Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oTPGJVYlb7GDuOecchScOtyVmK4.roa
File: oTPGJVYlb7GDuOecchScOtyVmK4.roa (raw, json)
Hash identifier: HxM+IsllX/8+gKO8ZDG7/ou6XQ0BBMHZq9SzkhezbL8=
Subject key identifier: A1:33:C6:25:56:25:6F:B1:83:B8:E7:9C:72:14:9C:3A:DC:95:98:AE
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0195607958B7CA401430DA314BC3E0A13233
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oTPGJVYlb7GDuOecchScOtyVmK4.roa
Signing time: Tue 04 Mar 2025 09:25:20 +0000
ROA not before: Tue 04 Mar 2025 09:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
77.91.232.0/21 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.205.160.0/19 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:79:58:b7:ca:40:14:30:da:31:4b:c3:e0:a1:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Mar 4 09:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a133c62556256fb183b8e79c72149c3adc9598ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:08:b4:5a:47:43:84:7f:fa:52:c5:12:61:
c2:a5:9e:93:41:01:1b:e0:35:84:74:56:10:74:e0:
96:9c:52:8d:0f:57:22:d3:49:86:6d:ec:ad:9d:9d:
7b:e9:68:c0:f9:14:8f:be:96:e4:e0:26:00:5e:cc:
70:87:ec:95:43:79:24:63:af:4c:64:c5:e1:65:b1:
e6:5d:0f:e0:0e:83:f9:44:a5:9f:cc:29:7d:08:8c:
d5:8b:53:ba:c9:8c:5c:56:36:98:06:79:ea:bf:36:
ad:12:ec:a2:0f:9e:c2:6d:7f:fc:57:ce:d6:23:ff:
61:78:d4:b6:41:e2:4f:31:c3:f5:5f:39:8d:02:a1:
0a:71:e0:b3:22:d7:e8:79:f6:27:a1:0f:cb:71:4e:
a3:61:9a:d6:61:ca:5f:59:0f:ea:be:bb:55:90:c2:
62:c7:19:49:dd:2e:f2:45:83:b4:f6:6d:a9:2b:1a:
fc:3f:59:aa:69:35:64:d0:68:ad:7d:f2:30:42:dc:
d9:f9:0a:1b:5f:8f:fc:8b:f7:7e:01:06:88:fb:d1:
02:fb:92:77:99:17:81:c4:c7:6e:65:af:e9:6b:7e:
4b:41:6e:a5:71:ce:dc:53:ab:55:f5:1c:4b:32:52:
5d:4a:30:68:f4:db:30:b4:58:09:28:25:83:b1:53:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:C6:25:56:25:6F:B1:83:B8:E7:9C:72:14:9C:3A:DC:95:98:AE
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oTPGJVYlb7GDuOecchScOtyVmK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
92.205.160.0/19
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
83:40:59:01:1a:53:a7:3d:0d:c4:31:22:9c:6d:3d:5c:29:38:
f2:f0:c1:ea:93:5a:a3:89:92:83:07:b0:f8:c6:70:af:bf:99:
a6:57:ed:18:d1:bd:45:66:9d:f8:67:ba:72:d9:fa:bb:10:1d:
a7:e6:ff:91:87:c8:df:3c:27:a4:89:c6:bd:9f:f7:5e:69:c8:
5d:98:a2:27:ee:6b:52:d9:29:36:1d:50:40:ad:e8:5a:de:1b:
ca:f9:9c:52:ee:73:1b:8f:68:19:68:a9:f7:72:e3:fa:3a:80:
a2:10:4b:4f:1b:0c:e9:44:8f:3a:b7:e4:06:a4:57:a4:a5:9f:
fc:5a:0b:33:26:c3:f1:73:83:6f:14:9f:1f:b5:35:a8:e7:ad:
c6:53:55:c0:c3:16:fc:27:20:37:df:71:cc:c7:82:52:ab:77:
2b:fd:6f:24:81:34:60:bb:9a:86:7c:52:75:2a:c8:52:42:70:
43:59:20:b9:99:31:3c:ed:71:87:60:1d:a7:72:d0:06:37:75:
01:6d:70:fa:b3:48:60:0e:3a:99:1f:68:29:b0:d1:46:dd:a0:
ed:f0:e9:28:2a:af:68:b6:b4:a1:fe:ca:0b:5e:df:fa:9e:26:
0f:ce:89:85:0c:04:06:e4:57:2a:c3:6f:94:91:85:5a:49:03:
43:30:06:94
-----BEGIN CERTIFICATE-----
MIII9jCCB96gAwIBAgISAZVgeVi3ykAUMNoxS8PgoTIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwMzA0MDkyNTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTMzYzYyNTU2MjU2ZmIxODNiOGU3OWM3MjE0OWMzYWRjOTU5OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvYItFpHQ4R/+lLFEmHCpZ6TQQEb
4DWEdFYQdOCWnFKND1ci00mGbeytnZ176WjA+RSPvpbk4CYAXsxwh+yVQ3kkY69M
ZMXhZbHmXQ/gDoP5RKWfzCl9CIzVi1O6yYxcVjaYBnnqvzatEuyiD57CbX/8V87W
I/9heNS2QeJPMcP1XzmNAqEKceCzItfoefYnoQ/LcU6jYZrWYcpfWQ/qvrtVkMJi
xxlJ3S7yRYO09m2pKxr8P1mqaTVk0GitffIwQtzZ+QobX4/8i/d+AQaI+9EC+5J3
mReBxMduZa/pa35LQW6lcc7cU6tV9RxLMlJdSjBo9NswtFgJKCWDsVNwNQIDAQAB
o4IGAjCCBf4wHQYDVR0OBBYEFKEzxiVWJW+xg7jnnHIUnDrclZiuMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvb1RQR0pWWWxiN0dEdU9lY2NoU2NPdHlWbUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIEFgYIKwYBBQUHAQcBAf8EggQFMIIEATCCA6YEAgABMIID
ngMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEA01b6AMEBFBDEAMEBFBawDAMAwQHUO2AAwQAUO2CAwQB
UO2EMAwDBABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDtwgMEAFDt
1AMEAVDt1gMEAVDt+DALAwQAUO37AwMBUOwDBARQ9jADBARRFUAwCwMDAFOpAwQE
U6kgAwQCU6k0AwQBVRkQAwQCVRmoAwQDVXeYMAsDAwFX5gMEAlfmIDAMAwQDV+Yo
AwQBV+YwMAwDBAJX5jwDBABX5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZMAwQBV+ZQ
MAwDBAJX5lQDBAVX5kADBAJX5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgMEBVhQwAME
BFttAAMEA1v6QDAMAwQEW/pQAwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb+gADBANc
KxAwDAMEB1wzgAMEA1wzkAMEA1wzoAMEAFwzqgMEAlwztAMEBFw8cAMEBVzNAAME
BVzNoAMEA11ckAMEA120mAMEA1276AMEBV6IIAMEA17H8AMEA21EIAMEBW1oQAME
BG3vMAMEA40AEAMEBJL/IDALAwMCsBwDBAOwHBAwDAMEBbAcIAMEArAcOAMEALAc
PgMEA7Ag4AMEA7DdKDAMAwQGsk1AAwQDsk1QMAwDBAWyTWADBAOyTXADBACyTXwD
BAK5AoADBAK5B/gDBAK5FWQDBAK5ItQDBAK5VTADBAK5i0gDBAO8XQgDBAW8eSAD
BADBEREDBADBimADBAHCkcADBAHDidQDBALD4WgwDAMEANQooQMEAdQopAMEANQo
pzAMAwQA1CipAwQB1CisMAwDBADUKLEDBADUKLQDBAHUKLgwDAMEANQouwMEBtQo
gAMEBdQwQAMEBdRDwAMEBNkI8AMEA9lzgDAMAwQA2XONAwQE2XOAMAwDBADZc5ED
BALZc5ADBAPZc5gwDAMEANl3MQMEANl3MgMEANl3NgMEANl3ODAMAwQF2aygAwQA
2ayiAwQA2aykAwQF2cegMFUEAgACME8DBwAgAQZ8AwgDBQAgARUgAwUAIAFNCAMF
ACoAEVgDBQMqABFoAwUAKgAeeAMFACoBBIgDBQAqAgToAwUAKgIHGAMFACoCRsAD
BQIqBE/AMA0GCSqGSIb3DQEBCwUAA4IBAQCDQFkBGlOnPQ3EMSKcbT1cKTjy8MHq
k1qjiZKDB7D4xnCvv5mmV+0Y0b1FZp34Z7py2fq7EB2n5v+Rh8jfPCekica9n/de
achdmKIn7mtS2Sk2HVBAreha3hvK+ZxS7nMbj2gZaKn3cuP6OoCiEEtPGwzpRI86
t+QGpFekpZ/8WgszJsPxc4NvFJ8ftTWo563GU1XAwxb8JyA333HMx4JSq3cr/W8k
gTRgu5qGfFJ1KshSQnBDWSC5mTE87XGHYB2nctAGN3UBbXD6s0hgDjqZH2gpsNFG
3aDt8OkoKq9otrSh/soLXt/6niYPzomFDAQG5Fcqw2+UkYVaSQNDMAaU
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:42 2025 by rpki-client