Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/KTeuRvKeDT5ZAX7oYAhcR62dnR0.roa
File: KTeuRvKeDT5ZAX7oYAhcR62dnR0.roa (raw, json)
Hash identifier: +Qf9uOwXlVmfvqchJo+eKpbw7OnWbz+eshNNrl5MOt8=
Subject key identifier: 29:37:AE:46:F2:9E:0D:3E:59:01:7E:E8:60:08:5C:47:AD:9D:9D:1D
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B64822155CC2A005C4C03DFB0654CE
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/KTeuRvKeDT5ZAX7oYAhcR62dnR0.roa
Signing time: Thu 02 Jan 2025 15:50:44 +0000
ROA not before: Thu 02 Jan 2025 15:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
77.91.232.0/21 maxlen: 24
79.170.40.0/21 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:48:22:15:5c:c2:a0:05:c4:c0:3d:fb:06:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2937ae46f29e0d3e59017ee860085c47ad9d9d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:c0:0c:05:5a:b4:ac:31:44:82:40:4a:91:
4b:d4:c0:cb:0b:63:18:18:c9:e3:d8:08:ac:f3:9f:
ae:28:b4:90:bd:26:72:08:27:8f:93:9b:74:1c:66:
b8:f8:c2:69:d1:5d:98:18:14:fe:2a:79:60:01:f0:
b6:04:e1:f2:e6:ba:b6:9b:ad:c3:ac:26:47:be:d8:
8a:46:ad:2a:1f:c8:29:1c:5d:b3:f2:82:eb:97:ac:
c2:46:fd:3e:2d:60:26:c7:68:de:b0:4f:5b:e8:51:
a0:f7:ee:47:a5:3a:39:5e:65:f0:3a:59:6d:8f:c6:
b8:ff:5c:d1:f4:2c:ed:a5:0f:a7:d6:4a:e1:47:14:
89:43:ee:b3:3c:48:58:04:da:c6:f2:af:37:2b:2a:
1a:cb:de:12:0c:0a:3c:1e:94:c2:8e:0c:f8:ff:3a:
92:28:92:8d:c8:d8:cc:7d:d7:fb:7e:03:61:d7:8c:
1d:14:f1:9e:a8:f8:6d:08:ca:5a:c7:04:05:00:7e:
5e:6c:61:2c:26:03:bd:1e:b7:41:f8:3a:2c:01:77:
43:29:85:16:85:64:46:6d:cc:5f:20:fe:03:50:c0:
96:26:7c:9a:4b:96:8d:9d:ef:cc:28:67:5a:51:d5:
97:a4:fe:6e:01:47:73:a2:34:54:60:65:0c:4d:22:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:AE:46:F2:9E:0D:3E:59:01:7E:E8:60:08:5C:47:AD:9D:9D:1D
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/KTeuRvKeDT5ZAX7oYAhcR62dnR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
79.170.40.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
6a:ef:e0:8b:ee:f1:ef:d2:0b:15:bd:ba:f7:f5:5a:4b:9a:ef:
76:fa:c4:e5:59:84:36:42:a2:c1:7e:8d:1a:36:d8:78:3e:fa:
27:48:e9:8e:36:b5:8c:f1:f4:53:70:54:f8:a1:d3:03:3d:90:
c8:52:40:d3:a4:e3:6a:a1:dc:14:0c:a7:f9:e8:c0:0f:ee:9c:
5a:5c:6f:9e:89:7a:09:d7:df:8b:a5:19:ac:4a:0f:ea:12:28:
ed:ef:77:27:95:f8:f0:07:a1:f7:3e:6e:e3:ad:66:43:3d:11:
ea:58:df:70:34:03:e6:4e:a9:f0:4c:06:b0:e0:ea:53:52:29:
55:3a:3a:01:2f:8a:62:bc:37:d4:67:e4:64:c9:f9:9b:ca:91:
de:25:de:79:9f:3b:2e:0b:de:0b:15:67:2c:f7:7b:32:a3:15:
3a:07:52:68:98:62:9f:e5:7b:7c:dd:b3:c6:99:c2:13:0c:f5:
42:c5:5e:fb:ae:04:8e:31:c9:f7:c4:58:16:57:60:6d:42:f7:
27:e9:ef:4b:3a:1e:2a:0d:c2:55:88:19:30:f7:b4:3f:2e:cf:
42:64:8b:d1:42:6f:ab:fd:8f:c3:06:0b:54:91:f0:f8:31:41:
48:83:42:2f:7f:1e:43:a6:7d:18:a9:45:83:b7:ae:bd:20:ab:
63:9a:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:10 2025 by rpki-client