Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/3Ot6z0YMDiKIgltHtZvRoCdXVm8.roa
File: 3Ot6z0YMDiKIgltHtZvRoCdXVm8.roa (raw, json)
Hash identifier: pglCfIV+xFgXA2zllaPep7C8OxGOUzawMIAWYIbJbxY=
Subject key identifier: DC:EB:7A:CF:46:0C:0E:22:88:82:5B:47:B5:9B:D1:A0:27:57:56:6F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018B7032999BF0DE4CB1C0CE4ABC0224A143
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/3Ot6z0YMDiKIgltHtZvRoCdXVm8.roa
Signing time: Fri 27 Oct 2023 08:14:06 +0000
ROA not before: Fri 27 Oct 2023 08:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20773
IP address blocks: 176.32.224.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
93.187.232.0/21 maxlen: 24
92.60.112.0/20 maxlen: 24
5.175.0.0/19 maxlen: 24
188.121.32.0/19 maxlen: 24
88.80.192.0/19 maxlen: 24
80.67.16.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
85.25.168.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
85.119.152.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.221.40.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
94.199.240.0/21 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.164.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
217.199.160.0/19 maxlen: 24
77.91.232.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
185.85.48.0/22 maxlen: 24
92.51.144.0/21 maxlen: 24
85.25.16.0/23 maxlen: 24
93.92.144.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
80.246.48.0/20 maxlen: 24
62.138.128.0/18 maxlen: 24
178.77.124.0/24 maxlen: 24
109.239.48.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
46.252.16.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
80.90.192.0/20 maxlen: 24
109.104.64.0/19 maxlen: 24
178.77.80.0/21 maxlen: 24
95.131.64.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
178.77.64.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
46.163.96.0/22 maxlen: 24
80.237.130.0/24 maxlen: 24
62.75.208.0/22 maxlen: 24
80.237.128.0/23 maxlen: 24
46.163.104.0/21 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
79.170.40.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
185.2.128.0/22 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.248.0/23 maxlen: 24
5.35.224.0/19 maxlen: 24
80.237.252.0/22 maxlen: 24
217.8.240.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
217.115.152.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
217.115.146.0/23 maxlen: 24
91.250.88.0/22 maxlen: 24
87.230.32.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
87.230.40.0/21 maxlen: 24
91.250.96.0/21 maxlen: 24
176.28.16.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
185.34.212.0/22 maxlen: 24
91.250.108.0/22 maxlen: 24
176.28.32.0/20 maxlen: 24
87.230.64.0/24 maxlen: 24
185.21.100.0/22 maxlen: 24
87.230.60.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
91.109.0.0/20 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.66.0/23 maxlen: 24
185.7.248.0/22 maxlen: 24
176.28.48.0/21 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
91.250.64.0/21 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.141.0/24 maxlen: 24
81.21.64.0/20 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
37.122.208.0/21 maxlen: 24
62.75.168.0/22 maxlen: 24
46.163.64.0/20 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
46.163.84.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
176.28.56.0/22 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
176.28.62.0/24 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.142.0/23 maxlen: 24
87.230.126.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.40.187.0/24 maxlen: 24
212.67.192.0/19 maxlen: 24
141.0.16.0/21 maxlen: 24
83.169.32.0/20 maxlen: 24
109.68.32.0/21 maxlen: 24
83.169.52.0/22 maxlen: 24
37.148.200.0/21 maxlen: 24
83.169.0.0/19 maxlen: 24
2001:1520::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a04:4fc0::/30 maxlen: 48
2001:67c:308::/48 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:32:99:9b:f0:de:4c:b1:c0:ce:4a:bc:02:24:a1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Oct 27 08:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dceb7acf460c0e2288825b47b59bd1a02757566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:0f:54:56:ff:b0:dc:8c:ed:5e:b5:e8:fa:
70:0d:e3:1a:39:c3:3a:b8:35:fd:5d:38:ea:b3:0c:
9a:ed:70:e7:3c:d4:52:0c:a6:b5:10:e3:9d:1b:c1:
45:50:44:ce:28:c6:31:e6:d3:52:cb:8d:0b:a9:71:
ce:70:ef:9a:88:3f:f1:4a:fc:fe:9a:0d:50:27:fc:
d9:72:5f:57:de:2b:dd:c9:8e:79:90:bb:0f:73:0e:
42:36:de:45:6c:d4:2a:3f:22:dc:28:75:db:c0:fb:
7e:ea:5e:a0:97:26:e4:93:81:6b:fa:73:c0:81:36:
8c:4c:1e:3a:b3:c9:c0:2e:c8:d8:f5:ec:d1:f5:32:
16:96:50:bd:45:35:0c:dd:86:64:d5:2e:0c:c6:df:
f3:78:b1:f5:f5:94:be:72:e8:f2:63:69:fa:51:9c:
47:d8:26:00:06:09:a1:c7:25:5a:17:4f:10:94:85:
0c:c2:1e:df:83:52:80:7c:b8:8d:b4:b7:42:66:6e:
dc:df:45:ed:c1:0e:47:fa:13:46:ce:1b:53:6a:3b:
4f:a9:03:6c:83:da:c9:02:00:21:4c:62:ae:e4:4e:
5c:1e:58:09:0a:b2:49:ad:ba:1c:ea:1b:1b:98:0b:
59:29:32:07:29:1e:70:ea:73:53:37:ce:f0:a1:a4:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:7A:CF:46:0C:0E:22:88:82:5B:47:B5:9B:D1:A0:27:57:56:6F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/3Ot6z0YMDiKIgltHtZvRoCdXVm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
79.170.40.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
95.131.64.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
80:cf:01:31:9e:f8:0e:96:17:dc:48:58:aa:8d:e6:79:9c:67:
5a:c0:8e:76:9c:b0:57:e4:1d:7a:6f:73:9d:56:8a:ac:2f:4a:
42:23:f9:2f:4e:d9:41:e6:d1:4d:3f:72:8f:f5:25:83:33:6f:
d6:9b:0d:b6:1b:00:8f:d0:7f:ad:6b:f3:17:ac:c9:ee:ba:16:
fb:6f:10:7a:ac:4f:26:6e:40:19:80:d9:b0:28:a5:66:bf:96:
f2:d0:e9:54:34:8c:5d:9a:d9:9a:1d:29:51:cb:4f:ae:7e:29:
03:7b:f4:98:79:2b:79:bf:a6:70:77:35:6f:d1:16:b1:aa:f9:
2e:f0:45:03:ed:a6:14:4f:1d:cb:be:94:0a:94:5e:42:8d:a2:
e5:af:ac:84:a7:8e:a0:43:80:b4:75:28:17:78:0b:70:fa:96:
0c:e0:6f:d3:cf:dd:b5:0e:58:5c:5d:fc:cc:49:b3:33:db:22:
e1:53:b1:90:e5:a5:3a:5e:72:20:e6:cd:64:60:6f:72:1c:33:
bd:29:c6:33:1e:a5:0a:53:79:d8:50:3f:08:10:1a:53:db:af:
12:b5:90:af:f4:85:69:25:1b:d8:46:70:47:82:72:59:98:c1:
a8:c9:2c:b8:f2:ea:c8:89:5a:55:6a:5e:d0:44:c4:e5:9b:a4:
24:de:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:32 2025 by rpki-client