Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ubvYMN6BtFRNr0vp49aJy_r3Xko.roa
File: ubvYMN6BtFRNr0vp49aJy_r3Xko.roa (raw, json)
Hash identifier: jeDx38EQ0bixAkTdHz4reHrT4rtAAO/OkJFTEQkFuyQ=
Subject key identifier: B9:BB:D8:30:DE:81:B4:54:4D:AF:4B:E9:E3:D6:89:CB:FA:F7:5E:4A
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01958289BE4363E2A5F9783BBE1D745FAC5B
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ubvYMN6BtFRNr0vp49aJy_r3Xko.roa
Signing time: Tue 11 Mar 2025 00:10:20 +0000
ROA not before: Tue 11 Mar 2025 00:10:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.76.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.138.41.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
2001:1497:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:89:be:43:63:e2:a5:f9:78:3b:be:1d:74:5f:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Mar 11 00:10:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9bbd830de81b4544daf4be9e3d689cbfaf75e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:20:96:4c:5b:9f:e7:30:c3:dd:84:49:64:
bc:d3:57:30:17:ab:d6:77:f7:1a:9a:69:6a:e0:6e:
25:7f:49:55:dc:04:17:3d:88:db:82:0e:b5:40:d1:
f2:58:e6:e8:01:1d:35:0d:01:0b:87:06:d6:60:cc:
ce:64:56:c9:c9:fc:d4:77:49:4c:c2:95:c1:d3:31:
bb:22:57:a6:0c:26:94:fa:1e:91:43:15:c9:a7:68:
10:59:99:9f:f0:8a:b3:06:13:76:fa:bc:f0:9f:83:
1b:cb:0a:9b:1c:5b:be:44:61:02:89:c6:f2:6f:e9:
4a:57:55:49:be:be:7f:1a:39:90:08:62:25:c3:e7:
b9:5f:65:81:ca:e1:8e:32:3d:3c:6f:8e:00:c7:a9:
45:d0:0a:b5:1f:db:54:95:45:49:64:8a:72:4f:96:
f9:d9:3f:a6:fd:b0:b7:73:d1:11:27:75:e5:02:c1:
75:4b:d0:7d:c5:21:22:d7:3c:4c:16:31:00:0a:41:
6a:d3:d9:9a:10:75:60:e8:14:0d:7c:a6:78:49:bb:
9c:f3:a8:9b:da:8a:b0:c6:68:da:d1:16:64:31:7c:
39:48:0c:b5:f9:45:d0:67:0c:e3:63:5e:35:c2:79:
4b:9f:cb:16:6f:16:dd:17:d8:35:29:06:52:76:6a:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:D8:30:DE:81:B4:54:4D:AF:4B:E9:E3:D6:89:CB:FA:F7:5E:4A
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ubvYMN6BtFRNr0vp49aJy_r3Xko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.6.0-212.26.11.255
212.26.16.0-212.26.32.255
212.26.36.0-212.26.48.255
212.26.50.0-212.26.54.255
212.26.56.0/24
212.26.58.0/24
212.26.60.0/24
212.26.63.0-212.26.65.255
212.26.68.0/23
212.26.71.0-212.26.72.255
212.26.74.0/24
212.26.76.0/24
212.26.78.0/24
212.138.41.0/24
212.138.52.0-212.138.67.255
212.138.70.0-212.138.86.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0-212.138.104.255
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.132.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.147.0/24
212.138.150.0/24
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.180.0/23
212.138.183.0/24
212.138.185.0/24
212.138.187.0-212.138.188.255
212.138.190.0/24
212.138.192.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0-212.138.203.255
212.138.206.0/24
212.138.210.0/24
212.138.250.0/24
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/47
2001:1490:113::-2001:1490:115:ffff:ffff:ffff:ffff:ffff
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
a1:42:87:79:71:bb:38:5f:c4:53:cb:8d:36:c0:45:37:c9:c3:
1b:e6:9b:76:9c:f0:59:21:7b:bf:63:b3:ab:3b:fc:21:2e:52:
35:62:a9:e3:c6:31:8e:cd:19:64:03:c6:0d:39:14:b7:98:a0:
dc:ba:a9:d2:e3:94:a6:29:58:fe:4c:f4:54:d7:54:5a:34:a8:
1d:a4:c1:8d:40:f5:0a:1f:15:1b:a9:8f:ed:d5:18:a0:4b:03:
ce:a0:16:1e:59:7c:7a:74:d4:0c:a1:1b:48:5a:c4:83:3c:09:
36:8e:47:23:3d:50:78:56:bd:c9:04:93:9a:97:5d:05:f2:02:
67:bb:b6:4a:a0:ba:c2:0f:06:6c:ae:16:bc:c5:a5:fa:d1:9d:
ce:9b:01:99:94:bc:57:6a:3e:29:54:1e:5d:bc:0b:fd:7c:a3:
f1:8b:67:e6:33:e3:c1:6b:a6:47:59:e5:62:83:ce:b9:95:93:
af:34:8a:98:39:70:ce:c1:25:23:d0:cc:46:93:5d:33:53:87:
39:60:ff:ce:48:45:d6:17:83:4b:72:46:26:7f:06:fe:e5:67:
e9:8d:df:03:aa:2a:07:6b:54:26:98:4a:dd:78:1b:09:7c:cf:
33:bc:d5:3f:50:f0:11:dd:67:eb:09:02:89:7f:99:e2:d1:70:
6c:dc:87:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:13 2025 by rpki-client