Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cLo1DYpLMismaS1LF_LtUawxN-c.roa
File: cLo1DYpLMismaS1LF_LtUawxN-c.roa (raw, json)
Hash identifier: jlUR/AVGMCD2JlEmboMd66eYO3c2/c6QIz6dIPVI5aE=
Subject key identifier: 70:BA:35:0D:8A:4B:32:2B:26:69:2D:4B:17:F2:ED:51:AC:31:37:E7
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01946F56CAFAD3AAEB794AB1B636B1F6B185
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cLo1DYpLMismaS1LF_LtUawxN-c.roa
Signing time: Thu 16 Jan 2025 13:39:06 +0000
ROA not before: Thu 16 Jan 2025 13:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.88.0/24 maxlen: 24
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:56:ca:fa:d3:aa:eb:79:4a:b1:b6:36:b1:f6:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 16 13:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ba350d8a4b322b26692d4b17f2ed51ac3137e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:5a:6f:53:23:60:2e:5e:35:c4:40:e6:ab:
c5:e4:c7:5d:13:31:36:a0:c2:fb:fb:ec:4d:cd:51:
78:20:1e:17:af:1d:c2:07:6f:34:87:2a:f0:7d:cd:
39:d5:c2:8a:03:53:8c:c5:11:b8:c8:e6:bf:28:46:
e9:a4:e1:29:07:5b:d5:98:71:b9:ac:96:bb:c3:d5:
bc:cf:ee:50:ff:04:4e:88:08:11:ca:4a:2b:d8:8e:
d6:96:b2:39:ed:fb:f2:c5:ee:9f:5b:e5:e2:20:2f:
6d:48:2d:c7:b5:10:92:86:d2:2a:77:51:05:a6:68:
31:dd:aa:e9:d9:7c:76:41:2e:c1:5c:d6:c9:f4:0d:
36:8a:c0:b5:bf:36:71:44:53:8a:65:f1:92:8f:76:
b1:a5:00:69:70:45:3a:0c:80:a3:7b:77:94:ee:ea:
65:24:e0:a8:da:e4:30:69:a6:79:3a:12:ae:e2:ab:
eb:1e:22:c2:9e:28:28:ad:87:d9:74:b0:ce:45:f5:
e5:48:2a:01:8e:0d:88:43:64:a1:0e:41:e3:17:a1:
0f:f1:20:db:13:78:2e:15:11:40:35:6f:03:e4:36:
a2:2c:d6:f7:c2:37:66:ae:d5:81:95:d6:49:95:82:
0b:09:7d:99:be:2c:7c:d3:3e:5b:84:32:dd:32:de:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:35:0D:8A:4B:32:2B:26:69:2D:4B:17:F2:ED:51:AC:31:37:E7
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cLo1DYpLMismaS1LF_LtUawxN-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.8.0/24
93.120.27.0-93.120.30.255
93.120.48.0-93.120.71.255
93.120.75.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
109.207.140.0/23
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f5:83:e7:28:06:78:57:d9:89:7a:c6:4f:fa:31:75:33:67:
58:27:93:2a:84:5f:73:77:d3:7b:66:3a:e6:99:9c:89:d6:5a:
f1:d2:02:f9:61:19:49:c9:83:85:c5:2b:64:b6:90:c7:b3:35:
aa:33:64:44:1c:f9:50:74:c5:a7:5f:e4:3d:8d:9e:ed:15:b9:
6e:13:bf:65:7a:61:d1:26:60:43:ca:d2:ee:fb:25:da:0e:d1:
39:45:19:fd:d2:d4:c5:cd:90:63:aa:54:f5:b5:29:68:2a:59:
c8:09:fd:df:e1:9d:c8:a5:6e:69:35:77:51:2f:16:62:c9:58:
bc:26:49:4f:dc:df:1b:e3:1c:a5:32:48:70:f4:2d:8e:6d:d2:
e1:ef:a6:28:ae:9f:b5:c9:ef:55:87:9a:c2:47:f6:7d:59:74:
87:b8:9c:e7:dc:54:d5:d7:3d:97:ad:88:29:76:ed:fb:0b:5a:
21:7a:b7:dd:f5:57:a9:f3:57:1f:a9:b2:45:93:9e:88:85:70:
a7:36:9f:96:5d:bf:53:63:9a:17:d9:77:04:3f:44:f2:35:88:
61:e9:8b:c5:e6:b6:f6:06:89:60:07:be:f2:71:74:8b:d8:b0:
94:cb:2b:21:94:0e:cf:b5:be:30:b5:e5:06:f2:53:6d:60:59:
c9:25:a3:1f
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgISAZRvVsr606rreUqxtjax9rGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMTE2MTMzOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGJhMzUwZDhhNGIzMjJiMjY2OTJkNGIxN2YyZWQ1MWFjMzEzN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzZab1MjYC5eNcRA5qvF5MddEzE2
oML7++xNzVF4IB4Xrx3CB280hyrwfc051cKKA1OMxRG4yOa/KEbppOEpB1vVmHG5
rJa7w9W8z+5Q/wROiAgRykor2I7WlrI57fvyxe6fW+XiIC9tSC3HtRCShtIqd1EF
pmgx3arp2Xx2QS7BXNbJ9A02isC1vzZxRFOKZfGSj3axpQBpcEU6DICje3eU7upl
JOCo2uQwaaZ5OhKu4qvrHiLCnigorYfZdLDORfXlSCoBjg2IQ2ShDkHjF6EP8SDb
E3guFRFANW8D5DaiLNb3wjdmrtWBldZJlYILCX2Zvix80z5bhDLdMt7lOwIDAQAB
o4IEBzCCBAMwHQYDVR0OBBYEFHC6NQ2KSzIrJmktSxfy7VGsMTfnMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvY0xvMURZcExNaXNtYVMxTEZfTHRVYXd4Ti1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGwYIKwYBBQUHAQcBAf8EggIKMIICBjCCAgIEAgABMIIB
+gMEAh+DDAMEAx+FwAMEAB+HAQMEAB+HBwMEASVhejAMAwQBQCtCAwQDQCtAMAwD
BARAK1ADBAJAK1gDBANNJAgwDAMEAk0kHAMEAE0kHjAMAwQFTSQgAwQBTSQ0MAwD
BARNJFADBARNJGAwDAMEBk3owAMEA03o0AMEAk3o3AMEAlGhDAMEAVXMxAMEAVZo
hAMEAVkiSgMEAVkq6AMEAVksZAMEAVktXAMEAVkucAMEAVvhIgMEAVvlEAMEAFvl
HwMEAlvlnDAMAwQAW+ffAwQAW+fiAwQBW+gQAwQBW+kCAwQBW+nKAwQBW+qWAwQC
W+rcAwQCW+8AAwQAW++yAwQCW/CcAwQDW/WwAwQCW/a8AwQCW/bEAwQAXXgIMAwD
BABdeBsDBABdeB4wDAMEBF14MAMEA114QDAMAwQAXXhLAwQCXXhQMAwDBABdeFUD
BABdeFoDBAJdeFwDBANdeHADBAJdeHwDBAFtz4wDBACrGd8DBAOwYDgDBAOwYLAD
BAOwYZADBAOwYjgDBASwa0ADBACwbmoDBAGwbnIDBAOwbwADBAKwcFQDBAOwdCgD
BAOwdlgDBAOweWADBAOwfLAwDAMEArKflAMEBbKfgDAMAwQCuQnsAwQCuQnwAwQC
uWjEAwQCvL/4AwQAvNXpAwQAwQC+AwQDwSTAMA0GCSqGSIb3DQEBCwUAA4IBAQAU
9YPnKAZ4V9mJesZP+jF1M2dYJ5MqhF9zd9N7ZjrmmZyJ1lrx0gL5YRlJyYOFxStk
tpDHszWqM2REHPlQdMWnX+Q9jZ7tFbluE79lemHRJmBDytLu+yXaDtE5RRn90tTF
zZBjqlT1tSloKlnICf3f4Z3IpW5pNXdRLxZiyVi8JklP3N8b4xylMkhw9C2ObdLh
76Yorp+1ye9Vh5rCR/Z9WXSHuJzn3FTV1z2XrYgpdu37C1oherfd9Vep81cfqbJF
k56IhXCnNp+WXb9TY5oX2XcEP0TyNYhh6YvF5rb2BolgB77ycXSL2LCUyyshlA7P
tb4wteUG8lNtYFnJJaMf
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:22 2025 by rpki-client