Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JgDXVO9MvUOpWSLeWtNCj7He1G4.roa
File: JgDXVO9MvUOpWSLeWtNCj7He1G4.roa (raw, json)
Hash identifier: conL1NQgEThGGZEck7Wp320DJopvIP4zg0JWjXCQUGs=
Subject key identifier: 26:00:D7:54:EF:4C:BD:43:A9:59:22:DE:5A:D3:42:8F:B1:DE:D4:6E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019369BC051EF7085D2FBA7B22E734A25FCA
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JgDXVO9MvUOpWSLeWtNCj7He1G4.roa
Signing time: Tue 26 Nov 2024 18:29:09 +0000
ROA not before: Tue 26 Nov 2024 18:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a0b:b840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:bc:05:1e:f7:08:5d:2f:ba:7b:22:e7:34:a2:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Nov 26 18:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2600d754ef4cbd43a95922de5ad3428fb1ded46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:93:e7:64:3e:15:8f:dd:d0:69:68:88:04:
61:f2:fd:dd:36:9f:0a:e8:60:bf:2c:9b:80:f2:d1:
ae:26:d7:81:4f:2a:f8:7e:84:af:c2:22:86:00:67:
cb:d3:5b:66:57:f9:92:ee:00:3a:54:6d:aa:41:94:
1a:03:cb:86:ad:fe:92:ae:e9:71:2a:89:ab:73:cf:
48:69:84:c5:60:25:9d:88:f1:a9:b6:a7:6a:99:cd:
3d:7b:61:8c:23:62:22:7a:02:8a:68:d0:a3:1b:24:
f7:13:30:73:ed:ed:b6:6f:26:52:04:d5:9d:a7:3b:
48:8e:79:ee:04:36:e5:73:c0:01:9d:71:77:0e:97:
3c:e0:43:df:78:1d:09:76:75:37:f1:67:14:a5:27:
0c:84:cc:02:6e:85:62:c9:d8:bc:0c:79:c6:dd:40:
55:0f:2b:ab:4c:15:0e:1e:86:41:3e:66:0b:12:64:
a8:1b:31:23:1b:f2:3f:ea:82:2c:2b:9b:3b:56:bc:
85:ab:a1:6a:1e:7b:50:48:15:5a:a3:0a:2e:ad:af:
88:82:d3:06:6e:33:79:60:4c:3b:67:a2:e5:44:25:
a8:68:94:bb:68:fd:dc:1f:1a:b7:68:e6:71:e6:12:
bf:fb:89:5e:95:5c:0f:c9:e5:5b:ed:af:40:50:d9:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:D7:54:EF:4C:BD:43:A9:59:22:DE:5A:D3:42:8F:B1:DE:D4:6E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JgDXVO9MvUOpWSLeWtNCj7He1G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b9:ec:62:d6:e6:43:d3:8e:e9:21:e8:26:2d:61:1f:8c:85:
07:d3:69:83:48:65:27:55:bf:f2:db:7c:29:21:b8:6f:5a:12:
4d:5b:89:07:73:2c:7b:6a:ec:65:ef:95:b4:7b:ab:01:38:ac:
a8:81:c2:8a:51:18:6d:8c:7a:ab:f6:11:58:05:9f:7f:89:f2:
02:59:ed:18:88:3d:3a:56:fb:63:ab:73:79:13:3a:55:63:37:
24:18:a7:42:a5:a6:a7:45:fc:df:a9:b1:bc:fb:13:a4:de:bd:
c1:c7:c4:ea:3c:3b:c5:aa:b7:fc:a3:60:70:81:b5:7a:99:d5:
71:a5:a9:10:d2:f1:dd:64:ff:43:92:ed:88:72:8e:9e:66:91:
d5:aa:4b:88:89:66:26:fa:ca:87:9d:3d:b6:9f:39:1d:ff:da:
6e:f9:fe:61:b1:4e:ec:c9:7d:01:c0:85:2c:0a:2d:02:7d:e4:
fa:6a:91:ad:73:02:fe:e4:5e:d7:e6:d9:1f:81:5b:fe:6b:cb:
c9:7f:f9:c8:fb:d3:fa:b1:13:a5:f8:03:82:f0:05:14:a1:fb:
d9:4a:86:0b:1f:2a:49:b1:90:3a:a7:88:ac:49:3d:35:a0:d3:
2c:ae:d2:23:c2:2f:6b:9e:23:3f:f7:be:d0:9e:d9:b8:a6:4a:
34:19:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:13:00 2025 by rpki-client