Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/xw83wudCk127kiXHqSwTaIW46z8.roa
File: xw83wudCk127kiXHqSwTaIW46z8.roa (raw, json)
Hash identifier: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=
Subject key identifier: C7:0F:37:C2:E7:42:93:5D:BB:92:25:C7:A9:2C:13:68:85:B8:EB:3F
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 019422FBFBC1C29BBEC55E66BA97B8C163CF
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/xw83wudCk127kiXHqSwTaIW46z8.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 31.185.24.0/21 maxlen: 21
37.191.128.0/17 maxlen: 17
62.63.0.0/18 maxlen: 18
62.101.192.0/18 maxlen: 18
64.28.0.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
77.88.64.0/18 maxlen: 18
77.234.48.0/21 maxlen: 21
78.24.144.0/21 maxlen: 21
79.135.0.0/19 maxlen: 19
80.64.192.0/20 maxlen: 20
80.241.80.0/20 maxlen: 20
81.0.128.0/18 maxlen: 18
81.175.0.0/20 maxlen: 20
81.175.20.0/22 maxlen: 22
81.175.24.0/21 maxlen: 21
81.175.32.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
82.196.192.0/19 maxlen: 19
84.20.96.0/19 maxlen: 19
85.112.128.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
85.221.0.0/17 maxlen: 17
85.252.0.0/16 maxlen: 16
86.62.128.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
88.84.160.0/19 maxlen: 19
89.191.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
91.202.80.0/22 maxlen: 22
109.199.192.0/19 maxlen: 19
178.74.0.0/18 maxlen: 18
185.8.16.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
185.67.116.0/22 maxlen: 22
185.129.156.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
193.71.0.0/16 maxlen: 16
193.75.0.0/17 maxlen: 17
193.90.0.0/16 maxlen: 16
193.91.128.0/17 maxlen: 17
194.19.0.0/17 maxlen: 17
194.29.200.0/22 maxlen: 22
194.54.96.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
195.1.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
195.159.0.0/16 maxlen: 16
195.204.0.0/16 maxlen: 16
212.62.224.0/19 maxlen: 19
212.71.64.0/19 maxlen: 19
213.52.0.0/17 maxlen: 17
213.151.128.0/19 maxlen: 19
213.158.224.0/19 maxlen: 19
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
213.172.192.0/19 maxlen: 19
213.239.64.0/18 maxlen: 18
217.8.128.0/19 maxlen: 19
217.14.0.0/20 maxlen: 20
217.77.32.0/20 maxlen: 20
217.118.32.0/19 maxlen: 19
217.144.224.0/19 maxlen: 19
2001:840::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2001:4dd8::/29 maxlen: 29
2a00:c440::/29 maxlen: 29
2a01:520::/29 maxlen: 29
2a02:270::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2a04:6340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fb:c1:c2:9b:be:c5:5e:66:ba:97:b8:c1:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c70f37c2e742935dbb9225c7a92c136885b8eb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:15:88:07:8d:95:d5:4e:9d:51:52:33:f4:
f5:55:fe:ac:ff:8f:ed:c7:82:ba:82:ef:cf:c2:ad:
16:f4:da:26:e7:13:6a:4f:c1:c4:fa:e9:d1:fb:6e:
00:e4:c4:51:67:8f:13:38:8a:5c:63:a0:6e:aa:ab:
cd:36:82:9f:8c:fa:1d:61:6d:c2:19:5c:b0:d1:24:
5f:73:76:c5:10:eb:61:06:30:8d:e5:13:42:75:7d:
bb:f0:43:d3:55:59:03:85:85:80:9f:46:c1:d3:1e:
56:0e:d8:76:a1:a5:b6:1d:5e:48:86:eb:e1:3b:07:
ee:f1:42:d8:a8:1a:17:92:cb:94:46:12:40:ab:4f:
2b:b2:5a:05:77:c7:62:22:31:31:50:5f:cd:42:a9:
48:42:b8:bd:6f:be:3e:38:f1:7b:af:59:9f:c1:d0:
c3:d3:b3:8e:7b:63:46:9a:89:a1:73:2d:31:7a:4a:
5f:37:d0:f8:67:40:cc:8d:ea:24:dc:dc:14:27:ae:
19:b6:89:97:fd:85:54:91:cc:3b:df:07:9a:bb:70:
f2:73:fe:38:4f:e5:d3:c7:ec:2c:e8:d3:fa:0b:05:
45:4e:cb:a8:0a:2c:41:36:74:97:13:68:5d:6c:f4:
57:c0:ad:51:99:25:c8:26:12:cf:08:f0:29:88:41:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:37:C2:E7:42:93:5D:BB:92:25:C7:A9:2C:13:68:85:B8:EB:3F
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/xw83wudCk127kiXHqSwTaIW46z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
Signature Algorithm: sha256WithRSAEncryption
b7:51:20:fe:05:32:88:a3:53:d6:d6:32:d3:d8:7b:39:c8:b8:
7a:26:51:fd:3c:1e:bd:2b:49:fb:6b:42:c7:e2:64:c7:4b:fe:
5e:d0:6d:90:26:43:34:12:b3:04:a2:3f:b4:4f:7b:6a:ff:89:
f0:08:05:15:b5:fe:49:94:3a:08:25:1a:61:4f:4e:5f:0a:69:
49:01:f2:a1:32:cb:c0:7e:b6:67:9f:4d:56:df:24:71:f0:fd:
2a:70:57:fe:00:6d:31:ee:fa:38:f2:af:ba:06:71:85:c4:9e:
49:e6:fe:e5:11:f3:1a:5d:54:dd:5a:74:5b:58:83:2d:ce:5d:
01:9f:d7:83:74:ab:eb:dc:69:3a:db:d3:7f:d5:f4:fd:78:f7:
88:d1:5c:ce:f1:ef:0f:c1:62:3b:31:14:2e:8b:9b:78:9f:76:
4d:35:8b:69:2c:e5:39:dc:77:04:3c:34:60:a9:b9:a0:a2:74:
37:eb:54:00:9f:62:ef:0a:59:6e:e1:94:27:2f:53:41:72:ec:
4e:22:09:5a:39:c5:54:67:c4:46:bc:cb:14:bd:b9:65:94:ac:
8d:43:f7:f5:77:1d:b9:b6:50:66:8c:d1:48:15:79:f5:35:6f:
99:29:82:4d:c9:dd:eb:74:2a:f7:35:d5:5d:bf:95:42:45:16:
a3:29:0f:7f
-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgISAZQi+/vBwpu+xV5mupe4wWPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5
YmJjOGUwHhcNMjUwMTAxMTc0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzBmMzdjMmU3NDI5MzVkYmI5MjI1YzdhOTJjMTM2ODg1YjhlYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JgViAeNldVOnVFSM/T1Vf6s/4/t
x4K6gu/Pwq0W9Nom5xNqT8HE+unR+24A5MRRZ48TOIpcY6BuqqvNNoKfjPodYW3C
GVyw0SRfc3bFEOthBjCN5RNCdX278EPTVVkDhYWAn0bB0x5WDth2oaW2HV5Ihuvh
Owfu8ULYqBoXksuURhJAq08rsloFd8diIjExUF/NQqlIQri9b74+OPF7r1mfwdDD
07OOe2NGmomhcy0xekpfN9D4Z0DMjeok3NwUJ64ZtomX/YVUkcw73weau3Dyc/44
T+XTx+ws6NP6CwVFTsuoCixBNnSXE2hdbPRXwK1RmSXIJhLPCPApiEElyQIDAQAB
o4IDxDCCA8AwHQYDVR0OBBYEFMcPN8LnQpNdu5Ilx6ksE2iFuOs/MB8GA1UdIwQY
MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt
Mzk0ODAyODVhOTQ4LzEveHc4M3d1ZENrMTI3a2lYSHFTd1RhSVc0Nno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4
LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAX8EAgABMIIB
dwMEAx+5GAMEByW/gAMEBj4/AAMEBj5lwAMEBUAcAAMEB00ogAMEBk1YQAMEA03q
MAMEA04YkAMEBU+HAAMEBFBAwAMEBFDxUAMEBlEAgAMEBFGvADAMAwQCUa8UAwQG
Ua8AAwMAUb8DBAVSxMADBAVUFGADBAVVcIADBAZVxEADBAdV3QADAwBV/AMEBlY+
gAMEBld2AAMEBVhUoAMEBVm/AAMEBFuHIAMEAlvKUAMEBW3HwAMEBrJKAAMEArkI
EAMEArkjUAMEArlDdAMEArmBnAMDAMFFAwMAwUcDBAfBSwADAwDBWgMEB8FbgAME
B8ITAAMEAsIdyAMEBcI2YDALAwQHwwCAAwMBwwADBAfDEoADAwDDiwMDAMOfAwMA
w8wDBAXUPuADBAXUR0ADBAfVNAADBAXVl4ADBAXVnuAwDAMEBdWg4AMEA9Wg8AME
BdWswAMEBtXvQAMEBdkIgAMEBNkOAAMEBNlNIAMEBdl2IAMEBdmQ4DA+BAIAAjA4
AwUDIAEIQAMFAyABCMADBQMgAU3YAwUDKgDEQAMFAyoBBSADBQMqAgJwAwUDKgPA
AAMFAyoEY0AwDQYJKoZIhvcNAQELBQADggEBALdRIP4FMoijU9bWMtPYeznIuHom
Uf08Hr0rSftrQsfiZMdL/l7QbZAmQzQSswSiP7RPe2r/ifAIBRW1/kmUOgglGmFP
Tl8KaUkB8qEyy8B+tmefTVbfJHHw/SpwV/4AbTHu+jjyr7oGcYXEnknm/uUR8xpd
VN1adFtYgy3OXQGf14N0q+vcaTrb03/V9P1494jRXM7x7w/BYjsxFC6Lm3ifdk01
i2ks5TncdwQ8NGCpuaCidDfrVACfYu8KWW7hlCcvU0Fy7E4iCVo5xVRnxEa8yxS9
uWWUrI1D9/V3Hbm2UGaM0UgVefU1b5kpgk3J3et0Kvc11V2/lUJFFqMpD38=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:41 2025 by rpki-client