Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/xfa86z-_cd1JUN4qijUc-8zKEIc.roa
File: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (raw, json)
Hash identifier: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=
Subject key identifier: C5:F6:BC:EB:3F:BF:71:DD:49:50:DE:2A:8A:35:1C:FB:CC:CA:10:87
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0194252098EF68B7D0EF0FDA513DCBE95DA6
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/xfa86z-_cd1JUN4qijUc-8zKEIc.roa
Signing time: Thu 02 Jan 2025 03:48:00 +0000
ROA not before: Thu 02 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.94.244.0/22 maxlen: 32
45.95.48.0/22 maxlen: 32
45.116.168.0/22 maxlen: 32
45.138.232.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
58.97.232.0/21 maxlen: 32
58.97.240.0/20 maxlen: 32
77.81.104.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
78.138.25.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
83.229.76.0/22 maxlen: 24
83.229.104.0/22 maxlen: 32
84.39.224.0/21 maxlen: 32
89.19.40.0/22 maxlen: 32
89.19.42.0/23 maxlen: 24
89.34.78.0/23 maxlen: 32
89.38.132.0/23 maxlen: 32
89.46.152.0/21 maxlen: 32
89.249.51.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
91.245.235.0/24 maxlen: 32
92.43.84.0/22 maxlen: 32
93.113.124.0/23 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.10.0/24 maxlen: 24
93.114.11.0/24 maxlen: 24
93.115.12.0/23 maxlen: 32
93.180.192.0/20 maxlen: 32
93.180.224.0/20 maxlen: 32
94.176.112.0/20 maxlen: 32
94.177.56.0/23 maxlen: 32
95.215.36.0/22 maxlen: 32
119.13.192.0/19 maxlen: 32
119.13.208.0/20 maxlen: 32
121.91.80.0/21 maxlen: 32
138.124.144.0/22 maxlen: 32
150.129.92.0/22 maxlen: 32
176.119.8.0/21 maxlen: 32
185.38.102.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
185.131.220.0/24 maxlen: 32
185.223.56.0/24 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
188.95.152.0/21 maxlen: 32
188.119.116.0/22 maxlen: 32
202.181.20.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
203.166.156.0/23 maxlen: 32
209.20.160.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:98:ef:68:b7:d0:ef:0f:da:51:3d:cb:e9:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 2 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f6bceb3fbf71dd4950de2a8a351cfbccca1087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:7d:97:e6:a1:0e:8b:81:a8:bf:38:27:14:
2f:38:05:ae:b5:c4:b3:78:a4:ae:16:5c:84:ed:d7:
20:ec:3a:59:d5:ed:f0:91:bd:1a:88:17:b0:f7:5c:
c9:b1:59:47:82:ea:27:68:df:b7:21:0a:79:1b:f3:
a5:7b:62:86:cd:95:39:f6:fa:9b:42:08:7f:6d:d1:
fb:a4:61:ef:ff:bc:0d:b6:86:38:75:5e:ec:7d:ae:
29:09:1c:3d:c0:34:7f:fc:d4:69:6b:a4:66:23:76:
1e:1a:d5:e7:7a:0e:9a:f4:36:b9:b3:4c:28:20:69:
c9:01:b9:9f:cf:96:f8:0d:f5:4e:da:fd:1e:97:e3:
25:48:ae:dc:eb:e1:7e:60:cb:b6:db:f0:0a:d8:d6:
00:78:49:44:fb:e7:86:43:77:3c:42:48:ae:b2:2e:
d2:bc:10:d6:f5:36:18:3a:15:23:93:4a:52:85:ab:
e4:dd:68:a4:8a:08:6c:f3:9d:3b:97:34:7f:ee:1f:
e4:ac:12:01:c2:e4:50:ed:de:63:28:98:d1:6f:5d:
ad:34:db:aa:21:dc:aa:1f:8a:70:48:16:d5:5d:f2:
01:9e:2b:a0:72:af:32:b2:79:63:1c:81:08:c3:87:
13:ac:d2:62:bd:0f:68:e9:57:45:34:05:d7:7a:f0:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:BC:EB:3F:BF:71:DD:49:50:DE:2A:8A:35:1C:FB:CC:CA:10:87
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/xfa86z-_cd1JUN4qijUc-8zKEIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
78.138.1.0-78.138.2.255
78.138.25.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.34.78.0/23
89.38.132.0/23
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
93.180.192.0/20
93.180.224.0/20
94.176.112.0/20
94.177.56.0/23
95.215.36.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.119.8.0/21
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.223.56.0/24
185.240.252.0/24
185.240.255.0/24
188.95.152.0/21
188.119.116.0/22
202.181.20.0/22
203.109.52.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
01:08:48:91:fc:dc:ab:23:d6:7f:66:bb:1d:4a:8c:79:04:8d:
27:47:62:f4:a1:e1:02:0f:19:5d:eb:cd:21:21:1f:7d:56:05:
a6:ee:4c:d3:9a:a9:ea:e4:74:4b:69:87:e6:ce:f4:76:b9:dd:
72:75:b0:b6:97:e5:34:64:eb:94:08:da:a5:30:59:d0:17:76:
06:5a:42:d5:e1:ed:06:60:7d:a2:27:30:dc:9a:f2:fd:15:5a:
bf:97:63:e6:94:36:77:11:a2:e3:b0:83:bb:0d:15:dd:f4:e3:
bb:2a:93:52:40:11:54:e1:fe:ca:a0:ab:0f:85:b9:8a:2f:2e:
79:0a:f9:d5:e7:93:b2:7a:6f:ac:06:3f:4d:20:aa:30:d3:68:
c6:33:93:a3:a5:6e:44:5d:ce:00:ce:dc:ca:36:e6:37:5a:81:
a8:af:df:46:5a:e6:68:1a:f5:3b:8c:34:4d:1a:de:40:e0:5c:
2a:6e:77:82:af:6a:fb:fc:ca:ae:8d:d8:a6:76:c4:b6:85:9a:
4e:95:70:35:32:65:6d:04:0b:2f:72:33:0a:c5:a9:ca:b3:01:
45:99:61:40:ac:63:79:8a:27:f0:0d:19:ec:b8:88:75:51:0f:
eb:1c:3b:a9:e1:f6:46:f5:5c:81:1c:e5:19:12:58:00:66:88:
7d:82:4e:de
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAZQlIJjvaLfQ7w/aUT3L6V2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjUwMTAyMDM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY2YmNlYjNmYmY3MWRkNDk1MGRlMmE4YTM1MWNmYmNjY2ExMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRV9l+ahDouBqL84JxQvOAWutcSz
eKSuFlyE7dcg7DpZ1e3wkb0aiBew91zJsVlHguonaN+3IQp5G/Ole2KGzZU59vqb
Qgh/bdH7pGHv/7wNtoY4dV7sfa4pCRw9wDR//NRpa6RmI3YeGtXneg6a9Da5s0wo
IGnJAbmfz5b4DfVO2v0el+MlSK7c6+F+YMu22/AK2NYAeElE++eGQ3c8Qkiusi7S
vBDW9TYYOhUjk0pShavk3Wikighs8507lzR/7h/krBIBwuRQ7d5jKJjRb12tNNuq
IdyqH4pwSBbVXfIBniugcq8ysnljHIEIw4cTrNJivQ9o6VdFNAXXevBgSwIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFMX2vOs/v3HdSVDeKoo1HPvMyhCHMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEveGZhODZ6LV9jZDFKVU40cWlqVWMtOHpLRUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAV8EAgABMIIB
VwMEAi1e9AMEAi1fMAMEAi10qAMEAi2K6DAMAwQCLY5cAwQCLY5gAwQCLZWUAwQD
OmGAMAsDBAM6YegDAwE6YAMEA01RaDAMAwQATooBAwQATooCAwQATooZAwQATooo
MAwDBABOii8DBABOijADBABOijIDBAJT5UwDBAJT5WgDBANUJ+ADBAJZEygDBAFZ
Ik4DBAFZJoQDBANZLpgDBABZ+TMDBAJZ+TgDBAJbxfwDBABb9esDBAJcK1QDBAFd
cXwDBARdcgADBAFdcwwDBARdtMADBARdtOADBAResHADBAFesTgDBAJf1yQDBAV3
DcADBAN5W1ADBAKKfJADBAKWgVwDBAOwdwgDBAC5JmYDBAC5WvMDBAK5fcADBAC5
g9wDBAC53zgDBAC58PwDBAC58P8DBAO8X5gDBAK8d3QDBALKtRQDBALLbTQDBAHL
ppwDBAXRFKAwDQYJKoZIhvcNAQELBQADggEBAAEISJH83Ksj1n9mux1KjHkEjSdH
YvSh4QIPGV3rzSEhH31WBabuTNOaqerkdEtph+bO9Ha53XJ1sLaX5TRk65QI2qUw
WdAXdgZaQtXh7QZgfaInMNya8v0VWr+XY+aUNncRouOwg7sNFd3047sqk1JAEVTh
/sqgqw+FuYovLnkK+dXnk7J6b6wGP00gqjDTaMYzk6OlbkRdzgDO3Mo25jdagaiv
30Za5mga9TuMNE0a3kDgXCpud4Kvavv8yq6N2KZ2xLaFmk6VcDUyZW0ECy9yMwrF
qcqzAUWZYUCsY3mKJ/ANGey4iHVRD+scO6nh9kb1XIEc5RkSWABmiH2CTt4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:17 2025 by rpki-client