Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/DgGDOKAgjPcw34VszmG0DjZGVT4.roa
File: DgGDOKAgjPcw34VszmG0DjZGVT4.roa (raw, json)
Hash identifier: miaubnbblUVd1uSWtNPt6aghD7kUqdyJxZXxaC3SNm4=
Subject key identifier: 0E:01:83:38:A0:20:8C:F7:30:DF:85:6C:CE:61:B4:0E:36:46:55:3E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479CB2C75815BA8681A923E77DE060
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/DgGDOKAgjPcw34VszmG0DjZGVT4.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9c:b2:c7:58:15:ba:86:81:a9:23:e7:7d:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e018338a0208cf730df856cce61b40e3646553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:9e:b4:04:91:fb:03:f2:77:dc:84:87:86:
bb:b7:4b:80:a1:7e:3e:e9:ef:6b:c1:de:15:2c:fe:
2b:19:2c:e2:a5:5f:46:41:55:4f:06:f3:44:43:be:
0c:00:09:93:f9:d7:ca:ce:fe:21:df:99:e0:ca:76:
7f:36:fc:a0:7c:16:47:d8:45:6a:63:71:e3:6b:c0:
af:b1:e4:02:9e:5e:fd:1e:63:09:c8:32:78:40:29:
f1:2a:08:aa:04:43:16:f2:3e:47:7b:e7:60:17:02:
99:5e:e1:65:97:14:97:c1:16:7a:b9:b0:3b:1d:e3:
ba:46:94:cf:7b:32:ee:34:16:3f:bf:25:b5:03:59:
fc:aa:ca:a4:77:0f:cd:20:a8:47:51:08:fc:74:c0:
82:1e:44:3a:d6:ed:50:32:32:64:83:c3:1c:ba:5b:
1b:fc:36:77:ea:04:10:75:db:80:d9:8d:95:ce:25:
b2:5f:a0:78:8d:7b:82:ba:56:94:9b:89:ce:81:bf:
45:9c:14:87:09:61:7c:da:e1:e3:2b:8c:0f:9a:ce:
26:e6:b7:80:39:d3:93:f4:75:e1:bb:14:04:ff:af:
e9:80:db:1e:7a:9a:0f:c5:50:51:02:5b:88:e4:2b:
50:b0:80:33:4a:bb:cf:b4:c9:73:5c:70:07:52:fe:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:83:38:A0:20:8C:F7:30:DF:85:6C:CE:61:B4:0E:36:46:55:3E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/DgGDOKAgjPcw34VszmG0DjZGVT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
5b:bb:16:b5:67:63:e3:ca:05:2f:fd:6f:67:62:e3:95:7f:85:
92:ef:30:c6:cc:cf:ed:d8:f2:43:b8:38:be:ff:65:06:1b:2c:
c0:ee:32:a4:f7:ef:4d:57:97:c7:dd:04:20:73:0c:13:a7:c5:
01:7f:e9:15:85:d5:a2:1e:eb:7e:f0:4d:16:5d:bc:18:0a:52:
25:28:f9:24:f0:d4:af:18:23:ec:17:fe:0f:ca:60:26:04:02:
ba:e7:94:7d:99:e3:aa:3a:2e:07:ec:ad:ed:5a:1d:04:df:2f:
3c:a8:fd:e3:82:0d:b4:0d:34:95:1b:00:4c:1b:ed:6a:0d:45:
d5:7b:e8:0a:4b:a0:b2:e0:4d:85:05:95:f0:72:26:e6:1e:75:
31:2f:d2:ac:a7:6e:b5:a4:6a:3c:11:8d:04:ae:c2:ba:95:43:
51:4f:fe:5e:28:18:47:6a:01:76:25:84:bb:87:f9:fc:f3:6b:
35:3b:1e:d1:36:65:52:91:eb:0d:d1:82:0b:a0:e3:a0:a6:0f:
45:d4:f8:f5:6d:46:bf:ac:a2:87:10:a3:3e:c9:3a:ff:7e:ba:
27:6b:32:ab:3d:35:5c:c5:7e:59:de:65:05:1c:d3:66:9a:c2:
89:a6:6e:24:cf:44:fc:ee:3d:8e:4c:92:17:a1:fd:b8:fe:67:
61:a1:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:13 2025 by rpki-client