Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xFAHCiJcrMNG971riWh2xdreOYQ.roa
File: xFAHCiJcrMNG971riWh2xdreOYQ.roa (raw, json)
Hash identifier: IGRwQ1guvTU1H8aNH0azZNdX/QNFtEf5DDJDAeeEvEs=
Subject key identifier: C4:50:07:0A:22:5C:AC:C3:46:F7:BD:6B:89:68:76:C5:DA:DE:39:84
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01958003616D1736E8389FE4E1FEE0246CA3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xFAHCiJcrMNG971riWh2xdreOYQ.roa
Signing time: Mon 10 Mar 2025 12:24:20 +0000
ROA not before: Mon 10 Mar 2025 12:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.148.0/23 maxlen: 24
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.191.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.202.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:03:61:6d:17:36:e8:38:9f:e4:e1:fe:e0:24:6c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 10 12:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c450070a225cacc346f7bd6b896876c5dade3984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:23:1b:b6:2b:ae:1f:f6:50:5b:d5:08:8f:
91:81:a1:d3:69:16:3c:8e:7b:fa:84:01:ee:a0:f1:
25:be:4f:cb:08:f9:97:b4:fe:bb:fd:4f:07:70:ea:
41:a7:9b:06:d5:d6:e6:e9:39:53:16:fb:23:3a:7e:
ee:0a:88:68:09:a1:ae:8e:00:56:3b:c7:38:a9:60:
32:a0:fa:64:48:b9:68:31:2d:f9:08:23:27:24:78:
90:d0:54:38:b0:2e:3d:7f:97:ae:76:21:3b:4c:07:
e5:20:23:5a:f2:da:5a:53:11:3d:19:1f:53:6b:2d:
50:06:bc:d0:60:80:50:9f:59:00:19:3d:f4:c4:a5:
03:70:64:3d:1a:d8:fa:ae:2b:ba:7b:62:7a:32:b8:
b1:e6:14:f5:b0:e4:c0:9f:df:be:55:98:4b:6f:cb:
d7:03:55:93:6e:4a:be:03:f7:d1:1f:4d:ea:10:c6:
ef:41:b2:68:dd:1e:1e:ec:ad:e9:b1:97:9b:17:ca:
8f:08:be:5c:e4:65:2f:2f:6e:59:0a:7e:55:1e:38:
de:67:2f:cf:d7:36:3f:c3:3b:cc:d3:80:ca:6e:68:
ef:af:af:ae:2e:32:49:0f:93:c0:7d:06:0f:d9:1a:
06:82:da:5d:a9:9f:eb:a9:ec:f4:32:1e:ba:4a:66:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:07:0A:22:5C:AC:C3:46:F7:BD:6B:89:68:76:C5:DA:DE:39:84
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xFAHCiJcrMNG971riWh2xdreOYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.148.0/23
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.191.0-193.230.192.255
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.202.0/24
193.231.204.0/24
193.231.226.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
b6:e1:4f:df:64:48:c4:a8:80:30:d3:d3:a1:3d:7c:cc:7a:7c:
f0:6c:60:79:f6:46:b0:79:5c:21:f7:9e:b0:19:b6:2a:6d:7d:
8d:19:c2:50:25:8c:41:c2:0a:c5:3c:4e:81:65:ee:a0:df:00:
2f:2d:cc:7e:12:60:ba:99:4b:ea:24:4f:fd:b9:42:a7:6f:8c:
20:da:18:2d:9a:d3:54:6e:39:11:07:01:ee:64:ad:ff:a2:0e:
5f:ea:b0:3a:74:fe:f4:5e:93:c1:80:52:25:c6:e9:f4:8c:db:
3b:ae:85:c2:f3:e9:9c:4d:7b:1d:a1:e8:87:0e:c4:d5:8a:a7:
e7:80:3d:b8:5d:c4:f0:5d:c6:1a:29:f1:96:65:61:84:46:0f:
44:fb:0d:2d:6e:28:61:19:4c:11:30:de:3e:76:53:c1:ec:6d:
15:d7:b1:a7:85:aa:a8:49:5c:87:21:12:47:2f:39:66:af:30:
93:ec:5a:3d:f0:2b:a1:78:46:f2:dd:0c:43:9d:3d:f4:ef:d5:
11:47:63:6a:b5:6a:c2:6f:5a:29:31:59:06:03:4a:a1:55:d0:
29:cb:1c:e2:e6:f3:30:bf:18:35:7a:4e:d5:be:c6:15:df:7d:
60:b8:b6:77:e0:0a:17:25:b2:23:d2:5e:2a:ee:81:29:40:cd:
91:f4:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:35 2025 by rpki-client