Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0HXJoeYWyiHmYtJOD6OxAeYbAII.roa
File: 0HXJoeYWyiHmYtJOD6OxAeYbAII.roa (raw, json)
Hash identifier: uR3TJ4B9MuB6aIj8D6QhCmRZKU7zNZZKd5rBurbIw+Q=
Subject key identifier: D0:75:C9:A1:E6:16:CA:21:E6:62:D2:4E:0F:A3:B1:01:E6:1B:00:82
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244528D263F741DC41285E9DF537EDF6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0HXJoeYWyiHmYtJOD6OxAeYbAII.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.1.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.68.85.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.211.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.226.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.163.20.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.227.0/24 maxlen: 24
194.104.229.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:28:d2:63:f7:41:dc:41:28:5e:9d:f5:37:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d075c9a1e616ca21e662d24e0fa3b101e61b0082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:f7:a2:f3:f7:74:4a:55:8a:96:95:2c:91:
d6:72:94:15:e3:29:e9:43:f5:73:63:63:e2:90:f6:
43:51:6f:c2:f2:bd:ea:03:3a:9a:3a:a4:6b:7c:0c:
dc:d9:2b:c5:60:ec:9a:5d:22:7d:d6:f0:1e:d0:d5:
53:53:c2:b6:7f:c0:5e:b6:f8:b9:ef:74:b1:be:c7:
cd:d3:7e:ba:e1:b5:1a:55:76:06:b8:99:89:6e:a5:
a1:f2:4c:5f:a3:a3:ce:31:0c:c2:47:2a:9b:d8:92:
70:c8:e0:91:9d:6c:02:c2:da:df:7d:b3:b3:5e:b6:
76:32:2b:fe:27:73:21:0a:9e:ff:43:3a:8b:45:e6:
28:fb:99:da:04:17:3a:f8:43:43:1f:dd:4e:4c:44:
da:c5:38:3f:d0:48:de:db:bb:08:b7:c0:ce:ce:f9:
9b:cf:c8:df:3c:74:27:77:e2:f1:90:a3:0b:e5:92:
05:91:ff:ef:32:a7:7e:fe:7d:7a:33:6e:1a:96:18:
fe:1f:0f:a5:c1:34:c0:58:41:1d:ff:12:d3:96:7f:
5e:c7:f8:de:e7:ba:0c:66:31:99:86:74:a3:3e:a0:
5d:38:60:3d:df:5d:db:7a:e6:88:f5:f9:67:aa:64:
d9:d2:c1:d8:8e:45:65:67:a9:bc:bb:dd:76:b7:57:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:C9:A1:E6:16:CA:21:E6:62:D2:4E:0F:A3:B1:01:E6:1B:00:82
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0HXJoeYWyiHmYtJOD6OxAeYbAII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.138.159.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.1.0-62.3.4.255
62.3.23.0/24
62.68.85.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.211.0-80.91.212.255
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.226.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.163.20.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.227.0/24
194.104.229.0/24
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:32:87:7e:37:8a:63:6d:e1:b5:16:2a:60:98:75:eb:b1:7d:
89:35:ea:7a:c3:cd:8d:8d:d2:9e:c9:cb:56:6a:98:c7:72:cf:
96:a5:4c:44:ab:f8:b8:3c:35:69:a9:30:a2:b6:2e:c4:dd:48:
3d:ef:ce:be:1d:e6:25:c0:eb:1e:d5:3d:3e:a5:09:56:7f:22:
24:b1:07:ae:e8:d1:91:b5:d4:43:57:83:f2:38:95:48:6a:57:
01:42:de:e9:e8:b5:31:f5:62:60:8e:75:64:96:c0:00:f4:a4:
40:8a:b5:82:89:cd:56:0b:66:1d:57:be:55:8b:ad:89:81:48:
f4:ad:a1:a2:4d:58:28:ae:03:90:ac:19:44:78:5f:0d:a9:85:
75:b7:31:b7:20:4c:8e:6e:9b:11:2d:ee:ec:aa:98:18:2a:b5:
c4:f7:fa:52:12:62:a8:87:88:dd:ad:ae:dc:29:45:ea:46:31:
d5:7f:6d:f8:ab:f6:cf:59:a1:92:2f:88:e0:d7:49:96:ba:07:
4b:62:4c:b1:80:24:27:62:bf:dc:ab:e1:a8:a2:e9:6c:33:31:
c2:98:fd:4d:84:44:e6:93:64:85:21:21:b9:39:16:5b:be:45:
0a:9c:cb:1c:9f:c6:02:0f:be:e4:c9:2e:a9:19:76:39:8b:d6:
2f:07:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:26:12 2025 by rpki-client