
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa
File: sI6sO91CrV6JuhUeAhR8jGF8ffc.roa (raw, json)
Hash identifier: m6/oWH2LbngrUw2houWYBOz52miaizVjDhU935NVU14=
Subject key identifier: B0:8E:AC:3B:DD:42:AD:5E:89:BA:15:1E:02:14:7C:8C:61:7C:7D:F7
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 387DA71F
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa
Signing time: Sat 01 Jan 2022 16:10:57 +0000
ROA not before: Sat 01 Jan 2022 16:10:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35104
IP address blocks: 46.235.84.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
37.228.64.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.104.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.103.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.108.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.107.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.136.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.142.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
2a03:a300:4000::/44 maxlen: 44
2a03:a300:5000::/44 maxlen: 44
2a03:a300:1140::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:1000::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:4100::/48 maxlen: 48
2a03:a300:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947758879 (0x387da71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 16:10:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b08eac3bdd42ad5e89ba151e02147c8c617c7df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:43:1f:1c:2d:b8:44:b2:9c:36:d4:cf:58:
e7:ac:8d:3f:3a:c5:b0:34:7f:33:f1:d0:a4:b9:ae:
35:72:b6:c2:2f:4b:eb:45:48:54:ab:80:45:03:90:
88:13:a0:bd:78:a7:51:d4:ae:d5:a8:fd:11:18:32:
51:dd:20:fd:fc:80:52:a8:cc:f3:2e:93:0a:9e:58:
18:c4:a2:fc:54:56:0c:d6:89:5e:60:18:91:bc:56:
0a:09:c6:bc:49:41:af:3e:b4:d3:e6:7a:d2:d8:33:
59:21:e4:2b:25:e9:20:11:8b:05:98:56:fb:50:79:
51:55:4b:84:6c:0c:fe:88:14:9b:3c:5c:a1:44:97:
76:cc:87:d6:8d:4f:b1:69:dc:a1:84:1d:6d:87:5e:
08:27:92:23:7d:35:9e:ec:95:a9:b8:f3:9c:fd:be:
88:ce:b6:55:40:e3:5a:c3:86:09:be:f7:d3:dc:3d:
b1:d1:d6:74:2e:b8:1a:df:bc:48:c5:1d:64:66:8f:
66:e5:fb:04:c5:e6:aa:82:a5:01:ff:89:6e:d9:7e:
aa:49:25:d6:99:3d:f7:37:ea:47:1e:85:2f:7c:74:
21:9e:06:dd:2a:28:25:32:5d:a6:74:34:93:19:28:
85:5a:92:0f:77:5e:6e:33:34:40:33:a0:9f:95:9c:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:AC:3B:DD:42:AD:5E:89:BA:15:1E:02:14:7C:8C:61:7C:7D:F7
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/sI6sO91CrV6JuhUeAhR8jGF8ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
2a03:a300:1140::/48
2a03:a300:2000::/48
2a03:a300:3000::/48
2a03:a300:4000::/44
2a03:a300:4100::/48
2a03:a300:5000::/44
Signature Algorithm: sha256WithRSAEncryption
32:b3:52:17:80:8b:84:78:74:db:fc:25:bc:a9:43:82:51:c8:
d8:50:65:6c:22:30:ea:41:9d:2e:59:ac:19:29:da:ef:c4:22:
68:b4:93:e3:15:b3:14:77:6d:a0:3e:cb:2d:ac:4a:76:a7:3e:
8f:24:34:5c:b8:df:4a:96:78:c9:9a:f7:2f:4b:99:5b:61:9e:
43:f6:d5:a5:a7:3b:69:ff:a1:9a:93:98:e9:57:61:90:f2:e8:
42:5b:fd:13:8a:0c:38:57:5e:d8:46:39:6a:90:6f:ae:a5:5c:
05:14:c2:fd:7a:33:8a:fe:e8:2e:6e:de:bb:0a:12:08:bd:e7:
73:d8:de:2c:3d:ac:68:46:63:8d:40:fc:14:41:18:4f:23:99:
2f:8e:6a:fc:3b:a3:27:ca:5d:f3:bb:cc:b2:2d:da:0d:98:49:
ba:80:a0:80:37:28:c0:53:79:21:7b:85:48:62:c9:ad:c7:33:
cf:20:9f:f8:1b:5e:9b:52:8b:ba:85:01:b0:13:ae:fe:d0:9a:
fe:67:9e:8f:a6:5c:dc:50:64:5e:a1:97:f5:f7:4e:6f:04:ef:
6e:d8:47:97:34:a6:ff:29:e2:1a:95:98:2d:0d:6c:90:12:25:
f9:02:f5:a2:47:f2:28:57:2e:fd:80:86:72:15:b5:d6:4f:51:
aa:f5:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:51 2025 by rpki-client