBADZ
nA8DBADZnBMDBADZnCUwDAMEANmcMQMEAtmcMAMEANmcOQMEANmcOwMEANmcPgME
ANmcRwMEANmcTQMEANmcVAMEANmcYAMEANmcZTAMAwQB2ZxqAwQA2ZxsAwQA2Zxw
AwQA2Zx3MA0EAgACMAcDBQMqA16AMA0GCSqGSIb3DQEBCwUAA4IBAQAVMD0l3Jb/
W5HaLrsSptBuf0I/rrpb+3HE/xeDeKFvlNctJYzat+J2UnmDg3mtodlpXnRJgVSQ
g7rFUHOhZ1yKA5d2gqaDGOpwPLOCaMhsjgDnojkmwwLN8sSGx1kNw6/382AAVHG9
luHyaURKMfRWYeBPR/rledzUI+A6r+0DT4wAYxlZ7BJHE5T7+3Fa7NHzPSwmUX8H
FvPr6PtY1CPVmBrj5vftrsUot6MmL+ZAUsTOdx8OUBwm4Qdd1dJRoHeDxM+IoJjg
KSTkt2jIwxb6+dLnBJPD5ECNGy07Ilo6jBHRFXfDn6va365UKYuNqIGBf5IC2xJ4
z8pH8S2WK0pK
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:42 2025 by rpki-client