Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa
File: pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa (raw, json)
Hash identifier: cjIj4ScC/DHh2+FMzl+VW8zNJX+8oo0yjvETje/w7yg=
Subject key identifier: A5:CE:00:36:3E:D0:89:D7:39:07:E4:BD:E4:BA:42:D0:87:2C:EA:F4
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B7FC2E818C704A6C23C128BBA0ED3
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6866
IP address blocks: 31.153.0.0/16 maxlen: 24
31.153.0.0/17 maxlen: 17
31.153.0.0/19 maxlen: 19
31.153.0.0/20 maxlen: 20
31.153.16.0/20 maxlen: 20
31.153.32.0/19 maxlen: 19
31.153.64.0/19 maxlen: 19
31.153.96.0/19 maxlen: 19
31.153.128.0/19 maxlen: 19
31.153.160.0/19 maxlen: 19
31.153.192.0/19 maxlen: 19
31.153.224.0/19 maxlen: 19
37.149.0.0/16 maxlen: 24
46.198.0.0/17 maxlen: 24
46.198.0.0/18 maxlen: 18
46.198.0.0/19 maxlen: 19
46.198.32.0/19 maxlen: 19
46.198.64.0/18 maxlen: 18
46.198.64.0/19 maxlen: 19
46.198.96.0/19 maxlen: 19
46.199.0.0/16 maxlen: 24
46.199.0.0/18 maxlen: 18
46.199.0.0/19 maxlen: 19
46.199.16.0/20 maxlen: 20
46.199.32.0/19 maxlen: 19
46.199.32.0/20 maxlen: 20
46.199.48.0/20 maxlen: 20
46.199.64.0/20 maxlen: 20
46.199.88.0/24 maxlen: 24
46.199.192.0/19 maxlen: 19
46.199.224.0/19 maxlen: 19
62.228.0.0/16 maxlen: 24
62.228.0.0/19 maxlen: 19
62.228.0.0/21 maxlen: 21
62.228.8.0/21 maxlen: 21
62.228.16.0/22 maxlen: 22
62.228.20.0/22 maxlen: 22
62.228.24.0/21 maxlen: 21
62.228.32.0/19 maxlen: 19
62.228.64.0/19 maxlen: 19
62.228.96.0/19 maxlen: 19
62.228.128.0/19 maxlen: 19
62.228.160.0/19 maxlen: 19
62.228.192.0/19 maxlen: 19
62.228.224.0/19 maxlen: 19
62.228.226.0/23 maxlen: 23
62.228.228.0/24 maxlen: 24
62.228.229.0/24 maxlen: 24
62.228.240.0/23 maxlen: 23
81.4.128.0/18 maxlen: 24
81.4.128.0/19 maxlen: 19
81.4.133.0/24 maxlen: 24
81.4.160.0/19 maxlen: 19
81.4.160.0/20 maxlen: 20
81.4.160.0/21 maxlen: 21
81.4.168.0/21 maxlen: 21
81.4.174.0/24 maxlen: 24
81.4.176.0/21 maxlen: 21
83.168.0.0/18 maxlen: 24
83.168.0.0/19 maxlen: 19
83.168.32.0/19 maxlen: 19
87.228.128.0/17 maxlen: 24
87.228.128.0/18 maxlen: 18
87.228.144.0/20 maxlen: 20
87.228.160.0/20 maxlen: 20
87.228.176.0/20 maxlen: 20
87.228.192.0/20 maxlen: 20
87.228.208.0/20 maxlen: 20
87.228.224.0/19 maxlen: 19
87.228.224.0/20 maxlen: 20
87.228.240.0/20 maxlen: 20
93.109.0.0/16 maxlen: 24
93.109.0.0/19 maxlen: 19
93.109.32.0/19 maxlen: 19
93.109.64.0/19 maxlen: 19
93.109.96.0/19 maxlen: 19
93.109.128.0/19 maxlen: 19
93.109.160.0/19 maxlen: 19
93.109.192.0/19 maxlen: 19
93.109.209.0/24 maxlen: 24
93.109.219.0/24 maxlen: 24
93.109.224.0/19 maxlen: 19
93.109.227.0/24 maxlen: 24
93.109.239.0/24 maxlen: 24
128.0.107.0/24 maxlen: 24
128.0.200.0/21 maxlen: 24
128.0.208.0/20 maxlen: 24
128.0.224.0/20 maxlen: 24
128.0.240.0/20 maxlen: 24
176.92.224.0/19 maxlen: 24
185.2.96.0/22 maxlen: 24
185.2.96.0/24 maxlen: 24
185.2.97.0/24 maxlen: 24
185.2.98.0/24 maxlen: 24
185.2.99.0/24 maxlen: 24
195.14.128.0/19 maxlen: 24
195.14.128.0/20 maxlen: 20
195.14.142.0/24 maxlen: 24
195.14.144.0/20 maxlen: 20
195.14.146.0/24 maxlen: 24
195.14.151.0/24 maxlen: 24
195.14.153.0/24 maxlen: 24
212.31.96.0/19 maxlen: 24
212.31.96.0/20 maxlen: 20
212.31.96.0/24 maxlen: 24
212.31.112.0/20 maxlen: 20
212.31.121.0/24 maxlen: 24
212.31.122.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
213.7.0.0/16 maxlen: 24
213.7.0.0/17 maxlen: 17
213.7.0.0/20 maxlen: 20
213.7.16.0/20 maxlen: 20
213.7.32.0/20 maxlen: 20
213.7.48.0/20 maxlen: 20
213.7.64.0/20 maxlen: 20
213.7.80.0/20 maxlen: 20
213.7.96.0/20 maxlen: 20
213.7.112.0/20 maxlen: 20
213.7.128.0/18 maxlen: 18
213.7.128.0/20 maxlen: 20
213.7.144.0/20 maxlen: 20
213.7.160.0/20 maxlen: 20
213.7.176.0/20 maxlen: 20
213.7.192.0/20 maxlen: 20
213.7.208.0/20 maxlen: 20
213.7.208.0/24 maxlen: 24
213.7.220.0/22 maxlen: 22
213.7.224.0/20 maxlen: 20
213.7.240.0/20 maxlen: 20
213.7.240.0/24 maxlen: 24
213.149.160.0/19 maxlen: 24
213.149.160.0/20 maxlen: 20
213.149.176.0/20 maxlen: 20
2a00:1358::/29 maxlen: 48
2a00:1358::/30 maxlen: 48
2a00:1358::/31 maxlen: 48
2a00:1358::/32 maxlen: 48
2a00:1358:1000::/48 maxlen: 48
2a00:1358:b000::/44 maxlen: 44
2a00:1358:d000::/40 maxlen: 40
2a00:1358:df00::/48 maxlen: 48
2a00:1358:f000::/40 maxlen: 40
2a00:1358:f000::/41 maxlen: 41
2a00:1358:f080::/41 maxlen: 41
2a00:1359::/32 maxlen: 48
2a00:135a::/31 maxlen: 48
2a00:135a::/32 maxlen: 48
2a00:135b::/32 maxlen: 48
2a00:135c::/30 maxlen: 48
2a00:135c::/31 maxlen: 48
2a00:135c::/32 maxlen: 48
2a00:135d::/32 maxlen: 48
2a00:135e::/31 maxlen: 48
2a00:135e::/32 maxlen: 48
2a00:135f::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7f:c2:e8:18:c7:04:a6:c2:3c:12:8b:ba:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5ce00363ed089d73907e4bde4ba42d0872ceaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:5d:bc:70:cd:97:b8:86:25:5c:68:e5:7b:
cc:b0:bb:b2:38:26:6e:50:19:21:dd:c4:93:be:6e:
b4:62:b6:59:34:5f:2d:1b:4f:f3:fd:af:e9:f4:54:
26:7c:3f:6c:8a:99:f9:ae:48:26:0d:4a:b1:ea:44:
1b:95:df:5f:c2:44:8b:cd:78:e8:8c:97:a7:b8:48:
7a:18:d5:02:2d:98:74:e5:82:37:0a:54:84:d5:9e:
37:53:4b:ef:98:68:54:cb:e1:a6:76:7e:cb:a2:98:
d7:97:18:33:f2:b8:d8:c9:9a:02:07:7b:7a:01:85:
4c:59:54:c1:f1:da:0c:21:fc:ad:47:b1:eb:8a:5e:
43:df:64:89:e9:13:4f:df:ce:86:9e:0e:3a:cc:91:
3e:66:44:95:67:b1:2c:7d:12:32:ce:cb:f5:dc:01:
07:99:bc:e3:3a:f2:bd:61:02:26:39:d0:11:35:27:
f9:cb:17:ff:04:bd:f5:98:1c:36:74:19:16:8f:6f:
86:e4:11:97:a7:f8:1a:ef:78:d8:e6:0b:8a:17:98:
06:9b:17:a6:8e:c9:9e:1a:27:74:b8:23:54:b6:eb:
15:8d:46:6b:3c:6e:d8:50:1f:76:28:5f:5b:72:09:
25:62:db:30:3d:3a:1a:37:36:b4:51:3f:7e:d9:08:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:00:36:3E:D0:89:D7:39:07:E4:BD:E4:BA:42:D0:87:2C:EA:F4
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0/24
128.0.200.0-128.0.255.255
176.92.224.0/19
185.2.96.0/22
195.14.128.0/19
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
Signature Algorithm: sha256WithRSAEncryption
a9:60:dc:fc:8e:78:94:4b:65:c9:fc:6d:cb:fd:f5:d0:d7:5f:
08:71:0a:47:89:c9:36:91:73:47:26:ad:b7:ff:88:f9:ff:62:
47:2e:5e:4a:ba:96:7b:c7:63:94:2a:56:a4:c3:a0:5c:89:c3:
d9:ca:26:b6:28:da:34:a7:91:e5:c4:0d:cd:38:33:e9:9e:f4:
cf:ae:97:b9:24:a9:73:36:0e:a5:52:f0:55:6a:71:99:6a:2f:
e7:2c:ed:51:2c:2c:1e:9d:58:b9:9a:5e:35:64:b8:e7:0b:86:
75:dd:93:2a:45:b3:25:09:38:19:93:e7:1c:fa:ba:56:b0:5e:
7e:c4:92:5f:5c:0b:20:c6:a3:62:48:7c:44:43:db:93:13:87:
0a:06:1c:a3:f9:b4:64:43:8b:63:5a:27:15:08:2e:b1:8c:e9:
6e:2e:49:57:8d:3a:04:ba:3d:1a:4e:db:11:e8:5b:5e:cc:0a:
84:bc:d8:bd:cb:35:26:ec:7c:34:ab:09:9f:e0:8d:a1:9e:40:
e2:f4:8f:01:1b:da:b4:4a:1a:24:b7:7e:a6:c6:5c:49:25:20:
01:98:1b:df:7c:b1:e2:fd:df:c9:62:74:8e:45:18:04:67:92:
9d:07:56:90:c0:93:6b:c5:a6:5d:de:00:6b:df:89:e5:ea:cc:
d7:b7:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:14 2025 by rpki-client