Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Grw7nIi6RKNyYj-gX0F5si2FPWg.roa
File: Grw7nIi6RKNyYj-gX0F5si2FPWg.roa (raw, json)
Hash identifier: P3/krGXIhVeYouYxQBpxzM61tb05ZyoVg+B5ZJUx//k=
Subject key identifier: 1A:BC:3B:9C:88:BA:44:A3:72:62:3F:A0:5F:41:79:B2:2D:85:3D:68
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D648B4ED43A0C5BDEA8B62E3DA87F2
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Grw7nIi6RKNyYj-gX0F5si2FPWg.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 37.188.128.0/17 maxlen: 17
37.188.128.0/21 maxlen: 21
37.188.136.0/21 maxlen: 21
37.188.144.0/20 maxlen: 20
37.188.144.0/21 maxlen: 21
37.188.152.0/21 maxlen: 21
37.188.160.0/20 maxlen: 20
37.188.160.0/21 maxlen: 21
37.188.168.0/21 maxlen: 21
37.188.176.0/20 maxlen: 20
37.188.176.0/21 maxlen: 21
37.188.184.0/21 maxlen: 21
37.188.192.0/23 maxlen: 23
37.188.194.0/23 maxlen: 23
37.188.224.0/21 maxlen: 21
37.188.232.0/21 maxlen: 21
37.188.240.0/20 maxlen: 20
37.188.240.0/21 maxlen: 21
37.188.248.0/21 maxlen: 21
80.188.0.0/16 maxlen: 16
80.188.0.0/17 maxlen: 17
80.188.40.0/24 maxlen: 24
80.188.128.0/17 maxlen: 17
80.188.222.0/24 maxlen: 24
81.90.160.0/20 maxlen: 20
81.90.168.0/24 maxlen: 24
81.90.170.0/24 maxlen: 24
81.90.173.0/24 maxlen: 24
83.69.32.0/19 maxlen: 19
83.208.0.0/16 maxlen: 16
83.208.0.0/18 maxlen: 18
83.208.64.0/18 maxlen: 18
83.208.128.0/19 maxlen: 19
85.70.0.0/15 maxlen: 15
85.70.0.0/16 maxlen: 16
85.70.0.0/17 maxlen: 17
85.70.128.0/17 maxlen: 17
85.71.0.0/16 maxlen: 16
85.160.0.0/15 maxlen: 15
85.193.0.0/18 maxlen: 18
88.83.160.0/19 maxlen: 19
88.83.175.0/24 maxlen: 24
88.100.0.0/14 maxlen: 14
88.100.0.0/15 maxlen: 15
88.102.0.0/15 maxlen: 15
88.102.0.0/16 maxlen: 16
90.176.32.0/19 maxlen: 19
90.176.64.0/18 maxlen: 18
90.176.128.0/17 maxlen: 17
90.177.0.0/16 maxlen: 16
90.178.0.0/15 maxlen: 15
90.180.0.0/14 maxlen: 14
90.182.6.0/24 maxlen: 24
90.182.108.0/24 maxlen: 24
90.183.72.0/24 maxlen: 24
90.183.76.0/24 maxlen: 24
90.183.77.0/24 maxlen: 24
90.183.78.0/24 maxlen: 24
92.243.192.0/19 maxlen: 19
109.80.0.0/15 maxlen: 15
109.81.112.0/20 maxlen: 20
109.81.160.0/20 maxlen: 20
109.81.208.0/24 maxlen: 24
109.81.209.0/24 maxlen: 24
109.81.210.0/24 maxlen: 24
109.81.211.0/24 maxlen: 24
109.81.212.0/24 maxlen: 24
109.81.213.0/24 maxlen: 24
109.81.214.0/24 maxlen: 24
109.81.215.0/24 maxlen: 24
160.218.0.0/16 maxlen: 16
160.218.13.0/24 maxlen: 24
185.61.228.0/22 maxlen: 22
194.228.0.0/16 maxlen: 16
194.228.0.0/17 maxlen: 17
194.228.11.0/24 maxlen: 24
194.228.13.0/24 maxlen: 24
194.228.20.0/24 maxlen: 24
194.228.32.0/24 maxlen: 24
194.228.59.0/24 maxlen: 24
194.228.68.0/24 maxlen: 24
194.228.72.0/22 maxlen: 22
194.228.76.0/24 maxlen: 24
194.228.79.0/24 maxlen: 24
194.228.128.0/17 maxlen: 17
217.117.208.0/20 maxlen: 20
217.194.160.0/20 maxlen: 20
2001:41d8::/32 maxlen: 32
2a00:1028::/29 maxlen: 29
2a00:1028::/32 maxlen: 32
2a00:1028:d::/48 maxlen: 48
2a02:9b8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:48:b4:ed:43:a0:c5:bd:ea:8b:62:e3:da:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1abc3b9c88ba44a372623fa05f4179b22d853d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:94:1d:95:02:71:20:d2:7c:ef:21:2a:56:
7a:69:26:9f:6c:a8:c1:e6:b4:ff:31:8c:35:28:c3:
5c:a5:63:39:e7:ca:16:a3:b6:7e:14:c1:02:77:3d:
7b:07:1c:38:67:d4:4a:93:79:b2:03:db:69:30:44:
0b:ef:c2:f0:2d:a8:70:59:cb:cd:8b:c4:21:94:69:
39:27:a7:90:28:64:05:02:02:01:0f:f8:a6:1a:25:
22:1d:59:11:a3:18:30:74:30:e3:ce:87:04:a0:ec:
aa:2c:78:e0:64:ab:01:ec:95:8a:4d:eb:12:f7:cc:
e7:b1:d1:75:85:49:90:69:f8:f3:50:27:58:e5:e5:
df:36:2d:21:82:41:66:9c:c4:2b:d3:4e:18:48:2c:
05:fa:92:31:2b:52:64:78:41:fb:0c:de:fc:05:21:
02:0e:c4:8b:87:39:31:7d:a2:e8:2e:9f:2f:89:50:
ad:7f:a5:62:45:07:02:bd:18:c5:73:86:4e:63:c2:
b7:e2:48:4a:fc:bf:99:f7:31:2b:fd:45:eb:01:2a:
d3:44:c3:52:c4:c5:69:7a:28:23:ec:31:6e:b3:3a:
7b:0a:60:b4:e0:4b:3e:95:33:49:5d:b2:14:20:f2:
19:ab:c6:67:f1:d3:16:c0:cd:33:b4:d9:f5:92:68:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:3B:9C:88:BA:44:A3:72:62:3F:A0:5F:41:79:B2:2D:85:3D:68
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Grw7nIi6RKNyYj-gX0F5si2FPWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.128.0/17
80.188.0.0/16
81.90.160.0/20
83.69.32.0/19
83.208.0.0/16
85.70.0.0/15
85.160.0.0/15
85.193.0.0/18
88.83.160.0/19
88.100.0.0/14
90.176.32.0-90.183.255.255
92.243.192.0/19
109.80.0.0/15
160.218.0.0/16
185.61.228.0/22
194.228.0.0/16
217.117.208.0/20
217.194.160.0/20
IPv6:
2001:41d8::/32
2a00:1028::/29
2a02:9b8::/31
Signature Algorithm: sha256WithRSAEncryption
1b:d8:0d:ca:c0:6e:22:2b:ff:c8:e2:59:a1:ab:28:b2:fd:a5:
ae:31:bb:8f:ec:13:f7:18:08:76:c8:9c:66:b2:38:6f:ad:2a:
d8:7a:2f:81:96:49:3a:a1:61:ae:99:e3:06:ee:ee:35:b1:69:
d7:ec:72:8d:73:47:eb:70:6a:ec:ed:fc:51:7e:5c:4d:88:ef:
88:ef:73:3f:35:74:0b:92:a2:1a:a7:09:7e:74:e1:49:08:13:
cd:7c:59:cc:9e:f2:54:49:26:58:a9:e6:33:d4:d2:0e:b0:82:
b8:e6:d8:ef:b2:5b:74:4f:35:d8:6f:1d:32:46:c1:94:ad:e5:
ef:cc:04:9c:fe:b7:d8:46:b2:75:43:1c:10:61:cc:1a:6b:de:
aa:69:44:52:42:d5:86:e0:72:41:66:19:73:26:9c:6d:21:47:
c7:e2:4a:ad:92:b1:0e:6e:27:af:fc:f4:c7:52:9d:11:5a:2f:
0c:9c:79:0e:4c:f3:97:d4:d8:6f:38:de:b4:e0:5e:97:a6:a0:
16:6f:88:5a:c8:e9:e7:89:93:3c:b3:20:da:66:7c:a7:80:00:
5f:96:ee:d2:eb:4d:f3:50:24:7f:10:00:99:8a:84:c5:14:6f:
2d:06:f9:fa:eb:44:3c:10:c3:37:1d:7a:bb:b0:4d:b1:e8:b2:
e2:c2:2b:0c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZQg1ki07UOgxb3qi2Lj2ofyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjUwMTAxMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWJjM2I5Yzg4YmE0NGEzNzI2MjNmYTA1ZjQxNzliMjJkODUzZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN2UHZUCcSDSfO8hKlZ6aSafbKjB
5rT/MYw1KMNcpWM558oWo7Z+FMECdz17Bxw4Z9RKk3myA9tpMEQL78LwLahwWcvN
i8QhlGk5J6eQKGQFAgIBD/imGiUiHVkRoxgwdDDjzocEoOyqLHjgZKsB7JWKTesS
98znsdF1hUmQafjzUCdY5eXfNi0hgkFmnMQr004YSCwF+pIxK1JkeEH7DN78BSEC
DsSLhzkxfaLoLp8viVCtf6ViRQcCvRjFc4ZOY8K34khK/L+Z9zEr/UXrASrTRMNS
xMVpeigj7DFuszp7CmC04Es+lTNJXbIUIPIZq8Zn8dMWwM0ztNn1kmjL+QIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFBq8O5yIukSjcmI/oF9BebIthT1oMB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvR3J3N25JaTZSS055WWotZ1gwRjVzaTJGUFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDBxBAIAATBrAwQHJbyA
AwMAULwDBARRWqADBAVTRSADAwBT0AMDAVVGAwMBVaADBAZVwQADBAVYU6ADAwJY
ZDALAwQFWrAgAwMDWrADBAVc88ADAwFtUAMDAKDaAwQCuT3kAwMAwuQDBATZddAD
BATZwqAwGwQCAAIwFQMFACABQdgDBQMqABAoAwUBKgIJuDANBgkqhkiG9w0BAQsF
AAOCAQEAG9gNysBuIiv/yOJZoasosv2lrjG7j+wT9xgIdsicZrI4b60q2HovgZZJ
OqFhrpnjBu7uNbFp1+xyjXNH63Bq7O38UX5cTYjviO9zPzV0C5KiGqcJfnThSQgT
zXxZzJ7yVEkmWKnmM9TSDrCCuObY77JbdE812G8dMkbBlK3l78wEnP632EaydUMc
EGHMGmveqmlEUkLVhuByQWYZcyacbSFHx+JKrZKxDm4nr/z0x1KdEVovDJx5Dkzz
l9TYbzjetOBel6agFm+IWsjp54mTPLMg2mZ8p4AAX5bu0utN81AkfxAAmYqExRRv
LQb5+utEPBDDNx16u7BNseiy4sIrDA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:42 2025 by rpki-client