Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0XtayH3fJnuQgfkUg_lhKMmc9sg.roa
File: 0XtayH3fJnuQgfkUg_lhKMmc9sg.roa (raw, json)
Hash identifier: AjrFeLTHrWHgSypphJdhmyntwKWzZpqMDBukevhdV84=
Subject key identifier: D1:7B:5A:C8:7D:DF:26:7B:90:81:F9:14:83:F9:61:28:C9:9C:F6:C8
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0193B634EF5506133A7820D64C75CD8B2F92
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0XtayH3fJnuQgfkUg_lhKMmc9sg.roa
Signing time: Wed 11 Dec 2024 14:52:22 +0000
ROA not before: Wed 11 Dec 2024 14:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
89.42.10.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
188.172.176.0/20 maxlen: 20
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/23 maxlen: 23
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.211.167.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
188.214.95.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
193.254.56.0/21 maxlen: 21
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:34:ef:55:06:13:3a:78:20:d6:4c:75:cd:8b:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Dec 11 14:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d17b5ac87ddf267b9081f91483f96128c99cf6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:63:0d:6f:98:74:3a:06:70:6c:10:f0:be:
6a:14:21:02:c1:81:3e:7e:0b:0c:20:38:39:eb:70:
01:37:de:8a:4b:f1:39:59:b7:9e:10:ff:95:af:0f:
26:74:b0:7d:96:ee:8a:24:4e:16:5b:f2:08:c3:b0:
04:a8:48:a8:7e:a5:8c:5b:d7:16:17:78:7b:58:c5:
21:65:1d:47:2b:5d:29:2d:d3:75:00:df:f9:31:1c:
bc:0e:8f:87:cd:3c:0e:80:3b:fd:39:62:38:ab:92:
a9:a2:9c:8d:0c:e3:02:6f:3d:c9:a3:13:3e:f1:49:
9b:9a:22:87:3b:53:fe:27:f3:62:ce:2d:a6:d3:08:
96:02:ca:e0:d6:6a:97:72:ff:4f:08:0e:29:17:9e:
84:d0:27:8a:68:bc:1b:b9:68:13:3d:57:bd:b5:c6:
6a:6c:fe:d1:92:e1:50:b5:8d:f6:bf:57:ce:f0:56:
91:67:7f:92:61:2d:54:68:60:54:3e:a6:83:bd:ac:
a9:5d:dc:93:95:b1:b4:58:fe:ab:d2:8c:e2:24:39:
f4:a2:b0:ab:49:6d:39:01:83:4a:9a:6a:17:a9:72:
68:7b:81:e9:bc:4d:aa:12:95:28:d1:a1:5a:e4:9d:
c9:ea:d4:82:f4:f8:e4:fc:b1:e1:18:81:06:f7:e1:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:5A:C8:7D:DF:26:7B:90:81:F9:14:83:F9:61:28:C9:9C:F6:C8
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0XtayH3fJnuQgfkUg_lhKMmc9sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.53.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
60:0f:be:f5:6f:69:14:d5:be:6a:df:4a:79:12:1b:b3:5c:86:
72:77:7a:da:e0:a9:8b:ed:f5:89:d3:e8:c2:36:84:22:ec:1c:
2c:b7:69:cc:55:5a:90:43:9d:c5:0a:63:9d:2b:fc:d5:03:e2:
69:ac:d6:45:36:ea:95:e4:98:2d:1a:a3:78:7b:02:7e:66:f7:
14:15:2a:06:4e:79:45:cf:8b:e6:3d:74:3b:61:9d:70:5a:94:
13:30:21:09:c7:27:0f:b8:f3:e1:71:b2:88:3c:7c:f0:82:92:
bf:10:06:22:5c:d8:d6:0a:94:01:0b:9a:1c:c1:18:b4:19:fc:
39:23:bf:39:ac:67:73:d2:f0:c0:34:58:7a:e2:60:7e:1b:dd:
f5:a0:89:4b:d7:57:f1:9c:4a:48:92:82:c5:0e:e0:2a:39:84:
b5:95:11:00:e8:0b:19:62:ee:0d:31:bc:b1:ab:22:b7:ca:b9:
ba:73:c6:fe:44:90:e0:d5:25:e2:14:0d:2d:40:be:53:f5:e7:
2c:e8:54:6c:46:b1:58:d5:d2:47:2a:90:b1:5a:01:2f:d1:a4:
1e:4c:13:c6:fd:e7:14:b0:ce:da:5c:33:94:3a:01:90:ef:fe:
5b:6c:26:34:c5:36:b4:09:8f:eb:bc:81:aa:4c:61:cd:f6:90:
c6:d9:79:4f
-----BEGIN CERTIFICATE-----
MIIHhTCCBm2gAwIBAgISAZO2NO9VBhM6eCDWTHXNiy+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjQxMjExMTQ1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTdiNWFjODdkZGYyNjdiOTA4MWY5MTQ4M2Y5NjEyOGM5OWNmNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysFjDW+YdDoGcGwQ8L5qFCECwYE+
fgsMIDg563ABN96KS/E5WbeeEP+Vrw8mdLB9lu6KJE4WW/IIw7AEqEiofqWMW9cW
F3h7WMUhZR1HK10pLdN1AN/5MRy8Do+HzTwOgDv9OWI4q5KpopyNDOMCbz3JoxM+
8UmbmiKHO1P+J/Nizi2m0wiWAsrg1mqXcv9PCA4pF56E0CeKaLwbuWgTPVe9tcZq
bP7RkuFQtY32v1fO8FaRZ3+SYS1UaGBUPqaDvaypXdyTlbG0WP6r0oziJDn0orCr
SW05AYNKmmoXqXJoe4HpvE2qEpUo0aFa5J3J6tSC9Pjk/LHhGIEG9+FXOQIDAQAB
o4IEkTCCBI0wHQYDVR0OBBYEFNF7Wsh93yZ7kIH5FIP5YSjJnPbIMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvMFh0YXlIM2ZKbnVRZ2ZrVWdfbGhLTW1jOXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICpQYIKwYBBQUHAQcBAf8EggKUMIICkDCCAowEAgABMIIC
hAMEASWcQAMEACWcrQMEAS5mtjAMAwQCTVFUAwQATVFWAwQATVFZMAwDBAFWaN4D
BAFWaOADBABWaQIDBABWaQYDBABWabADBABWabIDBAFWabgwDAMEAFZp5QMEAFZp
5gMEAVZp8gMEAFZqCjAMAwQAVmoNAwQEVmoAAwQBVmpeMAwDBABWamkDBAJWamgD
BAFWam4DBAFWanIDBABWanYwDAMEAVZqigMEAVZqjAMEAVZqrgMEAFZrSDAMAwQA
VmvBAwQCVmvAAwQAWSArAwQAWSCqAwQBWSEuAwQAWSF0AwQAWSGGMAwDBAFZIcYD
BAFZIcgDBABZIc4DBAFZIfoDBAFZIf4DBABZImYDBAFZImgDBABZIzYwDAMEAFkj
WQMEAFkjWgMEAVkkJgMEAFkkiAMEAVkkigMEAFkkjQMEAFklXAMEAFklYDAMAwQA
WSWBAwQAWSWGAwQAWSbwAwQAWSdFAwQAWSfUAwQAWSfXAwQAWSfxAwQBWSiMAwQA
WSjPAwQAWSjRAwQBWSkcMAwDBABZKTEDBAJZKTAwDAMEAFkpvQMEBlkpgAMEAFkq
CgMEAVkqmAMEAFktUgMEAFkuLwMEAlva7AMEAVvrgjAMAwQAXXIzAwQBXXI0AwQB
XXI6AwQAXXM7MAwDBAFdd3YDBAFdd3gDBABdd3wDBABesX4wDAMEBrB+wAMEALB+
wjAMAwQCsN90AwQAsN92AwQAsN+hAwQCuVBwAwQEvKywAwQDvNAwAwQBvNDeAwQD
vNF4AwQAvNOnAwQAvNT+AwQBvNXOAwQBvNXWAwQDvNX4AwQAvNZfAwQAvPHTAwQA
wR7+AwQBwSBCAwQEwf4wAwQBwik8MA0GCSqGSIb3DQEBCwUAA4IBAQBgD771b2kU
1b5q30p5EhuzXIZyd3ra4KmL7fWJ0+jCNoQi7Bwst2nMVVqQQ53FCmOdK/zVA+Jp
rNZFNuqV5JgtGqN4ewJ+ZvcUFSoGTnlFz4vmPXQ7YZ1wWpQTMCEJxycPuPPhcbKI
PHzwgpK/EAYiXNjWCpQBC5ocwRi0Gfw5I785rGdz0vDANFh64mB+G931oIlL11fx
nEpIkoLFDuAqOYS1lREA6AsZYu4NMbyxqyK3yrm6c8b+RJDg1SXiFA0tQL5T9ecs
6FRsRrFY1dJHKpCxWgEv0aQeTBPG/ecUsM7aXDOUOgGQ7/5bbCY0xTa0CY/rvIGq
TGHN9pDG2XlP
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:57:39 2025 by rpki-client