Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-pVOlLvSyTnT-1PDGhZYXdhEaSo.roa
File: 1-pVOlLvSyTnT-1PDGhZYXdhEaSo.roa (raw, json)
Hash identifier: ekUKIq9DeSpPqHyHUstrh1Uof+RpcON1LRRHa3LfeM8=
Subject key identifier: FA:95:4E:94:BB:D2:C9:39:D3:FB:53:C3:1A:16:58:5D:D8:44:69:2A
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01939607C0C2FE40690D8CCF8707BA3EEF23
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-pVOlLvSyTnT-1PDGhZYXdhEaSo.roa
Signing time: Thu 05 Dec 2024 08:55:10 +0000
ROA not before: Thu 05 Dec 2024 08:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26496
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
77.91.232.0/21 maxlen: 24
79.170.40.0/21 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:07:c0:c2:fe:40:69:0d:8c:cf:87:07:ba:3e:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Dec 5 08:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa954e94bbd2c939d3fb53c31a16585dd844692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:2b:5a:4a:66:51:66:de:fb:6b:14:8d:a5:
91:56:b5:35:cd:25:2f:1d:13:9e:a2:bd:b0:cb:c7:
e1:a7:82:2b:e6:03:84:8e:80:73:d8:f0:d8:bf:78:
b6:71:d1:72:5c:e5:48:41:9e:78:8c:b1:cc:5a:e8:
c1:4d:0e:96:64:51:aa:c4:69:55:a5:fc:24:f9:3f:
8b:80:82:82:fc:b3:0c:c7:00:4c:ec:43:ca:47:c5:
aa:8d:0a:89:88:b2:c1:cf:4a:8b:15:f4:19:f0:b3:
12:72:82:8b:66:a9:c5:ef:13:57:e8:74:37:e4:f8:
25:47:da:cd:e3:ce:fc:03:52:15:8e:ee:b2:26:86:
fc:df:d1:bc:b2:9b:a4:f8:82:3e:da:71:9f:10:09:
8a:84:53:e6:64:ca:cd:2b:6d:44:ef:da:43:8b:34:
e3:c0:6f:24:aa:b1:d3:f2:71:38:4f:86:e7:d0:fa:
bc:50:2f:32:2f:13:33:40:31:43:87:3a:e2:8a:40:
39:0a:bf:ae:f7:cf:e7:4c:e0:7e:8e:25:3d:ec:30:
cc:21:56:50:5b:be:23:24:1a:8c:cb:8d:ea:85:bf:
b1:ae:d3:09:c1:58:c3:e9:fe:00:85:7d:a3:88:55:
99:df:45:c4:57:37:0e:81:22:85:27:be:62:fe:77:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:4E:94:BB:D2:C9:39:D3:FB:53:C3:1A:16:58:5D:D8:44:69:2A
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-pVOlLvSyTnT-1PDGhZYXdhEaSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
79.170.40.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
83:30:3e:c4:bb:98:a7:74:eb:c9:28:d6:4a:3f:50:d0:b7:88:
9d:b8:13:7b:ed:c8:d5:df:69:16:e9:c1:71:85:f5:46:80:f1:
4f:29:23:1c:b9:bf:76:18:b6:a9:2a:49:6c:38:57:ad:de:12:
04:b2:44:62:f4:1f:c7:8b:34:6a:2c:44:42:3f:d7:cf:50:a5:
5e:8e:38:96:9c:35:38:2d:87:2d:e6:28:7a:05:0b:17:b6:82:
25:d3:1f:db:18:5d:9b:ff:42:c4:ed:ff:45:ee:ad:b7:b6:7d:
a4:de:fa:28:c4:30:e7:92:fb:74:f7:34:e7:4b:e7:e1:f2:c0:
05:b2:9e:5c:4a:b8:19:88:7a:43:05:eb:c7:9d:ff:31:f5:9d:
70:d6:4d:fe:b8:a5:b0:7c:c7:c0:a4:7e:ce:61:fd:38:9c:b7:
a5:60:66:de:ca:a3:b9:0a:af:56:bd:07:c8:ef:83:43:df:ae:
82:8f:db:7b:e5:5e:ba:ac:c6:b9:53:87:0e:ed:52:f5:44:b8:
eb:ea:ab:bf:75:ad:28:ec:3a:68:56:3b:1b:8d:12:78:de:0e:
d0:4c:a5:5f:dd:c1:6e:f9:1a:97:c5:a7:68:ab:48:32:75:4f:
67:e8:2d:94:eb:e7:50:f6:73:5d:23:ea:53:a0:76:42:82:33:
54:9f:d1:b2
-----BEGIN CERTIFICATE-----
MIII8TCCB9mgAwIBAgISAZOWB8DC/kBpDYzPhwe6Pu8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjQxMjA1MDg1NTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTk1NGU5NGJiZDJjOTM5ZDNmYjUzYzMxYTE2NTg1ZGQ4NDQ2OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1srWkpmUWbe+2sUjaWRVrU1zSUv
HROeor2wy8fhp4Ir5gOEjoBz2PDYv3i2cdFyXOVIQZ54jLHMWujBTQ6WZFGqxGlV
pfwk+T+LgIKC/LMMxwBM7EPKR8WqjQqJiLLBz0qLFfQZ8LMScoKLZqnF7xNX6HQ3
5PglR9rN4878A1IVju6yJob839G8spuk+II+2nGfEAmKhFPmZMrNK21E79pDizTj
wG8kqrHT8nE4T4bn0Pq8UC8yLxMzQDFDhzriikA5Cr+u98/nTOB+jiU97DDMIVZQ
W74jJBqMy43qhb+xrtMJwVjD6f4AhX2jiFWZ30XEVzcOgSKFJ75i/nd9gwIDAQAB
o4IF/TCCBfkwHQYDVR0OBBYEFPqVTpS70sk50/tTwxoWWF3YRGkqMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvMS1wVk9sTHZTeVRuVC0xUERHaFpZWGRoRWFTby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjAvNDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdk
MS8xL3VtN1EtM3N5Q0RLc0ZZQlRUSHNtUHpCT21Ccy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCBBAGCCsGAQUFBwEHAQH/BIID/zCCA/swggOgBAIAATCC
A5gDBAUFI+ADBAUFrwADBAMletADBAMllMgDBAMlyGADBAUuIOADBAQuo0ADBAIu
o1QDBAIuo2AwDAMEAy6jaAMEAy6jcAMEBC78EAMEBC78wAMEAD5LhjAMAwQAPkuN
AwQAPkuYMAwDBAA+S5sDBAU+S4ADBAI+S6gDBAA+S60DBAA+S68DBAA+S7EDBAM+
S7gDBAI+S9ADBAY+ioADBANNW+gDBANPqigDBARQQxADBARQWsAwDAMEB1DtgAME
AFDtggMEAVDthDAMAwQAUO2HAwQCUO2IMAwDBAFQ7Y4DBANQ7ZADBARQ7aADBAFQ
7cIDBABQ7dQDBAFQ7dYDBAFQ7fgwCwMEAFDt+wMDAVDsAwQEUPYwAwQEURVAMAsD
AwBTqQMEBFOpIAMEAlOpNAMEAVUZEAMEAlUZqAMEA1V3mDALAwMBV+YDBAJX5iAw
DAMEA1fmKAMEAVfmMDAMAwQCV+Y8AwQAV+ZAMAwDBAFX5kIDBANX5kAwDAMEAlfm
TAMEAVfmUDAMAwQCV+ZUAwQFV+ZAAwQCV+ZoMAwDBAFX5m4DBANX5nADBABX5n4D
BAVYUMADBARbbQADBANb+kAwDAMEBFv6UAMEAlv6WAMEA1v6YDAMAwQCW/psAwQH
W/oAAwQDXCsQMAwDBAdcM4ADBANcM5ADBANcM6ADBABcM6oDBAJcM7QDBARcPHAD
BANdXJADBANdtJgDBANdu+gDBAVeiCADBANex/ADBANtRCADBAVtaEADBARt7zAD
BAONABADBASS/yAwCwMDArAcAwQDsBwQMAwDBAWwHCADBAKwHDgDBACwHD4DBAOw
IOADBAOw3SgwDAMEBrJNQAMEA7JNUDAMAwQFsk1gAwQDsk1wAwQAsk18AwQCuQKA
AwQCuQf4AwQCuRVkAwQCuSLUAwQCuVUwAwQCuYtIAwQDvF0IAwQFvHkgAwQAwRER
AwQAwYpgAwQBwpHAAwQBw4nUAwQCw+FoMAwDBADUKKEDBAHUKKQDBADUKKcwDAME
ANQoqQMEAdQorDAMAwQA1CixAwQA1Ci0AwQB1Ci4MAwDBADUKLsDBAbUKIADBAXU
MEADBAXUQ8ADBATZCPADBAPZc4AwDAMEANlzjQMEBNlzgDAMAwQA2XORAwQC2XOQ
AwQD2XOYMAwDBADZdzEDBADZdzIDBADZdzYDBADZdzgwDAMEBdmsoAMEANmsogME
ANmspAMEBdnHoDBVBAIAAjBPAwcAIAEGfAMIAwUAIAEVIAMFACABTQgDBQAqABFY
AwUDKgARaAMFACoAHngDBQAqAQSIAwUAKgIE6AMFACoCBxgDBQAqAkbAAwUCKgRP
wDANBgkqhkiG9w0BAQsFAAOCAQEAgzA+xLuYp3TrySjWSj9Q0LeInbgTe+3I1d9p
FunBcYX1RoDxTykjHLm/dhi2qSpJbDhXrd4SBLJEYvQfx4s0aixEQj/Xz1ClXo44
lpw1OC2HLeYoegULF7aCJdMf2xhdm/9CxO3/Re6tt7Z9pN76KMQw55L7dPc050vn
4fLABbKeXEq4GYh6QwXrx53/MfWdcNZN/rilsHzHwKR+zmH9OJy3pWBm3sqjuQqv
Vr0HyO+DQ9+ugo/be+VeuqzGuVOHDu1S9US46+qrv3WtKOw6aFY7G40SeN4O0Eyl
X93Bbvkal8WnaKtIMnVPZ+gtlOvnUPZzXSPqU6B2QoIzVJ/Rsg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:01 2025 by rpki-client