Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/cHdEshVTZm6CNWJEAru8D9P9st4.roa
File: cHdEshVTZm6CNWJEAru8D9P9st4.roa (raw, json)
Hash identifier: PM0ro5hMf2tomqfirDhmIys3NUe3aoCFrpdXvW0N9xg=
Subject key identifier: 70:77:44:B2:15:53:66:6E:82:35:62:44:02:BB:BC:0F:D3:FD:B2:DE
Certificate issuer: /CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Certificate serial: 0EBBFE64
Authority key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/cHdEshVTZm6CNWJEAru8D9P9st4.roa
Signing time: Mon 25 Apr 2022 18:17:30 +0000
ROA not before: Mon 25 Apr 2022 18:17:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
51.188.0.0/15 maxlen: 24
51.114.0.0/16 maxlen: 24
51.80.0.0/16 maxlen: 24
51.208.0.0/15 maxlen: 24
193.26.64.0/19 maxlen: 24
51.134.0.0/16 maxlen: 24
152.134.0.0/16 maxlen: 24
51.20.0.0/14 maxlen: 24
51.74.0.0/16 maxlen: 24
51.202.0.0/15 maxlen: 24
57.101.0.0/16 maxlen: 24
51.40.0.0/16 maxlen: 24
51.168.0.0/15 maxlen: 24
51.121.0.0/16 maxlen: 24
212.167.0.0/16 maxlen: 24
185.72.192.0/22 maxlen: 24
51.160.0.0/16 maxlen: 24
51.32.0.0/16 maxlen: 24
51.214.0.0/15 maxlen: 24
143.65.224.0/19 maxlen: 24
51.100.0.0/15 maxlen: 24
51.228.0.0/15 maxlen: 24
51.127.0.0/16 maxlen: 24
51.248.0.0/15 maxlen: 24
83.118.240.0/20 maxlen: 24
51.220.0.0/15 maxlen: 24
195.119.0.0/16 maxlen: 24
51.92.0.0/14 maxlen: 24
51.240.0.0/16 maxlen: 24
51.112.0.0/15 maxlen: 24
51.139.0.0/16 maxlen: 24
51.166.0.0/15 maxlen: 24
83.118.228.0/22 maxlen: 24
143.65.0.0/17 maxlen: 24
57.65.0.0/16 maxlen: 24
83.118.234.0/23 maxlen: 24
143.65.128.0/18 maxlen: 24
194.52.0.0/16 maxlen: 24
51.180.0.0/15 maxlen: 24
193.186.210.0/24 maxlen: 24
83.119.128.0/17 maxlen: 24
194.234.0.0/15 maxlen: 24
51.200.0.0/15 maxlen: 24
51.72.0.0/15 maxlen: 24
57.99.0.0/16 maxlen: 24
83.119.64.0/18 maxlen: 24
51.172.0.0/15 maxlen: 24
51.44.0.0/14 maxlen: 24
51.226.0.0/15 maxlen: 24
193.57.169.0/24 maxlen: 24
51.125.0.0/16 maxlen: 24
193.57.170.0/23 maxlen: 24
51.192.0.0/15 maxlen: 24
51.118.0.0/15 maxlen: 24
195.17.0.0/16 maxlen: 24
145.17.0.0/16 maxlen: 24
51.24.0.0/13 maxlen: 24
193.57.254.0/23 maxlen: 24
57.85.0.0/16 maxlen: 24
130.24.0.0/16 maxlen: 24
193.57.181.0/24 maxlen: 24
193.57.182.0/23 maxlen: 24
51.152.0.0/15 maxlen: 24
51.78.0.0/16 maxlen: 24
51.206.0.0/15 maxlen: 24
85.151.0.0/16 maxlen: 24
51.151.0.0/16 maxlen: 24
51.50.0.0/16 maxlen: 24
193.218.122.0/24 maxlen: 24
51.16.0.0/15 maxlen: 24
51.70.0.0/16 maxlen: 24
194.198.0.0/16 maxlen: 24
57.104.0.0/13 maxlen: 24
51.212.0.0/15 maxlen: 24
159.239.0.0/16 maxlen: 24
51.84.0.0/14 maxlen: 24
51.232.0.0/15 maxlen: 24
51.131.0.0/16 maxlen: 24
51.3.0.0/16 maxlen: 24
51.76.0.0/16 maxlen: 24
51.204.0.0/15 maxlen: 24
200.224.0.0/16 maxlen: 24
51.224.0.0/15 maxlen: 24
51.96.0.0/14 maxlen: 24
51.150.0.0/16 maxlen: 24
51.164.0.0/15 maxlen: 24
51.90.0.0/16 maxlen: 24
51.117.0.0/16 maxlen: 24
51.184.0.0/15 maxlen: 24
51.110.0.0/16 maxlen: 24
51.156.0.0/15 maxlen: 24
145.55.0.0/16 maxlen: 24
51.82.0.0/16 maxlen: 24
159.109.0.0/16 maxlen: 24
151.176.0.0/16 maxlen: 24
51.176.0.0/15 maxlen: 24
51.48.0.0/15 maxlen: 24
62.230.0.0/16 maxlen: 24
51.102.0.0/16 maxlen: 24
51.129.0.0/16 maxlen: 24
159.244.0.0/16 maxlen: 24
51.244.0.0/15 maxlen: 24
83.116.0.0/15 maxlen: 24
185.143.16.0/22 maxlen: 24
185.143.16.0/24 maxlen: 24
200.197.0.0/16 maxlen: 24
51.69.0.0/16 maxlen: 24
51.108.0.0/16 maxlen: 24
51.236.0.0/15 maxlen: 24
51.0.64.0/18 maxlen: 24
51.34.0.0/15 maxlen: 24
195.61.0.0/16 maxlen: 24
51.0.0.0/16 maxlen: 24
51.128.0.0/16 maxlen: 24
51.0.32.0/19 maxlen: 24
193.202.192.0/19 maxlen: 24
51.196.0.0/15 maxlen: 24
57.95.0.0/16 maxlen: 24
51.122.0.0/15 maxlen: 24
51.88.0.0/16 maxlen: 24
51.216.0.0/15 maxlen: 24
51.0.128.0/17 maxlen: 24
2a11:47c0::/29 maxlen: 48
2a01:578:1080::/41 maxlen: 48
2a01:578:1010::/44 maxlen: 48
2a01:578:1020::/43 maxlen: 48
2a01:578:1040::/42 maxlen: 48
2a01:578:13::/48 maxlen: 48
2a01:578:1100::/40 maxlen: 48
2a01:578::/36 maxlen: 48
2a01:578:1400::/38 maxlen: 48
2a01:578::/32 maxlen: 48
2a01:578:1200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247201380 (0xebbfe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Validity
Not Before: Apr 25 18:17:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707744b21553666e8235624402bbbc0fd3fdb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:99:1b:22:f4:58:23:81:de:42:c8:ce:9e:
f8:28:48:b1:05:a4:cf:41:a7:9c:85:9e:3b:6a:d4:
d5:d4:fe:82:ba:bf:38:a3:42:bc:94:d8:50:56:0d:
98:cf:02:ee:e4:cc:8f:81:f8:e5:86:de:18:0f:7d:
ed:ce:dd:02:40:23:5c:a2:89:70:af:b6:aa:7a:84:
2d:ed:2d:72:20:ad:a9:e9:32:4d:eb:9c:72:69:cc:
f3:14:5f:a9:35:b5:a9:fd:d8:6a:41:30:5f:84:2d:
30:d7:76:a2:01:f4:6c:60:ec:0d:77:c3:d0:77:a7:
45:60:30:82:b9:83:f1:6a:9f:28:a1:d0:f1:24:f0:
ca:3e:ec:00:d8:a5:31:8c:06:2e:4d:7f:49:2f:73:
72:f4:e5:8e:d9:d2:2e:7d:0e:21:14:07:84:50:97:
49:2c:cd:47:5f:76:30:9d:cf:05:0f:90:a4:f4:6c:
4e:21:ff:21:04:aa:6c:57:95:ba:d0:ac:ef:1f:e5:
cc:68:c3:b4:45:28:56:ab:4a:c4:07:43:93:97:57:
df:df:9e:6d:d5:96:c1:21:92:9c:83:3d:87:1b:41:
9e:67:8b:5b:8f:f4:08:a6:aa:2c:e7:4a:d6:db:af:
19:db:91:fd:a3:12:24:a8:48:48:40:fe:72:3c:a5:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:44:B2:15:53:66:6E:82:35:62:44:02:BB:BC:0F:D3:FD:B2:DE
X509v3 Authority Key Identifier:
keyid:A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/cHdEshVTZm6CNWJEAru8D9P9st4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
51.3.0.0/16
51.16.0.0/15
51.20.0.0-51.32.255.255
51.34.0.0/15
51.40.0.0/16
51.44.0.0-51.50.255.255
51.60.0.0/16
51.69.0.0-51.70.255.255
51.72.0.0-51.74.255.255
51.76.0.0/16
51.78.0.0/16
51.80.0.0/16
51.82.0.0/16
51.84.0.0-51.88.255.255
51.90.0.0/16
51.92.0.0-51.102.255.255
51.108.0.0/16
51.110.0.0/16
51.112.0.0-51.114.255.255
51.117.0.0-51.119.255.255
51.121.0.0-51.123.255.255
51.125.0.0/16
51.127.0.0-51.129.255.255
51.131.0.0/16
51.134.0.0/16
51.139.0.0/16
51.150.0.0-51.153.255.255
51.156.0.0/15
51.160.0.0/16
51.164.0.0-51.169.255.255
51.172.0.0/15
51.176.0.0/15
51.180.0.0/15
51.184.0.0/15
51.188.0.0/15
51.192.0.0/15
51.196.0.0/15
51.200.0.0-51.209.255.255
51.212.0.0-51.217.255.255
51.220.0.0/15
51.224.0.0-51.229.255.255
51.232.0.0/15
51.236.0.0/15
51.240.0.0/16
51.244.0.0/15
51.248.0.0/15
57.65.0.0/16
57.85.0.0/16
57.95.0.0/16
57.99.0.0/16
57.101.0.0/16
57.104.0.0/13
62.230.0.0/16
83.116.0.0/15
83.118.228.0/22
83.118.234.0/23
83.118.240.0/20
83.119.64.0-83.119.255.255
85.151.0.0/16
130.24.0.0/16
143.65.0.0-143.65.191.255
143.65.224.0/19
145.17.0.0/16
145.55.0.0/16
151.176.0.0/16
152.134.0.0/16
159.109.0.0/16
159.239.0.0/16
159.244.0.0/16
185.72.192.0/22
185.143.16.0/22
193.26.64.0/19
193.57.169.0-193.57.171.255
193.57.181.0-193.57.183.255
193.57.254.0/23
193.186.210.0/24
193.202.192.0/19
193.218.122.0/24
194.52.0.0/16
194.198.0.0/16
194.234.0.0/15
195.17.0.0/16
195.61.0.0/16
195.119.0.0/16
200.197.0.0/16
200.224.0.0/16
212.167.0.0/16
IPv6:
2a01:578::/32
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:05:b4:a5:dd:38:49:e3:fe:91:ca:d5:4b:5e:9d:51:86:d2:
a4:4a:ff:40:a5:09:3d:30:50:12:f6:55:e0:fd:44:71:12:70:
96:6a:c0:6b:89:a2:90:a6:5b:c4:32:ed:3b:ea:37:0f:74:6c:
62:43:bf:b8:ca:c9:f4:f0:69:fb:7b:5e:2a:ab:34:56:ee:7f:
48:d8:89:4e:bf:15:94:e2:40:cd:55:36:74:23:23:65:2e:05:
16:08:44:0d:f6:c1:70:79:83:69:9b:ce:d3:d5:4a:6d:c8:af:
ba:45:58:08:50:e1:43:a4:16:5e:df:82:4f:e8:e8:75:80:64:
23:33:4a:0c:3b:d8:91:b6:19:c3:62:17:a1:b1:15:73:64:e5:
ac:3a:01:13:78:a0:ec:97:11:c2:ad:fb:8d:d8:6b:54:11:70:
16:21:96:ea:9b:0e:a0:6a:ae:6d:5b:22:75:a9:78:b1:c2:24:
97:79:b4:27:9e:ac:35:79:3a:ee:b2:f2:2d:c1:c1:4d:e2:5f:
ae:3e:eb:9b:ab:3a:de:7b:d8:e9:32:cb:26:5c:c7:1d:b9:58:
62:9e:b5:0a:59:c6:cf:0f:13:32:1a:8a:d5:52:ce:08:cd:51:
6d:14:7c:ea:9f:85:9b:2e:6e:b0:5b:fd:ff:67:77:a1:e5:3e:
40:2d:38:f7
-----BEGIN CERTIFICATE-----
MIIHVzCCBj+gAwIBAgIEDrv+ZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MTYxNTNmOWQyM2RmZjAzODlkMWM4ZDA1MDIwMGNiNWVmMWM4MjI5MB4XDTIyMDQy
NTE4MTczMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA3NzQ0YjIxNTUz
NjY2ZTgyMzU2MjQ0MDJiYmJjMGZkM2ZkYjJkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzTmRsi9Fgjgd5CyM6e+ChIsQWkz0GnnIWeO2rU1dT+grq/
OKNCvJTYUFYNmM8C7uTMj4H45YbeGA997c7dAkAjXKKJcK+2qnqELe0tciCtqeky
TeuccmnM8xRfqTW1qf3YakEwX4QtMNd2ogH0bGDsDXfD0HenRWAwgrmD8WqfKKHQ
8STwyj7sANilMYwGLk1/SS9zcvTljtnSLn0OIRQHhFCXSSzNR192MJ3PBQ+QpPRs
TiH/IQSqbFeVutCs7x/lzGjDtEUoVqtKxAdDk5dX39+ebdWWwSGSnIM9hxtBnmeL
W4/0CKaqLOdK1tuvGduR/aMSJKhISED+cjylNIECAwEAAaOCBHEwggRtMB0GA1Ud
DgQWBBRwd0SyFVNmboI1YkQCu7wP0/2y3jAfBgNVHSMEGDAWgBShYVP50j3/A4nR
yNBQIAy17xyCKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29XRlQtZEk5X3dPSjBjalFVQ0FNdGU4Y2dpay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvZWViNzBlLTA3NjMtNDI5OS04NGZiLWQ4MGJlMjFjZTZjYS8x
L2NIZEVzaFZUWm02Q05XSkVBcnU4RDlQOXN0NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
ZWViNzBlLTA3NjMtNDI5OS04NGZiLWQ4MGJlMjFjZTZjYS8xL29XRlQtZEk5X3dP
SjBjalFVQ0FNdGU4Y2dpay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AoUGCCsGAQUFBwEHAQH/BIICdDCCAnAwggJWBAIAATCCAk4DAwAzAAMDADMDAwMB
MxAwCgMDAjMUAwMAMyADAwEzIgMDADMoMAoDAwIzLAMDADMyAwMAMzwwCgMDADNF
AwMAM0YwCgMDAzNIAwMAM0oDAwAzTAMDADNOAwMAM1ADAwAzUjAKAwMCM1QDAwAz
WAMDADNaMAoDAwIzXAMDADNmAwMAM2wDAwAzbjAKAwMEM3ADAwAzcjAKAwMAM3UD
AwMzcDAKAwMAM3kDAwIzeAMDADN9MAoDAwAzfwMDATOAAwMAM4MDAwAzhgMDADOL
MAoDAwEzlgMDATOYAwMBM5wDAwAzoDAKAwMCM6QDAwEzqAMDATOsAwMBM7ADAwEz
tAMDATO4AwMBM7wDAwEzwAMDATPEMAoDAwMzyAMDATPQMAoDAwIz1AMDATPYAwMB
M9wwCgMDBTPgAwMBM+QDAwEz6AMDATPsAwMAM/ADAwEz9AMDATP4AwMAOUEDAwA5
VQMDADlfAwMAOWMDAwA5ZQMDAzloAwMAPuYDAwFTdAMEAlN25AMEAVN26gMEBFN2
8DALAwQGU3dAAwMDU3ADAwBVlwMDAIIYMAsDAwCPQQMEBo9BgAMEBY9B4AMDAJER
AwMAkTcDAwCXsAMDAJiGAwMAn20DAwCf7wMDAJ/0AwQCuUjAAwQCuY8QAwQFwRpA
MAwDBADBOakDBALBOagwDAMEAME5tQMEA8E5sAMEAcE5/gMEAMG60gMEBcHKwAME
AMHaegMDAMI0AwMAwsYDAwHC6gMDAMMRAwMAwz0DAwDDdwMDAMjFAwMAyOADAwDU
pzAUBAIAAjAOAwUAKgEFeAMFAyoRR8AwDQYJKoZIhvcNAQELBQADggEBADEFtKXd
OEnj/pHK1UtenVGG0qRK/0ClCT0wUBL2VeD9RHEScJZqwGuJopCmW8Qy7TvqNw90
bGJDv7jKyfTwaft7XiqrNFbuf0jYiU6/FZTiQM1VNnQjI2UuBRYIRA32wXB5g2mb
ztPVSm3Ir7pFWAhQ4UOkFl7fgk/o6HWAZCMzSgw72JG2GcNiF6GxFXNk5aw6ARN4
oOyXEcKt+43Ya1QRcBYhluqbDqBqrm1bInWpeLHCJJd5tCeerDV5Ou6y8i3BwU3i
X64+65urOt572OkyyyZcxx25WGKetQpZxs8PEzIaitVSzgjNUW0UfOqfhZsubrBb
/f9nd6HlPkAtOPc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org