Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MBsZdbo0pasWtwGiOSZsFyclv1Y.roa
File: MBsZdbo0pasWtwGiOSZsFyclv1Y.roa (raw, json)
Hash identifier: s/8ylhtZTZWVHB8OYzIcETD858ZB4TFbzzWtdp5sfdU=
Subject key identifier: 30:1B:19:75:BA:34:A5:AB:16:B7:01:A2:39:26:6C:17:27:25:BF:56
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445252990B48AC04C2B434EA27B0C5D
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MBsZdbo0pasWtwGiOSZsFyclv1Y.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.227.0/24 maxlen: 24
91.242.236.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
93.177.105.0/24 maxlen: 24
93.177.107.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.108.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
185.198.153.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.148.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:25:29:90:b4:8a:c0:4c:2b:43:4e:a2:7b:0c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301b1975ba34a5ab16b701a239266c172725bf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:bf:35:96:a4:80:a5:e5:6a:76:06:95:de:
c2:e0:53:13:5c:6c:6e:5a:c6:f2:e6:19:92:97:22:
42:32:d5:a3:1f:6c:d9:9c:da:d5:a1:fc:b1:28:84:
da:cf:bc:b7:d5:38:2a:83:6f:0e:68:c2:16:02:aa:
8e:85:90:cb:ed:a3:e7:3f:2b:ff:ad:d9:61:1a:bf:
af:b5:fc:5d:a0:df:d7:a1:d3:c0:7c:33:53:d3:06:
b9:4d:61:99:41:cc:5e:b9:a5:42:5d:de:ea:c2:58:
79:5c:e1:55:d5:69:75:51:ad:9a:52:fb:ce:af:3a:
88:49:18:d7:62:b6:69:5c:6f:5e:74:3b:1b:37:ab:
f7:ef:03:59:65:89:22:31:e6:f8:aa:55:71:51:39:
86:cf:7a:1e:88:e8:75:8a:24:d9:65:69:31:f1:45:
48:07:c0:91:77:bd:90:59:95:bb:bd:3f:27:2e:7a:
e0:c1:09:99:bd:9e:04:30:2f:ee:a5:da:7d:0a:1a:
c2:46:4b:49:b6:0c:58:d2:f9:8c:9c:05:59:21:ac:
de:50:f6:16:81:e3:53:3c:ff:00:69:22:44:f7:78:
31:a4:54:7b:5e:31:50:e6:b1:2a:29:8a:9f:7c:a7:
53:03:7a:4c:e7:1c:0f:2f:f5:48:3a:96:d7:33:01:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1B:19:75:BA:34:A5:AB:16:B7:01:A2:39:26:6C:17:27:25:BF:56
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MBsZdbo0pasWtwGiOSZsFyclv1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
45.132.48.0/24
45.157.136.0/24
62.68.83.0/24
62.68.86.0/23
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.45.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.226.247.0/24
91.242.225.0/24
91.242.227.0/24
91.242.236.0/24
91.242.238.0/24
93.177.104.0/23
93.177.107.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.108.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.185.0/24
146.19.187.0/24
146.19.190.0/24
146.19.194.0/24
176.56.37.0-176.56.38.255
178.211.140.0/24
185.122.206.0/24
185.155.101.0/24
185.198.153.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0-195.64.110.255
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.136.0/24
195.96.146.0/24
195.96.148.0/24
195.96.155.0/24
195.96.157.0/24
212.18.96.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d0:9c:c6:ac:04:0a:36:90:f3:96:08:3f:b0:d0:70:38:d2:
a8:8f:bc:13:01:d5:ae:b3:12:6a:e2:83:1e:ca:6b:75:e9:b1:
bc:f0:ad:fa:13:b3:b2:4c:55:13:a1:72:2c:9c:0e:e4:40:94:
4d:9b:a7:a5:26:b1:bb:b1:73:2a:79:f9:d2:e5:87:d1:30:ea:
30:07:d5:2d:9d:f0:7e:9b:ec:72:60:24:d7:b1:27:4f:3a:4c:
55:6f:d1:59:be:e4:c0:9e:97:ab:0b:58:dd:5e:cd:51:9e:ad:
b8:35:d3:1f:ca:fe:89:fa:cb:f0:7c:ae:31:d4:c8:0e:ff:c0:
85:9a:a2:97:92:34:0a:44:9f:aa:c5:16:1e:d0:80:28:aa:fa:
60:f4:dc:91:dd:f0:76:6b:cc:b9:4f:47:f1:07:bb:dc:a2:a7:
75:4d:27:32:45:db:1c:1c:68:2c:de:f9:fd:86:fc:56:d8:d8:
58:e6:87:48:29:01:a0:ed:f3:70:a8:3e:07:b3:8b:71:be:f2:
fd:62:06:99:b1:9c:99:2c:ba:f1:66:f8:55:21:94:4d:d4:c4:
55:0b:2f:44:fa:83:56:d9:86:cf:ed:b5:bb:48:25:e9:97:9e:
f4:7f:1f:c9:2b:44:0c:2b:a1:dc:38:c0:1d:57:4d:34:b3:92:
be:2f:0e:e5
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgISAZQkRSUpkLSKwEwrQ06iewxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFiMTk3NWJhMzRhNWFiMTZiNzAxYTIzOTI2NmMxNzI3MjViZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKO/NZakgKXlanYGld7C4FMTXGxu
Wsby5hmSlyJCMtWjH2zZnNrVofyxKITaz7y31Tgqg28OaMIWAqqOhZDL7aPnPyv/
rdlhGr+vtfxdoN/XodPAfDNT0wa5TWGZQcxeuaVCXd7qwlh5XOFV1Wl1Ua2aUvvO
rzqISRjXYrZpXG9edDsbN6v37wNZZYkiMeb4qlVxUTmGz3oeiOh1iiTZZWkx8UVI
B8CRd72QWZW7vT8nLnrgwQmZvZ4EMC/updp9ChrCRktJtgxY0vmMnAVZIazeUPYW
geNTPP8AaSJE93gxpFR7XjFQ5rEqKYqffKdTA3pM5xwPL/VIOpbXMwEtjQIDAQAB
o4IDtzCCA7MwHQYDVR0OBBYEFDAbGXW6NKWrFrcBojkmbBcnJb9WMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvTUJzWmRibzBwYXNXdHdHaU9TWnNGeWNsdjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBywYIKwYBBQUHAQcBAf8EggG6MIIBtjCCAbIEAgABMIIB
qgMEAQI4cAMEAAW3gAMEAB/e+AMEAC2EMAMEAC2diAMEAD5EUwMEAT5EVgMEAD7M
JAMEAD7MOQMEAD7pIwMEAD7pLQMEAD7pMQMEAD7pOAMEAD7pPAMEAFBEkQMEAFBE
njAMAwQAUFvRAwQAUFvSAwQAW9V1AwQAW+L3AwQAW/LhAwQAW/LjAwQAW/LsAwQA
W/LuAwQBXbFoAwQAXbFrAwQAXo/iAwQAXp6/AwQAgsFPAwQAgv+pAwQAkhNsAwQA
khOJAwQAkhOUAwQAkhOWAwQAkhOYAwQAkhO5AwQAkhO7AwQAkhO+AwQAkhPCMAwD
BACwOCUDBACwOCYDBACy04wDBAC5es4DBAC5m2UDBAC5xpkDBAC52gEDBAC56C8D
BADBAxYDBADBjTUDBADB79EDBADCGtgDBADCGt0DBADCIPMDBADDQGowDAMEAMNA
bQMEAMNAbgMEAMNAcAMEAMNAcgMEAMNAdQMEAMNd+QMEAMNgiAMEAMNgkgMEAMNg
lAMEAMNgmwMEAMNgnQMEANQSYAMEANQSZwMEANQ0BQMEANlyIAMEANl3gjANBgkq
hkiG9w0BAQsFAAOCAQEAgNCcxqwECjaQ85YIP7DQcDjSqI+8EwHVrrMSauKDHspr
demxvPCt+hOzskxVE6FyLJwO5ECUTZunpSaxu7FzKnn50uWH0TDqMAfVLZ3wfpvs
cmAk17EnTzpMVW/RWb7kwJ6XqwtY3V7NUZ6tuDXTH8r+ifrL8HyuMdTIDv/AhZqi
l5I0CkSfqsUWHtCAKKr6YPTckd3wdmvMuU9H8Qe73KKndU0nMkXbHBxoLN75/Yb8
VtjYWOaHSCkBoO3zcKg+B7OLcb7y/WIGmbGcmSy68Wb4VSGUTdTEVQsvRPqDVtmG
z+21u0gl6Zee9H8fyStEDCuh3DjAHVdNNLOSvi8O5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:13 2025 by rpki-client