Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/DhK2Gm41dj1a7Ht_VszMwj3cWXo.roa
File: DhK2Gm41dj1a7Ht_VszMwj3cWXo.roa (raw, json)
Hash identifier: A0MEu82zjDNJ9x2pWtkKf92vjtpFemBTHmjw0LQIcho=
Subject key identifier: 0E:12:B6:1A:6E:35:76:3D:5A:EC:7B:7F:56:CC:CC:C2:3D:DC:59:7A
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019422FBA569570D515387DFAFB44225B008
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/DhK2Gm41dj1a7Ht_VszMwj3cWXo.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a5:69:57:0d:51:53:87:df:af:b4:42:25:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e12b61a6e35763d5aec7b7f56ccccc23ddc597a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:40:aa:43:9b:35:68:21:48:45:03:f4:18:
06:1b:1f:7a:79:9b:9a:bf:ac:46:6d:2c:2b:75:5e:
a6:b0:75:91:98:17:74:5b:ad:67:67:0e:05:59:7a:
e1:c9:55:7f:ae:87:e1:31:68:dd:ec:e1:43:10:2e:
31:d7:58:b5:27:9f:e7:2b:2d:e3:b3:48:78:08:8d:
87:5b:3f:40:47:4e:fb:fe:63:6b:d3:a8:7c:e7:6b:
b2:71:b6:66:fb:d6:79:a4:cc:02:20:59:0e:3e:62:
d5:02:a5:10:2d:dc:ef:a4:7f:eb:98:59:e1:70:ec:
ba:b5:aa:8f:28:8f:c7:3b:9b:76:af:c2:ae:a7:0c:
ea:d1:13:f9:bd:60:1d:c5:43:11:4f:e1:59:40:5f:
86:6c:fe:81:8c:3a:89:35:52:09:a0:c0:20:ef:9a:
96:c0:05:c5:4e:6e:86:ae:d1:fe:54:dd:1c:80:e9:
f6:6a:2e:d4:a3:5e:d9:f5:3b:3e:10:0b:82:40:a8:
44:63:f0:10:ab:a0:39:19:ce:2b:9a:a1:7e:08:e2:
d8:12:b5:40:d7:43:9b:ba:92:77:ae:03:d8:8f:e6:
8f:c7:3e:31:fe:f0:be:67:f4:3b:ac:37:3a:dd:e5:
de:ba:54:61:1a:91:c6:f4:7b:b7:a0:f3:28:72:ba:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:B6:1A:6E:35:76:3D:5A:EC:7B:7F:56:CC:CC:C2:3D:DC:59:7A
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/DhK2Gm41dj1a7Ht_VszMwj3cWXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
188.127.47.0-188.127.49.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
6a:88:5d:83:5c:af:a9:bc:89:eb:0a:62:9d:cd:5e:17:c7:4a:
50:63:f8:f1:38:be:fc:6f:43:de:55:d5:27:d0:16:76:a0:82:
b2:ae:5d:1c:81:33:17:5b:b2:76:98:31:85:03:cf:61:b9:9e:
02:a9:9f:c6:05:8a:84:1c:06:0b:5c:8e:c8:b8:c9:8f:1c:6c:
4c:a5:2e:2e:aa:3c:31:82:00:98:ce:41:60:66:9c:b7:1d:60:
b5:17:50:4c:72:98:87:4d:f1:05:b1:92:00:89:8a:29:51:54:
2c:74:ba:ab:6e:ea:41:50:54:70:1a:22:17:3a:61:da:1c:fb:
9b:6f:e5:18:1e:86:02:a7:21:c7:e8:97:a8:5f:4d:37:83:2f:
c9:c0:20:10:ee:97:01:5e:f8:d8:14:a3:0f:4c:58:fb:a0:82:
4a:5d:00:2d:63:df:78:0a:41:18:44:ce:ca:fb:3e:3c:6b:9a:
f6:12:ff:5c:ff:bf:30:1e:21:1b:6b:2f:da:3d:6d:b4:e6:69:
b6:5b:f3:4f:93:19:7d:a2:41:42:13:f4:d3:2d:2b:3f:6e:2e:
05:bb:9a:e6:2d:b6:9c:5d:96:79:74:21:4b:22:7e:4f:e0:0a:
71:b9:9a:cf:6f:41:cc:20:4e:fa:aa:f1:b2:bc:14:6c:a2:0d:
ef:97:0f:00
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISAZQi+6VpVw1RU4ffr7RCJbAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjUwMTAxMTc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTEyYjYxYTZlMzU3NjNkNWFlYzdiN2Y1NmNjY2NjMjNkZGM1OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAxAqkObNWghSEUD9BgGGx96eZua
v6xGbSwrdV6msHWRmBd0W61nZw4FWXrhyVV/rofhMWjd7OFDEC4x11i1J5/nKy3j
s0h4CI2HWz9AR077/mNr06h852uycbZm+9Z5pMwCIFkOPmLVAqUQLdzvpH/rmFnh
cOy6taqPKI/HO5t2r8Kupwzq0RP5vWAdxUMRT+FZQF+GbP6BjDqJNVIJoMAg75qW
wAXFTm6GrtH+VN0cgOn2ai7Uo17Z9Ts+EAuCQKhEY/AQq6A5Gc4rmqF+COLYErVA
10ObupJ3rgPYj+aPxz4x/vC+Z/Q7rDc63eXeulRhGpHG9Hu3oPMocrqn/QIDAQAB
o4ICdzCCAnMwHQYDVR0OBBYEFA4SthpuNXY9Wux7f1bMzMI93Fl6MB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvRGhLMkdtNDFkajFhN0h0X1Zzek13ajNjV1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswagQCAAEwZAMEAyXkQAME
Ay7rUAMEBE31YAMEBFDy0AMEAlnbGAMEBF25QAMEBF+NgAMEArkUfAMEBbwAgDAM
AwQFvH8gAwQBvH8sMAwDBAC8fy8DBAG8fzADBADBHTUDBALDvRwDBATZxBAwDQQC
AAIwBwMFACoDowAwDQYJKoZIhvcNAQELBQADggEBAGqIXYNcr6m8iesKYp3NXhfH
SlBj+PE4vvxvQ95V1SfQFnaggrKuXRyBMxdbsnaYMYUDz2G5ngKpn8YFioQcBgtc
jsi4yY8cbEylLi6qPDGCAJjOQWBmnLcdYLUXUExymIdN8QWxkgCJiilRVCx0uqtu
6kFQVHAaIhc6Ydoc+5tv5RgehgKnIcfol6hfTTeDL8nAIBDulwFe+NgUow9MWPug
gkpdAC1j33gKQRhEzsr7PjxrmvYS/1z/vzAeIRtrL9o9bbTmabZb80+TGX2iQUIT
9NMtKz9uLgW7muYttpxdlnl0IUsifk/gCnG5ms9vQcwgTvqq8bK8FGyiDe+XDwA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:07 2025 by rpki-client