Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1cZKnGYKTu9X8s2azzvR7jvla1U.roa
File: 1cZKnGYKTu9X8s2azzvR7jvla1U.roa (raw, json)
Hash identifier: TGeKCUBXs5CgRyWN5AuOSiJ4t7nWlg1JohQ0QbKVMVM=
Subject key identifier: D5:C6:4A:9C:66:0A:4E:EF:57:F2:CD:9A:CF:3B:D1:EE:3B:E5:6B:55
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194360A67F9EDE34B5AD4CEB6981AA80E6E
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1cZKnGYKTu9X8s2azzvR7jvla1U.roa
Signing time: Sun 05 Jan 2025 10:37:19 +0000
ROA not before: Sun 05 Jan 2025 10:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.192.0/20 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.208.0/21 maxlen: 24
37.114.216.0/22 maxlen: 24
37.114.220.0/22 maxlen: 24
37.114.224.0/22 maxlen: 24
37.114.225.0/24 maxlen: 24
37.114.228.0/22 maxlen: 24
37.114.232.0/21 maxlen: 24
37.114.240.0/22 maxlen: 24
37.114.244.0/22 maxlen: 24
37.114.246.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.252.0/24 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
37.191.87.0/24 maxlen: 24
37.191.90.0/23 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.19.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/22 maxlen: 24
46.34.188.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
213.207.193.0/24 maxlen: 24
213.207.194.0/24 maxlen: 24
213.207.201.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:0a:67:f9:ed:e3:4b:5a:d4:ce:b6:98:1a:a8:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 5 10:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c64a9c660a4eef57f2cd9acf3bd1ee3be56b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:d1:13:96:dd:bb:a9:37:bb:55:a9:0f:f9:
0b:b5:53:84:1f:c7:5b:58:dc:98:65:8f:e3:d3:2a:
e1:72:90:48:e5:2f:7b:f2:ce:7c:2b:ee:4e:62:25:
99:49:f1:be:96:9b:25:46:ed:03:84:65:c0:6a:0c:
ca:d5:42:71:d1:1f:b8:d7:db:71:49:c2:67:22:a2:
51:85:ef:b7:62:86:9b:ea:f9:74:d8:40:d7:92:97:
66:41:7b:0c:36:9a:01:92:bd:41:74:5d:5d:c9:53:
f3:48:27:e0:e4:70:41:3c:cd:d3:db:0b:2c:86:e8:
24:69:4a:51:6b:90:c0:0b:e3:6b:34:e7:81:f0:88:
a5:6b:c8:f8:52:79:c8:09:37:9e:9a:62:82:9a:39:
df:87:42:f3:fb:67:cb:ad:b7:26:b6:e2:a6:8b:e8:
83:81:13:83:2b:ae:12:52:0f:26:97:99:fc:05:eb:
cb:f5:4c:bd:8b:e9:3e:4c:9d:cb:b1:80:10:5c:89:
fa:c2:7d:4b:cc:e7:72:4c:83:63:e3:4a:90:8f:b3:
24:1b:13:d6:4f:83:8f:99:e1:9c:30:20:16:62:8a:
03:1e:45:9e:56:b5:e3:f7:b1:f3:59:ce:82:51:56:
20:a0:b3:9d:e0:fb:e4:b3:b7:9c:5b:b7:f2:ca:80:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:4A:9C:66:0A:4E:EF:57:F2:CD:9A:CF:3B:D1:EE:3B:E5:6B:55
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1cZKnGYKTu9X8s2azzvR7jvla1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.87.0/24
37.191.90.0/23
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.148.0/24
188.136.158.0/24
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.203.255
188.136.208.0/23
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
89:88:d6:f2:6c:7d:de:55:42:b9:02:cd:85:a8:3c:ef:aa:20:
ef:0a:5b:36:0b:e3:29:2a:2f:f6:ad:87:f7:0d:dd:8d:3c:a0:
f5:08:27:2b:08:d6:67:94:04:67:09:d5:d6:f5:01:d8:42:e4:
67:94:c2:63:75:4e:48:b2:c0:89:14:25:4a:05:73:ef:5d:cc:
f5:d5:8b:66:8f:2a:52:15:75:0c:dd:6e:d0:ea:b8:bd:2d:3e:
12:54:47:42:b4:5e:16:19:49:ec:3a:8e:2e:2a:19:7f:a6:2d:
8e:85:12:e8:5b:5c:0d:e1:cf:d2:3c:e1:2c:bf:aa:83:4f:cc:
e5:9d:5d:3b:e1:b5:ce:17:13:5d:59:39:3d:6d:8a:85:e7:b3:
5c:76:8c:29:03:e8:86:2a:d0:cb:d5:4a:cb:88:61:a3:29:fa:
5b:33:3d:5b:d2:03:86:91:9b:e7:c7:46:ef:56:7a:10:d5:be:
27:72:c7:c4:e4:17:a2:49:11:39:0a:2c:8e:d4:d1:4d:38:22:
4b:ae:83:81:e3:de:e6:c2:0c:d9:af:06:51:fa:76:16:8e:66:
68:7d:85:1a:89:d4:b9:c7:59:fb:5f:c5:4c:61:29:5e:bc:64:
9c:36:65:d0:c7:53:f4:33:d4:6e:21:47:85:3c:d9:d1:40:38:
13:03:38:e2
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgISAZQ2Cmf57eNLWtTOtpgaqA5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjUwMTA1MTAzNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWM2NGE5YzY2MGE0ZWVmNTdmMmNkOWFjZjNiZDFlZTNiZTU2YjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsLRE5bdu6k3u1WpD/kLtVOEH8db
WNyYZY/j0yrhcpBI5S978s58K+5OYiWZSfG+lpslRu0DhGXAagzK1UJx0R+419tx
ScJnIqJRhe+3Yoab6vl02EDXkpdmQXsMNpoBkr1BdF1dyVPzSCfg5HBBPM3T2wss
hugkaUpRa5DAC+NrNOeB8Iila8j4UnnICTeemmKCmjnfh0Lz+2fLrbcmtuKmi+iD
gRODK64SUg8ml5n8BevL9Uy9i+k+TJ3LsYAQXIn6wn1LzOdyTINj40qQj7MkGxPW
T4OPmeGcMCAWYooDHkWeVrXj97HzWc6CUVYgoLOd4Pvks7ecW7fyyoAg1QIDAQAB
o4IEGjCCBBYwHQYDVR0OBBYEFNXGSpxmCk7vV/LNms870e475WtVMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvMWNaS25HWUtUdTlYOHMyYXp6dlI3anZsYTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICLgYIKwYBBQUHAQcBAf8EggIdMIICGTCCAgYEAgABMIIB
/gMEAx/Z0AMEBCUTUAMEBiVywAMEACW/VwMEASW/WgMEBiXdAAMEBCXrEAMEAi2A
jAMEAi2QfAMEAC4gBQMEAC4gCQMEAC4gDjAMAwQCLiKkAwQELiKgMAwDBAEuIrID
BAYuIoADBAFOnrYDBAJPhMgDBABPhNUwDAMEAE+E2QMEAU+E3AMEAFBHcTAMAwQB
UEd6AwQBUEd8AwQAUEd/AwQAUR3zAwQDUR34AwQEUVuQAwQBVm0gAwQCVm0kAwQA
Vm0pAwQBVm0uAwQAVm01AwQCVm04AwQBVm0+AwQBV/e0AwQEW7hAAwQDXD24AwQC
XHdEAwQEXougAwQDbeZAAwQEbeZQAwQAsN1BAwQAuQw+AwQCuRVMAwQCuR5MAwQC
uSjwAwQCuS28AwQCuUY8AwQBuVKkAwQCuVVEAwQAuWjkAwQCuYWYMAwDBAC5jukD
BAK5jugDBAK5rAADBAK5vhQDBAK5xUQDBAG50JYDBAC8S1wDBAC8S14DBAG8S2YD
BAC8S2sDBAG8S24wDAMEALxLcQMEAbxLdAMEAbxLegMEBbx5gAMEALyIlAMEALyI
njAMAwQBvIiuAwQBvIi8AwQCvIjAMAwDBAC8iMUDBAK8iMgDBAG8iNAwDAMEAryI
1AMEBbyIwAMEAtXDEAMEBNXPwAMEANlC0AMEANlC0zANBAIAAjAHAwUDKgwBADAN
BgkqhkiG9w0BAQsFAAOCAQEAiYjW8mx93lVCuQLNhag876og7wpbNgvjKSov9q2H
9w3djTyg9QgnKwjWZ5QEZwnV1vUB2ELkZ5TCY3VOSLLAiRQlSgVz713M9dWLZo8q
UhV1DN1u0Oq4vS0+ElRHQrReFhlJ7DqOLioZf6YtjoUS6FtcDeHP0jzhLL+qg0/M
5Z1dO+G1zhcTXVk5PW2KheezXHaMKQPohirQy9VKy4hhoyn6WzM9W9IDhpGb58dG
71Z6ENW+J3LHxOQXokkROQosjtTRTTgiS66DgePe5sIM2a8GUfp2Fo5maH2FGonU
ucdZ+1/FTGEpXrxknDZl0MdT9DPUbiFHhTzZ0UA4EwM44g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:53 2025 by rpki-client