Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YkryJoe5vfB64cwZx6-kL5rB2Q.roa
File: 5YkryJoe5vfB64cwZx6-kL5rB2Q.roa (raw, json)
Hash identifier: LrP2c5TM6zYpUwCEjpEIQgxCK9cOVsoxVja8/d51XcI=
Subject key identifier: E5:89:2B:C8:9A:1E:E6:F7:C1:EB:87:30:67:1E:BE:90:BE:6B:07:64
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195D41D631AF77CBDF3B0347194E7AC00DB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YkryJoe5vfB64cwZx6-kL5rB2Q.roa
Signing time: Wed 26 Mar 2025 20:20:50 +0000
ROA not before: Wed 26 Mar 2025 20:20:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.87.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:1d:63:1a:f7:7c:bd:f3:b0:34:71:94:e7:ac:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 20:20:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5892bc89a1ee6f7c1eb8730671ebe90be6b0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:81:c7:73:12:f6:ad:9e:c4:cd:6f:8d:63:
1b:14:06:e9:70:01:a9:49:45:eb:d1:61:4a:43:1e:
aa:ad:94:c8:7d:29:c6:bb:41:90:61:7e:e5:b0:c0:
81:78:23:48:82:d9:f7:4f:9a:cc:f1:fc:eb:2a:76:
d1:85:82:dd:67:f9:76:ca:e9:64:e9:b0:5a:12:55:
3d:7b:fd:12:d5:6a:9c:e4:45:6b:c0:47:21:60:0e:
14:a4:27:4a:88:aa:ca:45:15:33:3b:3f:97:91:71:
a8:73:e4:66:e6:c9:39:87:f3:ab:6b:89:8c:16:a4:
a2:38:ab:9a:1d:bd:68:64:9e:ee:c9:fa:56:46:d0:
dd:0e:7a:1c:22:84:d2:be:68:75:49:dd:13:1a:0b:
12:0c:56:2a:dd:8f:0e:46:e6:68:16:51:09:cd:72:
0a:d3:3b:00:8b:86:59:e5:d5:2b:ff:0e:d1:9d:31:
c2:87:99:ae:e9:51:c1:ab:00:79:fb:71:f1:93:89:
6f:f9:18:e2:77:8d:b1:05:48:0f:54:07:7a:d6:ba:
b0:ea:e0:6e:92:0a:1c:a0:7d:28:56:fa:18:0a:5f:
16:6e:48:e5:4d:05:8f:12:fa:08:18:ad:48:62:e5:
7d:2f:94:f5:9e:e4:21:f4:df:78:7a:49:43:27:08:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:2B:C8:9A:1E:E6:F7:C1:EB:87:30:67:1E:BE:90:BE:6B:07:64
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5YkryJoe5vfB64cwZx6-kL5rB2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.87.0/24
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
78:7f:26:7c:d7:c4:56:23:2d:05:7e:29:24:13:d3:83:b5:49:
ba:b2:55:32:54:0c:c9:b6:f5:b6:28:67:03:15:6b:5b:80:cc:
0c:d3:40:d8:5c:e3:58:8c:93:1e:20:85:60:d2:b4:10:4f:2f:
5c:f3:a7:33:63:b7:34:0b:84:2d:bf:72:57:ae:bc:47:bc:82:
d9:96:42:c2:a4:e6:1a:86:00:3f:34:25:f1:b7:f1:b9:33:40:
7b:c0:23:8b:ca:2b:33:06:da:f8:0d:4a:4c:a3:3e:88:fd:48:
71:5d:8d:7b:7d:47:da:de:9b:e3:56:d2:5f:e8:59:cd:12:c5:
af:f4:cc:f9:0e:6d:29:33:4d:5a:c6:8c:29:8f:5e:f7:df:14:
40:40:0a:48:e8:42:2c:93:cc:0f:94:0c:98:b8:47:4f:ad:24:
08:81:f9:16:df:c3:da:ae:6c:b1:3b:60:ef:fa:c1:2a:8b:04:
6b:3a:88:ab:70:82:07:d7:4d:63:88:d1:2e:09:72:21:fe:ee:
e3:e5:17:44:c5:0c:d2:c9:32:ed:09:fd:78:71:52:12:e5:4d:
a4:49:df:84:ae:44:03:d5:b4:aa:bb:36:d4:4b:b7:72:0e:f3:
0e:08:13:46:4e:7d:b5:a1:ce:18:89:71:fe:91:d7:6a:8b:7d:
7e:bb:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:07 2025 by rpki-client