Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/_TFywu4OJpZES62fD9h3GBN6USw.roa
File: _TFywu4OJpZES62fD9h3GBN6USw.roa (raw, json)
Hash identifier: qtc8bwkX5UXonMpypd8Ak6iHnLDcujXME9642pLZcZE=
Subject key identifier: FD:31:72:C2:EE:0E:26:96:44:4B:AD:9F:0F:D8:77:18:13:7A:51:2C
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 019503F9E1959C98BFA68DEFD3348BED1E8F
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/_TFywu4OJpZES62fD9h3GBN6USw.roa
Signing time: Fri 14 Feb 2025 10:21:02 +0000
ROA not before: Fri 14 Feb 2025 10:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210218
IP address blocks: 2.58.93.0/24 maxlen: 24
2.58.94.0/24 maxlen: 24
2.58.136.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.59.248.0/22 maxlen: 22
31.13.194.0/24 maxlen: 24
31.13.249.0/24 maxlen: 24
31.13.250.0/23 maxlen: 23
31.13.252.0/22 maxlen: 22
37.139.129.0/24 maxlen: 24
37.221.120.0/22 maxlen: 22
45.8.74.0/23 maxlen: 23
45.12.248.0/22 maxlen: 22
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.139.100.0/22 maxlen: 22
45.143.100.0/22 maxlen: 22
45.144.152.0/23 maxlen: 23
45.149.232.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
77.75.56.0/23 maxlen: 23
77.75.58.0/23 maxlen: 23
78.40.160.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
82.115.208.0/24 maxlen: 24
87.120.32.0/24 maxlen: 24
87.120.34.0/23 maxlen: 23
87.120.46.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
87.120.64.0/23 maxlen: 23
87.120.64.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.66.0/24 maxlen: 24
87.120.85.0/24 maxlen: 24
87.120.86.0/24 maxlen: 24
87.120.96.0/23 maxlen: 23
87.120.111.0/24 maxlen: 24
87.120.177.0/24 maxlen: 24
87.120.218.0/24 maxlen: 24
87.120.220.0/23 maxlen: 23
87.120.224.0/24 maxlen: 24
87.120.226.0/24 maxlen: 24
87.120.232.0/22 maxlen: 22
87.121.19.0/24 maxlen: 24
87.121.36.0/23 maxlen: 23
87.121.56.0/23 maxlen: 23
87.121.59.0/24 maxlen: 24
87.121.66.0/23 maxlen: 23
87.121.68.0/24 maxlen: 24
87.121.100.0/23 maxlen: 23
87.121.116.0/24 maxlen: 24
87.121.148.0/23 maxlen: 23
91.92.3.0/24 maxlen: 24
91.92.24.0/23 maxlen: 23
91.92.24.0/24 maxlen: 24
91.92.25.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
92.249.51.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.86.0/23 maxlen: 23
93.123.108.0/24 maxlen: 24
94.33.0.0/24 maxlen: 24
94.33.1.0/24 maxlen: 24
94.33.2.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.154.174.0/23 maxlen: 23
94.156.16.0/22 maxlen: 22
94.156.32.0/24 maxlen: 24
94.156.48.0/21 maxlen: 21
94.156.95.0/24 maxlen: 24
94.156.108.0/22 maxlen: 22
94.156.124.0/22 maxlen: 22
94.156.168.0/23 maxlen: 23
94.156.182.0/23 maxlen: 23
94.156.184.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
94.156.192.0/23 maxlen: 23
94.156.234.0/23 maxlen: 23
94.156.240.0/22 maxlen: 22
94.156.246.0/23 maxlen: 23
94.240.56.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
109.206.238.0/24 maxlen: 24
141.98.0.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
164.40.186.0/23 maxlen: 23
171.22.17.0/24 maxlen: 24
171.22.29.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
178.175.184.0/21 maxlen: 21
178.175.184.0/22 maxlen: 22
178.215.225.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.171.148.0/22 maxlen: 22
185.219.125.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
185.254.38.0/23 maxlen: 23
193.19.200.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.37.43.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
193.46.172.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
193.149.2.0/23 maxlen: 23
193.207.0.0/24 maxlen: 24
193.207.1.0/24 maxlen: 24
193.207.2.0/24 maxlen: 24
193.207.3.0/24 maxlen: 24
193.207.4.0/24 maxlen: 24
193.207.5.0/24 maxlen: 24
193.207.6.0/24 maxlen: 24
193.207.7.0/24 maxlen: 24
193.207.8.0/24 maxlen: 24
193.207.9.0/24 maxlen: 24
193.207.10.0/24 maxlen: 24
193.207.11.0/24 maxlen: 24
193.207.12.0/24 maxlen: 24
193.207.13.0/24 maxlen: 24
193.207.14.0/24 maxlen: 24
193.207.15.0/24 maxlen: 24
193.207.16.0/21 maxlen: 21
194.48.249.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
194.169.174.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
195.178.120.0/24 maxlen: 24
195.225.120.0/22 maxlen: 22
212.22.128.0/19 maxlen: 19
212.24.0.0/19 maxlen: 19
212.73.135.0/24 maxlen: 24
2a09:e6c0::/29 maxlen: 29
2a09:e6c0::/48 maxlen: 48
2a09:e6c7:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:f9:e1:95:9c:98:bf:a6:8d:ef:d3:34:8b:ed:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Feb 14 10:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd3172c2ee0e2696444bad9f0fd87718137a512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:33:57:72:1a:f2:e5:c7:5e:df:06:df:98:
2b:43:ca:46:af:54:40:87:ce:99:78:65:12:21:45:
30:6a:f1:6c:54:a1:27:9c:85:97:90:44:cb:3c:98:
bc:2a:a2:62:cd:56:28:50:e0:5e:19:64:8a:22:22:
59:2e:8a:1b:91:b4:f9:05:48:be:df:42:52:a5:77:
ec:2e:86:9c:cf:17:10:2b:6d:96:92:d8:7f:5b:41:
ee:cd:2e:55:f9:00:c1:71:2f:39:de:8b:cb:18:4a:
f9:64:ac:e9:e1:e4:a5:37:15:de:76:f6:84:0f:53:
38:06:d6:27:18:56:2c:e0:e6:1f:7d:1c:28:0c:aa:
75:6f:a5:40:57:47:c2:b0:6e:a0:84:90:42:38:62:
ec:de:11:d4:14:a6:6b:c5:10:69:62:b2:a1:b3:5b:
fa:5d:83:96:a0:08:73:60:6d:54:4d:d1:aa:d5:97:
bc:9d:34:a6:ff:cd:a5:3e:b1:18:8a:4f:34:e5:26:
ac:db:b7:27:4f:93:e9:4e:2e:9a:07:84:45:28:6f:
3d:19:1f:28:ef:2f:c7:9e:fe:f2:e2:f8:24:cc:a6:
39:0a:9d:cf:5b:c4:3d:59:e7:66:f4:b4:8f:e9:d5:
20:a9:94:85:22:6a:70:23:0b:ef:59:24:e8:08:2f:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:72:C2:EE:0E:26:96:44:4B:AD:9F:0F:D8:77:18:13:7A:51:2C
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/_TFywu4OJpZES62fD9h3GBN6USw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0-94.33.2.255
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:3b:72:dd:5f:d3:c8:06:a9:6a:95:d3:31:96:a3:e4:53:30:
4c:a3:4b:b7:59:43:41:5d:e1:3d:25:aa:1f:cb:02:6f:96:5e:
59:b1:d1:8b:ba:57:60:7a:e5:8f:70:ce:c9:66:74:7c:be:45:
61:17:c1:e1:c2:54:58:7c:7b:05:ed:5c:ce:c7:ef:1d:a8:f5:
3d:e8:5c:06:3d:06:4c:84:a8:7d:2b:2d:5d:92:33:d9:b8:98:
22:8b:75:74:6b:04:05:51:2d:a9:98:3e:e5:74:ea:9d:a2:2c:
81:fb:d6:52:84:09:b8:37:2e:1f:44:dc:0a:9a:ca:ab:9a:e0:
39:5e:27:82:55:b3:b6:30:a6:92:a5:31:e4:86:b5:b9:f0:51:
dc:66:06:95:b9:a2:3b:dc:8d:d8:89:04:27:f3:a5:75:12:ac:
4f:42:47:5a:b8:02:33:5b:3c:b3:b4:54:4f:b7:15:31:12:6a:
9a:0a:1f:35:c7:1f:f0:24:16:5f:12:3f:31:98:8d:4a:13:ea:
cb:db:ec:e1:03:d0:d2:68:d6:f8:a0:03:a0:c0:66:5f:a7:f5:
d3:f6:40:1b:59:09:22:01:ac:d3:0f:57:3e:d1:09:61:2f:04:
91:57:56:ad:8b:f7:2a:d8:5b:2f:da:7b:60:47:31:53:f6:6c:
46:61:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:20 2025 by rpki-client