Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/UW0XT8tkmeRpNQSadObtgYCWmHE.roa
File: UW0XT8tkmeRpNQSadObtgYCWmHE.roa (raw, json)
Hash identifier: hcOFyRKtr2mYjgTOY6ZE6GZRFPTXY/7vSlvUHpdn8p8=
Subject key identifier: 51:6D:17:4F:CB:64:99:E4:69:35:04:9A:74:E6:ED:81:80:96:98:71
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0194266C3A5DBEF0ED6930387DA68A7C20FE
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/UW0XT8tkmeRpNQSadObtgYCWmHE.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
89.42.10.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
188.172.176.0/20 maxlen: 20
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/23 maxlen: 23
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.211.167.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
188.214.95.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
193.254.56.0/21 maxlen: 21
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3a:5d:be:f0:ed:69:30:38:7d:a6:8a:7c:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516d174fcb6499e46935049a74e6ed8180969871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:ff:34:b3:4a:e8:76:06:5c:90:b7:a6:fb:
a7:65:ea:ed:6a:6a:90:61:b7:c4:7d:83:92:9a:9b:
fc:ec:3f:cf:dc:9a:30:1d:cb:4d:2f:74:77:69:73:
4f:76:85:ab:24:5b:3a:9c:27:7f:71:db:f0:1f:24:
1d:54:6e:bc:cb:ae:2b:fc:d8:d0:9a:fe:6e:66:e1:
17:26:a8:ad:6c:80:fa:7a:a6:87:a7:a0:b2:3c:86:
04:a9:40:04:c0:53:aa:b9:8b:63:bc:ec:9a:c0:eb:
a7:0a:cd:bd:ef:c2:82:a5:e5:be:d9:02:7a:7f:56:
47:a6:40:4b:08:61:99:6d:aa:44:e9:02:b2:bf:cd:
6b:e5:f6:fd:f0:42:d5:31:85:e8:38:e9:46:f7:8b:
72:c5:4f:1e:1c:c5:0f:4f:d1:16:7b:97:b6:72:f5:
6f:76:6a:0b:f1:c0:ec:47:be:4c:26:22:26:fb:14:
fb:05:ec:d0:3b:90:6f:b5:41:f4:71:32:0e:f3:d7:
e0:a1:6b:95:1d:89:59:88:6e:f1:0f:ed:13:53:39:
10:cf:27:47:6f:78:7e:fa:3d:5e:a9:ac:87:b6:09:
95:b2:0a:5f:e2:58:1b:bc:f2:19:d2:b9:f0:c6:69:
a8:48:af:66:ee:dc:ac:27:97:0e:c6:4d:f9:87:67:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:17:4F:CB:64:99:E4:69:35:04:9A:74:E6:ED:81:80:96:98:71
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/UW0XT8tkmeRpNQSadObtgYCWmHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.53.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:de:dd:cd:19:10:f1:bf:fa:2a:c2:fa:0b:a0:94:78:8b:5f:
fa:6d:fe:df:a9:ac:cc:81:85:99:1c:00:29:ff:bf:0b:44:d3:
1d:d1:5a:79:56:24:64:ff:7b:11:60:84:25:00:bf:d4:f5:1f:
e5:b8:83:1a:95:f1:80:fd:92:44:70:ea:f1:96:9e:8a:ae:53:
6f:de:66:37:f5:38:0a:0f:48:5d:db:95:03:ba:06:8d:9d:29:
f0:69:9a:ff:43:71:37:4f:f2:8c:b7:30:c8:b4:0f:89:a4:59:
b8:5c:9c:ca:26:40:67:ea:16:06:f2:ee:7f:72:7a:32:ad:c5:
90:7c:58:33:25:b6:fb:dc:d4:33:67:4b:5f:8f:b4:d9:05:d1:
2d:45:71:07:3a:87:51:15:29:07:7b:a2:3d:ee:de:25:30:ac:
c3:15:4f:58:0f:24:af:e5:54:7c:5c:18:73:b4:b1:28:fd:1d:
ff:a5:0f:6b:4a:9a:c7:e3:4b:b0:40:e4:f9:39:2c:50:97:48:
d6:48:0c:a0:98:31:6c:c8:3d:37:44:92:a4:a3:75:5a:86:76:
69:17:db:ab:81:68:b7:58:3d:2d:f6:7a:7a:d6:b7:3f:6a:ca:
c2:5f:b8:e5:c7:47:36:e2:5c:05:53:40:f5:70:18:d6:47:09:
f7:38:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:43 2025 by rpki-client