Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/x3PTV0bJuNHxl7SV9nBUbpJEeUQ.roa
File: x3PTV0bJuNHxl7SV9nBUbpJEeUQ.roa (raw, json)
Hash identifier: 3ts1REiJWNgy/AsdTkes7hmsFHeyHrgRN3tS79SGq88=
Subject key identifier: C7:73:D3:57:46:C9:B8:D1:F1:97:B4:95:F6:70:54:6E:92:44:79:44
Certificate issuer: /CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Certificate serial: 0DBFB644
Authority key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/x3PTV0bJuNHxl7SV9nBUbpJEeUQ.roa
Signing time: Mon 24 Jan 2022 10:57:02 +0000
ROA not before: Mon 24 Jan 2022 10:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
51.188.0.0/15 maxlen: 24
51.114.0.0/16 maxlen: 24
51.80.0.0/16 maxlen: 24
51.208.0.0/15 maxlen: 24
193.26.64.0/19 maxlen: 24
51.134.0.0/16 maxlen: 24
152.134.0.0/16 maxlen: 24
51.20.0.0/14 maxlen: 24
51.74.0.0/16 maxlen: 24
51.202.0.0/15 maxlen: 24
57.101.0.0/16 maxlen: 24
51.40.0.0/16 maxlen: 24
51.168.0.0/15 maxlen: 24
51.121.0.0/16 maxlen: 24
212.167.0.0/16 maxlen: 24
185.72.192.0/22 maxlen: 24
51.160.0.0/16 maxlen: 24
51.32.0.0/16 maxlen: 24
51.214.0.0/15 maxlen: 24
51.100.0.0/15 maxlen: 24
51.228.0.0/15 maxlen: 24
51.127.0.0/16 maxlen: 24
51.248.0.0/15 maxlen: 24
83.118.240.0/20 maxlen: 24
51.220.0.0/15 maxlen: 24
195.119.0.0/16 maxlen: 24
51.92.0.0/14 maxlen: 24
51.240.0.0/16 maxlen: 24
51.112.0.0/15 maxlen: 24
51.139.0.0/16 maxlen: 24
51.166.0.0/15 maxlen: 24
83.118.228.0/22 maxlen: 24
57.65.0.0/16 maxlen: 24
83.118.234.0/23 maxlen: 24
194.52.0.0/16 maxlen: 24
51.180.0.0/15 maxlen: 24
193.186.210.0/24 maxlen: 24
83.119.128.0/17 maxlen: 24
194.234.0.0/15 maxlen: 24
51.200.0.0/15 maxlen: 24
51.72.0.0/15 maxlen: 24
57.99.0.0/16 maxlen: 24
83.119.64.0/18 maxlen: 24
51.172.0.0/15 maxlen: 24
51.44.0.0/14 maxlen: 24
51.226.0.0/15 maxlen: 24
193.57.169.0/24 maxlen: 24
51.125.0.0/16 maxlen: 24
193.57.170.0/23 maxlen: 24
51.192.0.0/15 maxlen: 24
51.118.0.0/15 maxlen: 24
195.17.0.0/16 maxlen: 24
145.17.0.0/16 maxlen: 24
51.24.0.0/13 maxlen: 24
193.57.254.0/23 maxlen: 24
57.85.0.0/16 maxlen: 24
130.24.0.0/16 maxlen: 24
193.57.181.0/24 maxlen: 24
193.57.182.0/23 maxlen: 24
51.152.0.0/15 maxlen: 24
51.78.0.0/16 maxlen: 24
51.206.0.0/15 maxlen: 24
85.151.0.0/16 maxlen: 24
51.151.0.0/16 maxlen: 24
51.50.0.0/16 maxlen: 24
193.218.122.0/24 maxlen: 24
51.16.0.0/15 maxlen: 24
51.70.0.0/16 maxlen: 24
194.198.0.0/16 maxlen: 24
57.104.0.0/13 maxlen: 24
51.212.0.0/15 maxlen: 24
159.239.0.0/16 maxlen: 24
51.84.0.0/14 maxlen: 24
51.232.0.0/15 maxlen: 24
51.131.0.0/16 maxlen: 24
51.3.0.0/16 maxlen: 24
51.76.0.0/16 maxlen: 24
51.204.0.0/15 maxlen: 24
51.224.0.0/15 maxlen: 24
51.96.0.0/14 maxlen: 24
51.150.0.0/16 maxlen: 24
51.164.0.0/15 maxlen: 24
51.90.0.0/16 maxlen: 24
51.117.0.0/16 maxlen: 24
51.184.0.0/15 maxlen: 24
51.110.0.0/16 maxlen: 24
51.156.0.0/15 maxlen: 24
145.55.0.0/16 maxlen: 24
51.82.0.0/16 maxlen: 24
159.109.0.0/16 maxlen: 24
151.176.0.0/16 maxlen: 24
51.176.0.0/15 maxlen: 24
51.48.0.0/15 maxlen: 24
62.230.0.0/16 maxlen: 24
51.102.0.0/16 maxlen: 24
51.129.0.0/16 maxlen: 24
159.244.0.0/16 maxlen: 24
51.244.0.0/15 maxlen: 24
83.116.0.0/15 maxlen: 24
185.143.16.0/22 maxlen: 24
185.143.16.0/24 maxlen: 24
51.69.0.0/16 maxlen: 24
51.108.0.0/16 maxlen: 24
51.236.0.0/15 maxlen: 24
51.0.64.0/18 maxlen: 24
51.34.0.0/15 maxlen: 24
195.61.0.0/16 maxlen: 24
51.0.0.0/16 maxlen: 24
51.128.0.0/16 maxlen: 24
51.0.32.0/19 maxlen: 24
193.202.192.0/19 maxlen: 24
51.196.0.0/15 maxlen: 24
57.95.0.0/16 maxlen: 24
51.122.0.0/15 maxlen: 24
51.88.0.0/16 maxlen: 24
51.216.0.0/15 maxlen: 24
51.0.128.0/17 maxlen: 24
2a11:47c0::/29 maxlen: 48
2a01:578:1080::/41 maxlen: 48
2a01:578:1010::/44 maxlen: 48
2a01:578:1020::/43 maxlen: 48
2a01:578:1040::/42 maxlen: 48
2a01:578:13::/48 maxlen: 48
2a01:578:1100::/40 maxlen: 48
2a01:578::/36 maxlen: 48
2a01:578:1400::/38 maxlen: 48
2a01:578::/32 maxlen: 48
2a01:578:1200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230667844 (0xdbfb644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Validity
Not Before: Jan 24 10:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c773d35746c9b8d1f197b495f670546e92447944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:4f:dc:9d:17:4a:4b:5e:6b:8e:de:15:11:
b6:d0:4e:98:23:39:fa:c6:f3:3b:55:2b:87:04:d8:
d5:fa:85:23:b3:8c:e7:51:0f:65:d8:fe:a9:1b:03:
bd:15:c9:7c:ea:cc:53:49:23:42:0e:fa:61:97:53:
f4:5c:bf:f5:74:82:3c:a8:e5:79:46:2d:ae:7f:5e:
cd:12:c3:7d:04:d1:4c:9d:29:a5:31:b5:99:68:79:
4a:d0:dd:ba:64:a3:b0:64:2e:5f:a3:46:ba:e8:e7:
be:c4:74:70:51:7f:b5:5a:72:97:7a:d8:04:d9:30:
d2:8d:e9:0e:6a:81:12:62:0b:da:d4:62:f6:11:3d:
04:25:12:c2:c1:cd:ec:39:f6:cb:6b:01:fa:2f:9a:
3e:4d:88:2b:c3:54:92:df:a6:d9:d0:28:90:76:b6:
5a:de:cd:1e:5c:7e:97:e5:85:02:a3:17:46:3f:32:
7f:db:c6:ba:aa:a8:70:67:72:d5:72:55:8f:15:fc:
96:fc:ab:67:31:1f:c0:1a:a6:1c:94:08:74:c2:c6:
9f:94:42:36:94:52:ca:a9:94:4a:b0:07:e6:e3:aa:
36:44:11:a9:77:c1:48:a5:28:da:35:c7:a9:68:21:
4a:29:cc:50:94:b2:9f:3e:8a:96:68:e1:c9:14:ed:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:D3:57:46:C9:B8:D1:F1:97:B4:95:F6:70:54:6E:92:44:79:44
X509v3 Authority Key Identifier:
keyid:A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/x3PTV0bJuNHxl7SV9nBUbpJEeUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
51.3.0.0/16
51.16.0.0/15
51.20.0.0-51.32.255.255
51.34.0.0/15
51.40.0.0/16
51.44.0.0-51.50.255.255
51.60.0.0/16
51.69.0.0-51.70.255.255
51.72.0.0-51.74.255.255
51.76.0.0/16
51.78.0.0/16
51.80.0.0/16
51.82.0.0/16
51.84.0.0-51.88.255.255
51.90.0.0/16
51.92.0.0-51.102.255.255
51.108.0.0/16
51.110.0.0/16
51.112.0.0-51.114.255.255
51.117.0.0-51.119.255.255
51.121.0.0-51.123.255.255
51.125.0.0/16
51.127.0.0-51.129.255.255
51.131.0.0/16
51.134.0.0/16
51.139.0.0/16
51.150.0.0-51.153.255.255
51.156.0.0/15
51.160.0.0/16
51.164.0.0-51.169.255.255
51.172.0.0/15
51.176.0.0/15
51.180.0.0/15
51.184.0.0/15
51.188.0.0/15
51.192.0.0/15
51.196.0.0/15
51.200.0.0-51.209.255.255
51.212.0.0-51.217.255.255
51.220.0.0/15
51.224.0.0-51.229.255.255
51.232.0.0/15
51.236.0.0/15
51.240.0.0/16
51.244.0.0/15
51.248.0.0/15
57.65.0.0/16
57.85.0.0/16
57.95.0.0/16
57.99.0.0/16
57.101.0.0/16
57.104.0.0/13
62.230.0.0/16
83.116.0.0/15
83.118.228.0/22
83.118.234.0/23
83.118.240.0/20
83.119.64.0-83.119.255.255
85.151.0.0/16
130.24.0.0/16
145.17.0.0/16
145.55.0.0/16
151.176.0.0/16
152.134.0.0/16
159.109.0.0/16
159.239.0.0/16
159.244.0.0/16
185.72.192.0/22
185.143.16.0/22
193.26.64.0/19
193.57.169.0-193.57.171.255
193.57.181.0-193.57.183.255
193.57.254.0/23
193.186.210.0/24
193.202.192.0/19
193.218.122.0/24
194.52.0.0/16
194.198.0.0/16
194.234.0.0/15
195.17.0.0/16
195.61.0.0/16
195.119.0.0/16
212.167.0.0/16
IPv6:
2a01:578::/32
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:d8:24:83:d4:5f:da:c1:d0:89:e9:41:8e:b9:98:5d:2a:25:
b2:99:39:08:0f:0b:a1:84:b0:7e:86:dc:d6:47:12:56:9a:2b:
2a:79:bf:d4:72:5c:63:4b:4d:fe:df:a6:a7:d3:42:ec:db:12:
3c:e9:a7:18:48:72:6c:ef:46:af:01:c7:5a:b8:34:bb:ab:f0:
2d:bb:66:6f:56:f9:08:26:a2:76:db:b6:bc:2b:ac:31:63:d8:
73:47:bd:bc:34:1d:ed:9c:1c:64:c9:60:c0:3d:1d:b8:7f:b1:
9a:65:48:41:35:ab:d2:f9:53:87:ff:fa:0c:bb:17:0b:54:b0:
4b:08:b3:a1:ba:e9:6b:9d:28:5c:41:f0:2d:14:8e:d0:39:08:
c3:09:dd:af:3d:89:a9:d0:f0:a9:78:61:14:99:fd:fb:4b:5f:
d0:24:e6:c8:06:ed:1a:3a:7d:38:cb:f3:ca:65:f0:aa:3b:ec:
14:79:f1:56:cb:5c:0e:2f:97:c3:d7:ac:f1:f9:12:29:70:1a:
c2:6a:92:34:55:84:3c:b9:bf:4d:92:4d:bd:57:85:cd:64:fa:
a9:c0:59:bc:82:13:97:0d:6d:fc:1b:60:f4:d4:b6:f1:f3:ef:
e9:e0:d8:cd:0e:24:da:7d:5c:b4:1d:03:35:fd:4e:11:1a:d1:
6b:54:c7:a8
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIEDb+2RDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MTYxNTNmOWQyM2RmZjAzODlkMWM4ZDA1MDIwMGNiNWVmMWM4MjI5MB4XDTIyMDEy
NDEwNTcwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzc3M2QzNTc0NmM5
YjhkMWYxOTdiNDk1ZjY3MDU0NmU5MjQ0Nzk0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6YT9ydF0pLXmuO3hURttBOmCM5+sbzO1UrhwTY1fqFI7OM
51EPZdj+qRsDvRXJfOrMU0kjQg76YZdT9Fy/9XSCPKjleUYtrn9ezRLDfQTRTJ0p
pTG1mWh5StDdumSjsGQuX6NGuujnvsR0cFF/tVpyl3rYBNkw0o3pDmqBEmIL2tRi
9hE9BCUSwsHN7Dn2y2sB+i+aPk2IK8NUkt+m2dAokHa2Wt7NHlx+l+WFAqMXRj8y
f9vGuqqocGdy1XJVjxX8lvyrZzEfwBqmHJQIdMLGn5RCNpRSyqmUSrAH5uOqNkQR
qXfBSKUo2jXHqWghSinMUJSynz6KlmjhyRTt7h0CAwEAAaOCBFQwggRQMB0GA1Ud
DgQWBBTHc9NXRsm40fGXtJX2cFRukkR5RDAfBgNVHSMEGDAWgBShYVP50j3/A4nR
yNBQIAy17xyCKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29XRlQtZEk5X3dPSjBjalFVQ0FNdGU4Y2dpay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvZWViNzBlLTA3NjMtNDI5OS04NGZiLWQ4MGJlMjFjZTZjYS8x
L3gzUFRWMGJKdU5IeGw3U1Y5bkJVYnBKRWVVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
ZWViNzBlLTA3NjMtNDI5OS04NGZiLWQ4MGJlMjFjZTZjYS8xL29XRlQtZEk5X3dP
SjBjalFVQ0FNdGU4Y2dpay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AmgGCCsGAQUFBwEHAQH/BIICVzCCAlMwggI5BAIAATCCAjEDAwAzAAMDADMDAwMB
MxAwCgMDAjMUAwMAMyADAwEzIgMDADMoMAoDAwIzLAMDADMyAwMAMzwwCgMDADNF
AwMAM0YwCgMDAzNIAwMAM0oDAwAzTAMDADNOAwMAM1ADAwAzUjAKAwMCM1QDAwAz
WAMDADNaMAoDAwIzXAMDADNmAwMAM2wDAwAzbjAKAwMEM3ADAwAzcjAKAwMAM3UD
AwMzcDAKAwMAM3kDAwIzeAMDADN9MAoDAwAzfwMDATOAAwMAM4MDAwAzhgMDADOL
MAoDAwEzlgMDATOYAwMBM5wDAwAzoDAKAwMCM6QDAwEzqAMDATOsAwMBM7ADAwEz
tAMDATO4AwMBM7wDAwEzwAMDATPEMAoDAwMzyAMDATPQMAoDAwIz1AMDATPYAwMB
M9wwCgMDBTPgAwMBM+QDAwEz6AMDATPsAwMAM/ADAwEz9AMDATP4AwMAOUEDAwA5
VQMDADlfAwMAOWMDAwA5ZQMDAzloAwMAPuYDAwFTdAMEAlN25AMEAVN26gMEBFN2
8DALAwQGU3dAAwMDU3ADAwBVlwMDAIIYAwMAkREDAwCRNwMDAJewAwMAmIYDAwCf
bQMDAJ/vAwMAn/QDBAK5SMADBAK5jxADBAXBGkAwDAMEAME5qQMEAsE5qDAMAwQA
wTm1AwQDwTmwAwQBwTn+AwQAwbrSAwQFwcrAAwQAwdp6AwMAwjQDAwDCxgMDAcLq
AwMAwxEDAwDDPQMDAMN3AwMA1KcwFAQCAAIwDgMFACoBBXgDBQMqEUfAMA0GCSqG
SIb3DQEBCwUAA4IBAQAH2CSD1F/awdCJ6UGOuZhdKiWymTkIDwuhhLB+htzWRxJW
misqeb/UclxjS03+36an00Ls2xI86acYSHJs70avAcdauDS7q/Atu2ZvVvkIJqJ2
27a8K6wxY9hzR728NB3tnBxkyWDAPR24f7GaZUhBNavS+VOH//oMuxcLVLBLCLOh
uulrnShcQfAtFI7QOQjDCd2vPYmp0PCpeGEUmf37S1/QJObIBu0aOn04y/PKZfCq
O+wUefFWy1wOL5fD16zx+RIpcBrCapI0VYQ8ub9Nkk29V4XNZPqpwFm8ghOXDW38
G2D01Lbx8+/p4NjNDiTafVy0HQM1/U4RGtFrVMeo
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org