Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/YQ5IvhB2hM8McQGt_acdg9l7qvE.roa
File: YQ5IvhB2hM8McQGt_acdg9l7qvE.roa (raw, json)
Hash identifier: qmTFUhMUwCqacMSk+dbUgvhlk5dFQt4vcnTuTWNZdHk=
Subject key identifier: 61:0E:48:BE:10:76:84:CF:0C:71:01:AD:FD:A7:1D:83:D9:7B:AA:F1
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 0195CF7386BD39E18574D4592A3083DCB9A6
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/YQ5IvhB2hM8McQGt_acdg9l7qvE.roa
Signing time: Tue 25 Mar 2025 22:36:49 +0000
ROA not before: Tue 25 Mar 2025 22:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210218
IP address blocks: 2.58.93.0/24 maxlen: 24
2.58.94.0/24 maxlen: 24
2.58.136.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.59.248.0/22 maxlen: 22
31.13.194.0/24 maxlen: 24
31.13.249.0/24 maxlen: 24
31.13.250.0/23 maxlen: 23
31.13.252.0/22 maxlen: 22
37.139.129.0/24 maxlen: 24
37.221.120.0/22 maxlen: 22
45.8.74.0/23 maxlen: 23
45.12.248.0/22 maxlen: 22
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.139.100.0/22 maxlen: 22
45.143.100.0/22 maxlen: 22
45.144.152.0/23 maxlen: 23
45.149.232.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
77.75.56.0/23 maxlen: 23
77.75.58.0/23 maxlen: 23
78.40.160.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
82.115.208.0/24 maxlen: 24
87.120.32.0/24 maxlen: 24
87.120.34.0/23 maxlen: 23
87.120.46.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
87.120.64.0/23 maxlen: 23
87.120.64.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.66.0/24 maxlen: 24
87.120.85.0/24 maxlen: 24
87.120.86.0/24 maxlen: 24
87.120.96.0/23 maxlen: 23
87.120.111.0/24 maxlen: 24
87.120.177.0/24 maxlen: 24
87.120.218.0/24 maxlen: 24
87.120.220.0/23 maxlen: 23
87.120.224.0/24 maxlen: 24
87.120.226.0/24 maxlen: 24
87.120.232.0/22 maxlen: 22
87.121.19.0/24 maxlen: 24
87.121.36.0/23 maxlen: 23
87.121.56.0/23 maxlen: 23
87.121.59.0/24 maxlen: 24
87.121.66.0/23 maxlen: 23
87.121.68.0/24 maxlen: 24
87.121.100.0/23 maxlen: 23
87.121.116.0/24 maxlen: 24
87.121.148.0/23 maxlen: 23
91.92.3.0/24 maxlen: 24
91.92.24.0/23 maxlen: 23
91.92.24.0/24 maxlen: 24
91.92.25.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
92.249.51.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.86.0/23 maxlen: 23
93.123.108.0/24 maxlen: 24
94.33.0.0/24 maxlen: 24
94.33.1.0/24 maxlen: 24
94.33.2.0/24 maxlen: 24
94.33.3.0/24 maxlen: 24
94.33.4.0/24 maxlen: 24
94.33.5.0/24 maxlen: 24
94.33.6.0/24 maxlen: 24
94.33.7.0/24 maxlen: 24
94.33.8.0/24 maxlen: 24
94.33.9.0/24 maxlen: 24
94.33.10.0/24 maxlen: 24
94.33.11.0/24 maxlen: 24
94.33.12.0/24 maxlen: 24
94.33.13.0/24 maxlen: 24
94.33.14.0/24 maxlen: 24
94.33.15.0/24 maxlen: 24
94.33.16.0/24 maxlen: 24
94.33.17.0/24 maxlen: 24
94.33.18.0/24 maxlen: 24
94.33.19.0/24 maxlen: 24
94.33.20.0/24 maxlen: 24
94.33.21.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.154.174.0/23 maxlen: 23
94.156.16.0/22 maxlen: 22
94.156.32.0/24 maxlen: 24
94.156.48.0/21 maxlen: 21
94.156.95.0/24 maxlen: 24
94.156.108.0/22 maxlen: 22
94.156.124.0/22 maxlen: 22
94.156.168.0/23 maxlen: 23
94.156.182.0/23 maxlen: 23
94.156.184.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
94.156.192.0/23 maxlen: 23
94.156.234.0/23 maxlen: 23
94.156.240.0/22 maxlen: 22
94.156.246.0/23 maxlen: 23
94.240.56.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
109.206.238.0/24 maxlen: 24
141.98.0.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
164.40.186.0/23 maxlen: 23
171.22.17.0/24 maxlen: 24
171.22.29.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
178.175.184.0/21 maxlen: 21
178.175.184.0/22 maxlen: 22
178.215.225.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.171.148.0/22 maxlen: 22
185.219.125.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
185.254.38.0/23 maxlen: 23
193.19.200.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.37.43.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
193.46.172.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
193.149.2.0/23 maxlen: 23
193.207.0.0/24 maxlen: 24
193.207.1.0/24 maxlen: 24
193.207.2.0/24 maxlen: 24
193.207.3.0/24 maxlen: 24
193.207.4.0/24 maxlen: 24
193.207.5.0/24 maxlen: 24
193.207.6.0/24 maxlen: 24
193.207.7.0/24 maxlen: 24
193.207.8.0/24 maxlen: 24
193.207.9.0/24 maxlen: 24
193.207.10.0/24 maxlen: 24
193.207.11.0/24 maxlen: 24
193.207.12.0/24 maxlen: 24
193.207.13.0/24 maxlen: 24
193.207.14.0/24 maxlen: 24
193.207.15.0/24 maxlen: 24
193.207.16.0/21 maxlen: 21
194.48.249.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
194.169.174.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
195.178.120.0/24 maxlen: 24
195.225.120.0/22 maxlen: 22
212.22.128.0/19 maxlen: 19
212.24.0.0/19 maxlen: 19
212.73.135.0/24 maxlen: 24
2a09:e6c0::/29 maxlen: 29
2a09:e6c0::/48 maxlen: 48
2a09:e6c0:8::/48 maxlen: 48
2a09:e6c7:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:73:86:bd:39:e1:85:74:d4:59:2a:30:83:dc:b9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Mar 25 22:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=610e48be107684cf0c7101adfda71d83d97baaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:8d:9e:57:11:07:e3:55:fc:06:3c:d2:c8:
c9:c9:d8:a2:7a:bf:1b:b9:4c:50:28:b4:81:6e:d0:
55:f6:3a:ff:c1:b5:10:90:31:d8:a2:e1:16:e0:7d:
21:3c:70:89:bb:0f:a0:11:5d:39:3d:10:65:23:cd:
10:b5:fd:3d:e3:b5:bc:fe:ed:31:9a:45:84:a2:3c:
be:1f:08:1a:c5:a0:16:84:45:b8:21:23:e6:a6:8e:
3e:21:dd:61:96:62:fa:fe:d5:8f:55:73:be:ad:a8:
3d:e3:8c:3a:74:a1:3e:e1:ae:43:17:81:b3:11:c1:
eb:13:60:04:22:e0:0e:4f:10:4b:be:d1:c8:6c:ec:
86:ff:65:f3:16:ab:29:ea:db:98:a5:a1:4d:81:88:
f3:58:7e:46:5b:6c:e1:71:fa:e3:f5:79:aa:2e:ee:
17:2d:1b:6d:1d:db:24:6f:56:3f:3b:44:d7:df:5b:
b3:71:ce:70:de:d1:60:9e:1b:60:ca:18:ec:fc:8d:
22:a3:68:a5:3f:e2:e4:75:b7:73:c5:d7:1e:50:a4:
44:a1:2a:b8:2a:06:3c:16:9f:a4:97:62:a6:eb:7b:
6c:60:8f:63:f4:e3:41:2a:ba:52:4d:b4:b0:0e:7a:
ca:53:63:9f:b2:92:cc:b8:08:30:7b:ae:5f:de:ae:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:48:BE:10:76:84:CF:0C:71:01:AD:FD:A7:1D:83:D9:7B:AA:F1
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/YQ5IvhB2hM8McQGt_acdg9l7qvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0-94.33.21.255
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:e6:18:ff:13:9f:0c:47:5a:54:3e:a4:46:32:5b:55:97:55:
fc:09:d1:39:21:5f:2b:f7:9f:e3:27:06:40:67:9e:c9:48:1d:
79:c5:9f:20:19:7d:0f:b6:30:88:ab:7c:1c:81:4e:36:8d:90:
76:41:f1:a2:f5:5c:91:dc:a8:f6:28:16:94:83:b0:73:67:d1:
3a:94:1c:52:4b:1e:c4:0e:4a:d7:a3:2f:a8:c1:a2:07:1e:b8:
3d:25:49:f1:19:1c:4e:6a:f4:8d:37:6c:6a:eb:a6:36:bf:e3:
c5:12:e7:50:73:a2:59:03:d1:c7:c5:8c:ea:ba:1a:9c:62:63:
83:2f:ab:89:2d:4b:68:b6:46:f4:a7:8c:16:72:26:75:92:e8:
26:5b:8b:fb:61:a7:cb:3b:fd:5f:14:fd:03:b1:e0:d6:1f:4f:
ed:77:52:82:35:5e:35:d4:f8:1e:7b:f8:c7:1d:91:bd:b2:32:
2d:5b:a4:8f:5b:08:43:69:83:ed:e1:6f:b2:57:f4:c1:5b:f8:
7b:20:d7:17:7c:88:a1:52:6e:fe:ce:8e:69:15:3c:fa:93:15:
2f:26:2c:53:9d:3e:81:69:04:f8:92:cc:cd:16:a7:7f:82:d7:
40:25:a1:08:c6:d4:13:30:12:ad:cc:47:f4:40:7a:3a:80:08:
11:15:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:15:38 2025 by rpki-client