Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Kjx6UvY_qDSET6nV_QeLO78izAI.roa
File: Kjx6UvY_qDSET6nV_QeLO78izAI.roa (raw, json)
Hash identifier: Ln65LUXsVGAcUkfzf84CxVBG5DiaV0uDxRkcvHzcdIo=
Subject key identifier: 2A:3C:7A:52:F6:3F:A8:34:84:4F:A9:D5:FD:07:8B:3B:BF:22:CC:02
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01939311B048DFF6550638AD9F69EB2B37A7
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Kjx6UvY_qDSET6nV_QeLO78izAI.roa
Signing time: Wed 04 Dec 2024 19:07:10 +0000
ROA not before: Wed 04 Dec 2024 19:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:11:b0:48:df:f6:55:06:38:ad:9f:69:eb:2b:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Dec 4 19:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a3c7a52f63fa834844fa9d5fd078b3bbf22cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:41:da:db:4d:67:b3:8e:ff:48:24:a5:17:
a2:5a:47:d7:50:16:90:5b:0e:ed:09:2c:aa:7f:07:
40:23:e7:8b:f8:77:63:41:6a:14:b6:5c:9f:d0:57:
5b:7c:e8:da:ab:65:e4:d4:a2:c2:56:f2:64:61:6b:
ef:87:3c:d4:8f:d8:3c:bf:a8:be:b5:2f:c0:fe:7d:
7d:4a:b3:37:9e:6e:c8:65:c8:90:72:b6:42:ea:08:
fb:1b:17:ac:57:7e:53:c9:c2:c5:f4:aa:ea:2b:78:
86:c4:84:e0:0f:48:7e:d4:35:b3:fb:d6:d3:26:55:
a0:04:f4:49:3e:fa:68:cf:36:cf:81:5c:cb:36:a3:
02:6d:e3:9f:b6:41:03:4d:14:73:73:03:9b:d7:c1:
0e:34:26:44:57:45:65:99:df:3d:5c:67:b3:61:99:
e9:80:34:2b:ab:0f:69:b8:03:01:7b:9b:ee:b8:1b:
d3:72:14:3c:86:e1:29:66:75:87:79:5f:f8:0a:33:
8e:c0:47:25:fd:76:78:0a:a5:47:ef:64:ac:03:4d:
f1:5e:0d:5c:cc:d0:e7:52:54:4d:56:1e:c9:c4:5e:
7e:59:3b:3b:6a:7b:81:40:f3:2d:60:69:55:cf:f6:
4d:cd:2b:fe:79:3b:e2:93:4e:21:19:e5:89:d2:ce:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:7A:52:F6:3F:A8:34:84:4F:A9:D5:FD:07:8B:3B:BF:22:CC:02
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Kjx6UvY_qDSET6nV_QeLO78izAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
04:52:ab:49:29:8f:17:12:a8:2b:2b:05:7c:a7:a6:61:0d:8a:
ce:5b:1f:5f:6b:16:af:4f:70:df:56:5d:a4:81:a0:18:9e:ab:
04:70:a3:06:a7:60:26:5e:c0:4a:f8:86:d7:ae:76:25:63:39:
4d:c0:f9:d2:62:75:dc:4d:16:9d:85:91:4e:37:28:07:ff:b3:
9f:f3:23:ec:23:09:8c:a0:c7:b9:aa:ad:49:e5:51:84:0e:10:
61:37:45:8e:04:a9:28:88:7a:8e:b4:bd:ae:22:2e:97:e8:b2:
06:3d:47:d7:63:d4:3e:86:be:3f:8d:41:8e:c9:72:0d:e0:bc:
01:f5:5c:05:02:0c:03:c0:57:ee:be:58:36:16:52:35:c9:aa:
00:10:80:6b:c1:bb:ac:f7:7b:b0:1e:a9:5e:ee:d7:af:2e:25:
08:db:45:f0:34:42:b0:e5:8e:38:c5:a7:da:23:23:9c:82:f4:
5f:63:d5:c0:a7:97:06:3a:68:28:4c:83:07:61:07:08:cd:02:
35:53:55:55:70:a4:32:df:6f:15:8d:83:2e:58:b7:34:6f:57:
31:c7:b5:31:b9:74:29:6e:73:98:ea:7d:bb:7f:ba:7a:83:8e:
e2:4a:9b:54:d8:69:5c:2a:83:2f:50:25:a8:2e:e3:c4:e1:0d:
51:ef:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:04 2025 by rpki-client