Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa
File: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (raw, json)
Hash identifier: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=
Subject key identifier: F4:75:43:50:96:0B:D8:0E:40:05:FB:89:D4:7B:FE:D1:C1:35:25:D1
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019425FD6BC14243A7AFB65A1BC432AAB394
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 5.62.152.0/21 maxlen: 32
31.14.26.0/24 maxlen: 32
46.102.105.0/24 maxlen: 32
77.81.92.0/22 maxlen: 32
79.139.80.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
86.105.241.0/24 maxlen: 32
86.106.176.0/23 maxlen: 32
89.32.125.0/24 maxlen: 32
89.37.58.0/24 maxlen: 32
89.38.234.0/24 maxlen: 32
89.40.41.0/24 maxlen: 32
89.40.81.0/24 maxlen: 32
89.40.164.0/23 maxlen: 32
89.47.43.0/24 maxlen: 32
89.104.122.0/23 maxlen: 32
89.223.22.0/23 maxlen: 32
91.92.22.0/23 maxlen: 32
91.92.138.0/24 maxlen: 32
91.92.178.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
91.192.212.0/22 maxlen: 32
92.114.60.0/22 maxlen: 32
92.114.81.0/24 maxlen: 32
92.114.110.0/24 maxlen: 32
92.255.0.0/24 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
92.255.80.0/24 maxlen: 32
92.255.81.0/24 maxlen: 32
92.255.82.0/24 maxlen: 32
92.255.83.0/24 maxlen: 32
93.113.52.0/23 maxlen: 32
93.114.84.0/24 maxlen: 32
93.115.4.0/23 maxlen: 32
93.115.36.0/24 maxlen: 32
93.119.193.0/24 maxlen: 32
94.139.56.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
94.139.224.0/20 maxlen: 32
94.176.0.0/23 maxlen: 32
94.176.132.0/23 maxlen: 32
94.176.150.0/24 maxlen: 32
94.177.6.0/23 maxlen: 32
94.177.14.0/23 maxlen: 32
94.177.23.0/24 maxlen: 32
110.238.192.0/19 maxlen: 32
110.239.208.0/22 maxlen: 32
110.239.212.0/22 maxlen: 32
110.239.216.0/21 maxlen: 32
119.12.176.0/20 maxlen: 32
119.12.192.0/21 maxlen: 32
119.12.200.0/21 maxlen: 32
176.126.198.0/23 maxlen: 32
176.126.204.0/24 maxlen: 32
176.223.104.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
180.149.0.0/20 maxlen: 32
180.149.16.0/20 maxlen: 32
180.235.160.0/20 maxlen: 32
185.66.136.0/22 maxlen: 32
188.94.84.0/22 maxlen: 32
188.208.108.0/24 maxlen: 32
188.208.116.0/24 maxlen: 32
188.210.254.0/24 maxlen: 32
188.211.24.0/23 maxlen: 32
188.211.234.0/24 maxlen: 32
188.212.136.0/21 maxlen: 32
188.214.81.0/24 maxlen: 32
188.215.76.0/23 maxlen: 32
188.240.48.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
188.241.56.0/23 maxlen: 32
188.241.200.0/21 maxlen: 32
188.241.249.0/24 maxlen: 32
193.56.24.0/23 maxlen: 32
193.56.26.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6b:c1:42:43:a7:af:b6:5a:1b:c4:32:aa:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4754350960bd80e4005fb89d47bfed1c13525d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:83:8b:a8:97:fb:b1:1f:68:a5:bb:55:0d:
87:30:25:44:98:7c:db:7e:1e:dd:58:e3:37:92:d5:
65:b3:2d:d4:62:8b:f7:ce:21:92:08:65:6c:95:98:
69:9c:23:4e:c1:6c:f8:90:4d:2c:27:e9:86:c0:4e:
67:11:ec:3f:d4:44:d6:2a:8c:ec:68:7a:df:28:6b:
15:87:97:20:db:23:a3:ab:e4:f5:2a:c7:ad:c4:f7:
59:98:a0:45:c1:b6:08:95:ef:d5:56:ac:17:37:49:
4f:b5:99:2f:61:21:f5:a7:82:57:5d:b1:b7:a4:e9:
0b:14:e3:a5:53:da:1f:54:e1:5b:1f:50:c3:e1:d1:
2f:57:92:8e:8a:07:21:5b:f5:d9:60:03:37:6a:89:
9e:27:b4:7e:05:fd:6a:d5:05:26:a0:98:9c:54:a8:
ba:24:96:36:14:9b:be:5f:6d:0a:57:a4:ae:6b:b4:
3b:cd:25:78:46:25:63:0d:28:21:9b:93:b2:34:eb:
9c:6b:bc:3d:9d:c3:6f:f0:86:4a:0b:18:4e:ec:ca:
42:76:89:d0:41:27:be:63:50:02:5b:3e:0f:d9:93:
1c:84:b6:36:98:db:43:c3:17:6e:7e:29:2f:43:47:
db:c3:d4:2b:2d:5a:ee:84:f6:cd:fb:c5:cd:79:c2:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:43:50:96:0B:D8:0E:40:05:FB:89:D4:7B:FE:D1:C1:35:25:D1
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.152.0/21
31.14.26.0/24
46.102.105.0/24
77.81.92.0/22
79.139.80.0/23
85.217.220.0/23
86.105.241.0/24
86.106.176.0/23
89.32.125.0/24
89.37.58.0/24
89.38.234.0/24
89.40.41.0/24
89.40.81.0/24
89.40.164.0/23
89.47.43.0/24
89.104.122.0/23
89.223.22.0/23
91.92.22.0/23
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.114.110.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.84.0/24
93.115.4.0/23
93.115.36.0/24
93.119.193.0/24
94.139.56.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.132.0/23
94.176.150.0/24
94.177.6.0/23
94.177.14.0/23
94.177.23.0/24
110.238.192.0/19
110.239.208.0/20
119.12.176.0-119.12.207.255
176.126.198.0/23
176.126.204.0/24
176.223.104.0/22
176.223.182.0/23
180.149.0.0/19
180.235.160.0/20
185.66.136.0/22
188.94.84.0/22
188.208.108.0/24
188.208.116.0/24
188.210.254.0/24
188.211.24.0/23
188.211.234.0/24
188.212.136.0/21
188.214.81.0/24
188.215.76.0/23
188.240.48.0/23
188.241.15.0/24
188.241.56.0/23
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8a:77:f7:6d:94:72:bb:91:4a:32:7f:7d:64:25:87:66:e1:
33:1c:ce:79:d0:04:3c:b2:6e:80:c9:a2:c6:82:31:06:61:c0:
e2:06:8f:8e:a5:69:64:46:af:ad:d2:ee:c6:3c:af:c9:0b:fa:
fa:15:50:6e:7d:cb:3d:42:ac:a3:ae:e1:ec:2c:9e:85:c0:8b:
a5:0d:07:e4:dd:17:92:dc:99:66:f7:d0:03:b6:e7:90:3c:6f:
43:22:02:be:07:51:fd:8c:16:15:3c:97:9e:e4:96:9e:cc:a0:
b1:72:d5:b8:cc:36:48:c8:9d:51:75:5a:d3:33:6a:b1:57:ac:
92:21:d0:c5:de:33:80:a7:7c:99:d6:91:00:c6:8a:36:87:90:
a6:ee:c6:8e:30:8e:5d:c8:04:78:e6:c6:24:f1:18:8e:2e:04:
e6:e6:c8:09:e4:9f:3e:ae:26:ad:b3:38:5c:1a:94:67:ac:f0:
26:4f:7d:50:1e:1f:df:00:88:27:36:47:d9:bf:ef:58:21:06:
91:3d:18:ad:da:39:78:7e:3d:be:b8:18:4e:ae:1e:aa:39:5a:
66:41:73:d6:1b:d1:49:8e:b0:c2:68:bf:be:c4:35:51:01:2c:
3b:dd:52:bc:4b:23:39:68:3a:64:09:5c:21:f2:db:75:fd:1a:
97:62:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:02:02 2025 by rpki-client