Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa
File: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (raw, json)
Hash identifier: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=
Subject key identifier: F9:42:D2:AC:2E:EA:11:13:C9:E6:CD:0B:1C:6E:B0:41:2A:24:CD:70
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0195DD06DFE1CD43AB138B78C81151198078
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa
Signing time: Fri 28 Mar 2025 13:52:49 +0000
ROA not before: Fri 28 Mar 2025 13:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
89.42.10.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
188.172.176.0/20 maxlen: 20
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/23 maxlen: 23
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.211.167.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
188.214.95.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
193.254.56.0/21 maxlen: 21
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:06:df:e1:cd:43:ab:13:8b:78:c8:11:51:19:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 28 13:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f942d2ac2eea1113c9e6cd0b1c6eb0412a24cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:72:c7:d8:ee:d5:90:db:23:df:5e:cd:83:
ae:66:31:61:fb:3b:74:2c:e7:2b:ce:43:aa:d9:3f:
aa:10:39:6c:23:ef:f5:a4:ef:01:9f:29:17:25:22:
7b:be:77:cf:0e:34:a7:7c:83:ed:c8:6f:7b:8d:43:
27:a2:96:6a:f3:e1:39:82:ca:2d:36:dd:3f:b9:c7:
63:d7:ef:50:06:94:c6:fd:b6:3a:9e:1b:b6:e3:52:
81:f7:aa:53:eb:5e:a1:5b:25:d9:c0:8b:d2:96:0e:
2d:20:ae:e4:61:88:e6:ce:54:ad:53:1f:90:05:b6:
26:18:71:4a:1b:5d:77:3d:61:42:d6:87:1a:65:b5:
a0:e8:b1:9b:fd:53:6b:57:a5:11:04:85:d7:38:f3:
d6:f0:3a:64:ea:ed:01:62:21:ac:38:68:9f:95:22:
de:b6:fb:84:41:a0:12:1b:dd:bf:74:55:4e:37:fa:
d2:ad:cd:52:fb:ca:c0:20:2e:7e:4d:6c:98:3d:96:
f0:11:e9:c5:df:c1:fb:b3:94:86:cc:55:50:57:ff:
f4:46:ba:09:32:c1:7b:bc:64:6c:c4:db:5f:96:b7:
13:87:86:a2:cf:c7:7b:5f:45:1c:ee:87:5b:88:6d:
66:17:a3:e1:75:ea:75:6a:f8:01:4f:87:88:38:7c:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:D2:AC:2E:EA:11:13:C9:E6:CD:0B:1C:6E:B0:41:2A:24:CD:70
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.53.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:a3:c8:13:b1:f7:d7:93:7f:42:cf:85:0b:f1:d0:a9:6e:f4:
6d:3e:7c:dd:7a:b1:31:64:2e:1e:ed:c2:b0:3b:02:12:3e:91:
ff:a3:e5:a0:e9:b0:69:e7:34:df:bd:e1:c2:a4:56:40:2f:32:
ae:07:35:d8:20:f8:00:09:6e:da:ba:f0:74:41:59:37:a0:c8:
9b:29:b7:d4:89:1c:17:0c:89:25:34:58:7f:f7:a4:77:42:29:
04:c4:12:10:75:3c:4a:9a:19:61:db:c7:a3:26:40:29:aa:40:
4d:4a:f0:ac:7f:30:79:7d:c4:a6:cb:e9:96:ba:38:73:6e:f1:
4a:5a:e6:24:e9:6e:19:ed:45:c1:ef:d0:6d:f3:9c:0c:96:25:
54:87:7b:31:c2:15:99:33:22:a7:57:36:33:7b:99:bd:10:ce:
0a:35:ee:4c:a8:64:e4:37:b6:83:94:ed:21:31:37:8c:32:47:
9d:bd:80:fa:91:27:7a:8b:d8:99:d0:76:b9:d0:bb:d7:33:6b:
4c:b9:44:f2:78:fb:6b:e1:93:5d:dc:10:50:6b:88:e6:c4:5a:
70:ea:04:54:f0:28:0d:40:cb:e1:7d:e0:43:df:bf:5d:32:c4:
8b:76:5e:1b:b9:20:2f:8b:cc:0e:bb:3b:0c:8b:f9:32:c4:1b:
c9:d0:31:46
-----BEGIN CERTIFICATE-----
MIIHgDCCBmigAwIBAgISAZXdBt/hzUOrE4t4yBFRGYB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjUwMzI4MTM1MjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTQyZDJhYzJlZWExMTEzYzllNmNkMGIxYzZlYjA0MTJhMjRjZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ddyx9ju1ZDbI99ezYOuZjFh+zt0
LOcrzkOq2T+qEDlsI+/1pO8BnykXJSJ7vnfPDjSnfIPtyG97jUMnopZq8+E5gsot
Nt0/ucdj1+9QBpTG/bY6nhu241KB96pT616hWyXZwIvSlg4tIK7kYYjmzlStUx+Q
BbYmGHFKG113PWFC1ocaZbWg6LGb/VNrV6URBIXXOPPW8Dpk6u0BYiGsOGiflSLe
tvuEQaASG92/dFVON/rSrc1S+8rAIC5+TWyYPZbwEenF38H7s5SGzFVQV//0RroJ
MsF7vGRsxNtflrcTh4aiz8d7X0Uc7odbiG1mF6Phdep1avgBT4eIOHyNSQIDAQAB
o4IEjDCCBIgwHQYDVR0OBBYEFPlC0qwu6hETyebNCxxusEEqJM1wMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvMS1VTFNyQzdxRVJQSjVzMExIRzZ3UVNva3pYQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTEvOWQ2NWJiLWFiNGYtNDNhYS1iYmE4LTQzNzM5NDkzOGM1
Mi8xL2hQZ2sweTN4cFJFOWdoQVRSZGVGbzRyZHZlVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAp8GCCsGAQUFBwEHAQH/BIICjjCCAoowggKGBAIAATCC
An4DBAElnEADBAAlnK0DBAEuZrYwDAMEAk1RVAMEAE1RVgMEAE1RWTAMAwQBVmje
AwQBVmjgAwQAVmkCAwQAVmkGAwQAVmmwAwQAVmmyAwQBVmm4MAwDBABWaeUDBABW
aeYDBAFWafIDBABWagowDAMEAFZqDQMEBFZqAAMEAVZqXjAMAwQAVmppAwQCVmpo
AwQBVmpuAwQBVmpyAwQAVmp2MAwDBAFWaooDBAFWaowDBAFWaq4wDAMEAFZrwQME
AlZrwAMEAFkgKwMEAFkgqgMEAVkhLgMEAFkhdAMEAFkhhjAMAwQBWSHGAwQBWSHI
AwQAWSHOAwQBWSH6AwQBWSH+AwQAWSJmAwQBWSJoAwQAWSM2MAwDBABZI1kDBABZ
I1oDBAFZJCYDBABZJIgDBAFZJIoDBABZJI0DBABZJVwDBABZJWAwDAMEAFklgQME
AFklhgMEAFkm8AMEAFknRQMEAFkn1AMEAFkn1wMEAFkn8QMEAVkojAMEAFkozwME
AFko0QMEAVkpHDAMAwQAWSkxAwQCWSkwMAwDBABZKb0DBAZZKYADBABZKgoDBAFZ
KpgDBABZLVIDBABZLi8DBAJb2uwDBAFb64IwDAMEAF1yMwMEAV1yNAMEAV1yOgME
AF1zOzAMAwQBXXd2AwQBXXd4AwQAXXd8AwQAXrF+MAwDBAawfsADBACwfsIwDAME
ArDfdAMEALDfdgMEALDfoQMEArlQcAMEBLyssAMEA7zQMAMEAbzQ3gMEA7zReAME
ALzTpwMEALzU/gMEAbzVzgMEAbzV1gMEA7zV+AMEALzWXwMEALzx0wMEAMEe/gME
AcEgQgMEBMH+MAMEAcIpPDANBgkqhkiG9w0BAQsFAAOCAQEAC6PIE7H315N/Qs+F
C/HQqW70bT583XqxMWQuHu3CsDsCEj6R/6PloOmwaec0373hwqRWQC8yrgc12CD4
AAlu2rrwdEFZN6DImym31IkcFwyJJTRYf/ekd0IpBMQSEHU8SpoZYdvHoyZAKapA
TUrwrH8weX3Epsvplro4c27xSlrmJOluGe1Fwe/QbfOcDJYlVId7McIVmTMip1c2
M3uZvRDOCjXuTKhk5De2g5TtITE3jDJHnb2A+pEneovYmdB2udC71zNrTLlE8nj7
a+GTXdwQUGuI5sRacOoEVPAoDUDL4X3gQ9+/XTLEi3ZeG7kgL4vMDrs7DIv5MsQb
ydAxRg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:47 2025 by rpki-client