Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa
File: dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa (raw, json)
Hash identifier: 1WfupiRmFEmztIrNKS3WB7U7Ynb+bd22AiDH6YDrXfE=
Subject key identifier: 75:9D:02:61:DA:03:16:9C:A2:57:43:DB:04:F0:B2:13:99:0C:3E:68
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0195749559BB27496A0B4A1EFD2D5A2B4E3C
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa
Signing time: Sat 08 Mar 2025 07:08:19 +0000
ROA not before: Sat 08 Mar 2025 07:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 5.134.192.0/21 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.71.0/24 maxlen: 32
31.7.72.0/21 maxlen: 32
31.7.72.0/24 maxlen: 32
31.7.73.0/24 maxlen: 32
31.7.74.0/24 maxlen: 32
31.7.75.0/24 maxlen: 32
31.7.76.0/24 maxlen: 32
31.7.77.0/24 maxlen: 32
31.7.78.0/24 maxlen: 32
31.7.79.0/24 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.12.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.15.0/24 maxlen: 24
37.156.144.0/22 maxlen: 32
37.156.144.0/24 maxlen: 32
37.156.145.0/24 maxlen: 32
37.156.146.0/24 maxlen: 32
37.156.147.0/24 maxlen: 32
46.143.0.0/17 maxlen: 32
46.245.64.0/18 maxlen: 32
46.245.64.0/22 maxlen: 32
46.245.64.0/24 maxlen: 32
46.245.65.0/24 maxlen: 32
46.245.66.0/24 maxlen: 32
46.245.67.0/24 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.68.0/24 maxlen: 32
46.245.69.0/24 maxlen: 32
46.245.70.0/24 maxlen: 32
46.245.71.0/24 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.72.0/24 maxlen: 32
46.245.73.0/24 maxlen: 32
46.245.74.0/24 maxlen: 32
46.245.75.0/24 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.76.0/24 maxlen: 32
46.245.77.0/24 maxlen: 32
46.245.78.0/24 maxlen: 32
46.245.79.0/24 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.80.0/24 maxlen: 32
46.245.81.0/24 maxlen: 32
46.245.82.0/24 maxlen: 32
46.245.83.0/24 maxlen: 32
46.245.84.0/22 maxlen: 32
46.245.84.0/24 maxlen: 32
46.245.85.0/24 maxlen: 32
46.245.86.0/24 maxlen: 32
46.245.87.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.88.0/24 maxlen: 32
46.245.89.0/24 maxlen: 32
46.245.90.0/24 maxlen: 32
46.245.91.0/24 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.92.0/24 maxlen: 32
46.245.93.0/24 maxlen: 32
46.245.94.0/24 maxlen: 32
46.245.95.0/24 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.96.0/24 maxlen: 32
46.245.97.0/24 maxlen: 32
46.245.98.0/24 maxlen: 32
46.245.99.0/24 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.100.0/24 maxlen: 32
46.245.101.0/24 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
46.245.117.0/24 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
78.110.124.0/22 maxlen: 32
78.110.124.0/23 maxlen: 32
78.110.126.0/23 maxlen: 32
79.127.0.0/17 maxlen: 32
85.198.28.0/22 maxlen: 32
85.198.28.0/23 maxlen: 32
85.198.30.0/23 maxlen: 32
86.57.0.0/22 maxlen: 22
86.57.4.0/22 maxlen: 22
86.57.8.0/22 maxlen: 22
86.57.12.0/22 maxlen: 22
86.57.16.0/22 maxlen: 22
86.57.20.0/22 maxlen: 22
86.57.24.0/22 maxlen: 22
86.57.28.0/22 maxlen: 22
86.57.32.0/22 maxlen: 22
86.57.36.0/22 maxlen: 22
86.57.40.0/22 maxlen: 22
86.57.44.0/22 maxlen: 22
86.57.48.0/22 maxlen: 22
86.57.52.0/22 maxlen: 22
86.57.56.0/22 maxlen: 22
86.57.60.0/22 maxlen: 22
86.57.64.0/22 maxlen: 22
86.57.68.0/22 maxlen: 22
86.57.72.0/22 maxlen: 22
86.57.76.0/22 maxlen: 22
86.57.80.0/22 maxlen: 22
86.57.84.0/22 maxlen: 22
86.57.88.0/22 maxlen: 22
86.57.92.0/22 maxlen: 22
86.57.100.0/22 maxlen: 22
86.57.104.0/22 maxlen: 22
86.57.108.0/22 maxlen: 22
86.57.112.0/22 maxlen: 22
86.57.116.0/22 maxlen: 22
86.57.120.0/22 maxlen: 22
86.57.124.0/22 maxlen: 22
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
109.122.224.0/20 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
178.22.120.0/21 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
178.216.251.0/24 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
188.0.240.0/23 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
2a05:1a00::/26 maxlen: 128
2a05:1a10::/29 maxlen: 128
2a06:5484::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:95:59:bb:27:49:6a:0b:4a:1e:fd:2d:5a:2b:4e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Mar 8 07:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759d0261da03169ca25743db04f0b213990c3e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:bb:8a:89:f5:25:7b:e7:11:15:f8:86:74:
2a:0c:d3:dc:e0:22:88:18:99:a7:b6:1a:e8:86:66:
6f:fd:16:26:03:83:8e:a9:43:ce:1f:ae:54:33:5a:
03:31:1a:ef:6c:7c:d4:2f:f0:b1:c6:55:7b:92:8d:
70:21:31:fe:53:3a:7f:23:84:2d:b3:74:b7:df:b9:
76:08:42:1e:55:91:81:05:64:e8:4a:23:13:38:17:
d2:50:49:84:d1:bd:85:d1:b0:c6:6b:78:19:5a:1c:
ed:d0:b2:39:57:5e:c8:86:18:4d:8c:05:e2:82:5d:
8b:d8:35:f4:08:e3:5c:7c:50:bb:f8:d8:0f:a0:fe:
67:1c:d6:2d:b1:42:f4:d1:c3:b7:2b:36:00:ba:cf:
d6:17:13:ec:ea:50:37:7d:ba:bd:54:41:4e:1b:85:
77:9b:43:fd:15:00:3c:b8:60:4f:76:87:4b:ae:6b:
7b:c1:90:a7:d4:6d:7c:04:e9:04:17:1f:bb:b4:ac:
7b:b4:40:85:db:7d:61:e9:dc:ff:02:91:96:dd:2d:
b1:60:66:24:71:a1:97:b3:d6:5b:55:18:a0:30:bd:
25:65:97:2a:e5:6c:4a:fb:fa:2a:c8:6e:3e:d4:6c:
30:fe:a8:09:de:4c:ca:97:60:c3:f6:f3:69:29:19:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:02:61:DA:03:16:9C:A2:57:43:DB:04:F0:B2:13:99:0C:3E:68
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
78.110.124.0/22
79.127.0.0/17
85.198.28.0/22
86.57.0.0-86.57.95.255
86.57.100.0-86.57.127.255
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
29:e0:f6:59:dd:22:5a:b6:00:f2:30:0b:95:0b:29:4e:71:30:
79:bd:28:4b:93:ee:e4:6f:78:bc:1e:47:ae:e4:6a:4e:9e:00:
bc:ed:6e:0f:2a:90:b4:75:d1:16:07:66:6b:cc:fa:87:ed:b7:
6d:80:c9:7c:53:f2:99:bd:00:f0:59:e6:7c:50:18:64:ea:1d:
00:3c:75:21:00:20:ab:e4:2d:b9:13:c0:d2:ea:25:f8:5d:bb:
18:a4:84:a4:4d:9e:65:fd:f6:75:56:c0:0c:57:a5:16:8e:3d:
1e:6f:1f:5b:ff:ba:60:2c:36:a6:ad:8c:72:33:b4:d1:86:96:
3e:4a:06:bc:da:98:31:95:5c:66:b1:1a:97:a8:ca:f6:58:94:
d9:a1:6d:1d:d8:ca:56:e0:8a:35:38:b0:02:51:21:0f:af:cd:
28:de:af:86:f2:b9:ce:b7:7f:75:2f:d0:68:6a:89:70:87:44:
f7:ce:1f:5a:c3:75:d9:90:1c:70:33:7a:25:16:c3:4a:1b:49:
c6:de:ac:d6:d4:66:6e:8d:6e:b1:19:5e:88:a4:a7:51:37:41:
48:6e:f0:a5:6f:04:81:9b:03:4d:06:26:75:3c:3f:19:54:54:
bc:8f:c2:e7:57:92:16:04:e8:fd:7b:a2:e2:69:50:4e:2e:7b:
91:47:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:05:18 2025 by rpki-client