Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/j7aDjONrxm38-GNyA3kjN1H7OQc.roa
File: j7aDjONrxm38-GNyA3kjN1H7OQc.roa (raw, json)
Hash identifier: RBhjRopd1zf+AMIpQ1+ImU9X9Pkstelv3H1YNWvUr54=
Subject key identifier: 8F:B6:83:8C:E3:6B:C6:6D:FC:F8:63:72:03:79:23:37:51:FB:39:07
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 01946B08811223C552161A285B2DB7F53734
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/j7aDjONrxm38-GNyA3kjN1H7OQc.roa
Signing time: Wed 15 Jan 2025 17:35:06 +0000
ROA not before: Wed 15 Jan 2025 17:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202448
IP address blocks: 2.56.212.0/24 maxlen: 24
2.56.213.0/24 maxlen: 24
2.56.214.0/24 maxlen: 24
2.56.215.0/24 maxlen: 24
31.14.238.0/24 maxlen: 24
31.222.229.0/24 maxlen: 24
45.137.148.0/24 maxlen: 32
45.137.149.0/24 maxlen: 24
45.137.150.0/24 maxlen: 24
45.137.151.0/24 maxlen: 24
45.153.184.0/24 maxlen: 24
45.153.185.0/24 maxlen: 24
45.153.186.0/24 maxlen: 24
45.153.187.0/24 maxlen: 24
62.3.32.0/24 maxlen: 24
84.238.132.0/24 maxlen: 24
86.105.252.0/24 maxlen: 24
86.106.181.0/24 maxlen: 24
86.107.197.0/24 maxlen: 24
89.38.128.0/24 maxlen: 24
89.38.129.0/24 maxlen: 24
89.38.130.0/24 maxlen: 24
89.38.131.0/24 maxlen: 24
89.38.135.0/24 maxlen: 32
89.43.33.0/24 maxlen: 24
91.227.40.0/24 maxlen: 24
91.227.41.0/24 maxlen: 24
91.250.248.0/24 maxlen: 32
91.250.249.0/24 maxlen: 32
93.114.128.0/24 maxlen: 24
93.114.133.0/24 maxlen: 24
93.115.16.0/24 maxlen: 24
93.115.17.0/24 maxlen: 24
93.115.18.0/24 maxlen: 24
93.115.19.0/24 maxlen: 24
93.115.20.0/24 maxlen: 24
93.115.21.0/24 maxlen: 24
93.115.22.0/24 maxlen: 24
93.115.23.0/24 maxlen: 24
94.176.182.0/24 maxlen: 24
94.231.205.0/24 maxlen: 24
95.169.192.0/24 maxlen: 24
95.169.201.0/24 maxlen: 24
95.169.204.0/24 maxlen: 24
95.169.205.0/24 maxlen: 24
178.157.82.0/24 maxlen: 24
178.157.90.0/24 maxlen: 24
178.157.91.0/24 maxlen: 24
185.96.163.0/24 maxlen: 24
185.170.212.0/24 maxlen: 24
185.170.213.0/24 maxlen: 24
185.170.214.0/24 maxlen: 24
185.170.215.0/24 maxlen: 24
185.177.73.0/24 maxlen: 24
185.234.52.0/24 maxlen: 32
185.243.214.0/24 maxlen: 32
185.243.215.0/24 maxlen: 24
188.212.124.0/24 maxlen: 24
188.212.125.0/24 maxlen: 24
193.201.15.0/24 maxlen: 24
194.26.213.0/24 maxlen: 24
194.32.76.0/24 maxlen: 24
194.32.77.0/24 maxlen: 24
194.32.78.0/24 maxlen: 24
194.32.79.0/24 maxlen: 24
194.63.145.0/24 maxlen: 24
194.99.20.0/24 maxlen: 24
194.99.21.0/24 maxlen: 24
194.99.22.0/24 maxlen: 24
194.99.23.0/24 maxlen: 24
2a05:8280::/32 maxlen: 32
2a09:cd40::/32 maxlen: 32
2a09:cd41::/32 maxlen: 32
2a09:cd42::/32 maxlen: 32
2a09:cd43::/32 maxlen: 32
2a09:cd45::/32 maxlen: 32
2a09:cd46::/32 maxlen: 32
2a0c:b9c0::/32 maxlen: 32
2a0c:b9c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:08:81:12:23:c5:52:16:1a:28:5b:2d:b7:f5:37:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Jan 15 17:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fb6838ce36bc66dfcf863720379233751fb3907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:5a:c0:aa:1a:6e:96:e6:4c:eb:3e:be:ba:
23:0e:b1:5f:6f:55:ef:81:99:0c:03:83:cf:16:98:
6c:38:fb:64:4b:e8:38:5b:14:d4:ce:dd:6f:bb:b6:
a6:b4:6c:20:b0:ae:aa:22:f6:e1:e1:02:6f:6d:94:
03:93:42:14:69:b7:60:68:57:7f:88:b8:19:9d:b9:
94:33:44:2f:00:ad:75:50:24:76:77:19:b0:aa:52:
be:9a:64:d8:c5:1e:d8:df:9b:a6:46:a1:0f:71:18:
d5:87:bf:82:95:9a:9c:c8:88:7e:b3:57:dc:a7:a5:
b2:27:d0:09:6d:77:2c:71:be:cc:4e:ab:81:4c:49:
a5:91:83:a4:6e:99:3d:a1:e7:c5:46:8e:8c:ba:80:
09:0f:35:cb:a7:a2:c1:46:18:ee:2f:21:af:9f:a9:
08:30:dd:de:c0:c4:e0:09:22:f1:82:6f:a2:f5:1c:
47:11:39:a6:af:62:1f:78:01:83:4d:45:44:74:a6:
0d:b5:9f:e1:ec:45:af:fd:57:28:88:fd:14:a8:68:
fd:ad:41:99:e9:38:76:16:5b:b4:c2:67:d3:da:08:
0a:eb:31:3b:08:c6:53:33:bb:5f:ab:28:fe:3f:43:
56:09:d6:5f:6c:9b:8f:4d:c2:54:d9:94:20:9c:28:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:83:8C:E3:6B:C6:6D:FC:F8:63:72:03:79:23:37:51:FB:39:07
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/j7aDjONrxm38-GNyA3kjN1H7OQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.212.0/22
31.14.238.0/24
31.222.229.0/24
45.137.148.0/22
45.153.184.0/22
62.3.32.0/24
84.238.132.0/24
86.105.252.0/24
86.106.181.0/24
86.107.197.0/24
89.38.128.0/22
89.38.135.0/24
89.43.33.0/24
91.227.40.0/23
91.250.248.0/23
93.114.128.0/24
93.114.133.0/24
93.115.16.0/21
94.176.182.0/24
94.231.205.0/24
95.169.192.0/24
95.169.201.0/24
95.169.204.0/23
178.157.82.0/24
178.157.90.0/23
185.96.163.0/24
185.170.212.0/22
185.177.73.0/24
185.234.52.0/24
185.243.214.0/23
188.212.124.0/23
193.201.15.0/24
194.26.213.0/24
194.32.76.0/22
194.63.145.0/24
194.99.20.0/22
IPv6:
2a05:8280::/32
2a09:cd40::/30
2a09:cd45::-2a09:cd46:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:b9c0::/31
Signature Algorithm: sha256WithRSAEncryption
46:ee:dd:76:82:67:ff:e7:85:d8:26:5b:9c:89:3f:7a:b9:7c:
18:17:2e:d1:23:3d:c2:c8:b6:b2:78:7a:f0:24:79:79:6b:71:
fa:7f:ec:a2:18:52:2e:c8:c5:2f:e4:b8:4f:2d:21:91:ed:85:
4d:2a:b4:01:98:70:b2:8a:b0:b4:55:2a:84:71:3f:8b:70:a2:
ec:bc:37:df:87:58:ec:b6:4a:39:3f:61:cf:a1:ce:74:10:8b:
cf:ab:fe:67:c7:f5:e7:26:a5:96:54:65:25:db:0a:20:f8:8f:
ae:52:a0:13:83:07:93:42:77:18:d9:dc:6c:42:82:8f:6b:f4:
c6:21:c9:b7:c2:a9:5c:dd:23:7a:f6:aa:df:b5:7c:77:5f:d5:
07:e4:5d:6a:83:91:31:12:50:b2:6f:a4:2e:d3:c2:af:a7:26:
da:6d:1c:a6:8f:de:41:e6:46:98:59:5b:20:9a:e2:9e:9f:7d:
11:d7:0a:ea:38:56:0e:f5:1e:ed:93:5f:4f:13:0e:19:0f:a6:
f1:0a:4e:49:1b:41:27:1a:dd:af:40:98:b0:60:15:49:54:cc:
00:7a:00:40:05:d2:d6:35:e8:e7:00:cf:5f:e2:38:3b:1d:40:
c1:c0:f1:85:2f:a3:95:c1:3f:bc:7f:b2:92:52:fa:f1:a1:c0:
1f:43:8f:b3
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISAZRrCIESI8VSFhooWy239Tc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0M2JmOTA4MDhhZTdlY2EwNjNmNzQ2YThmMWQ4ODg2NTcz
NGM4YTMwHhcNMjUwMTE1MTczNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmI2ODM4Y2UzNmJjNjZkZmNmODYzNzIwMzc5MjMzNzUxZmIzOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmhawKoabpbmTOs+vrojDrFfb1Xv
gZkMA4PPFphsOPtkS+g4WxTUzt1vu7amtGwgsK6qIvbh4QJvbZQDk0IUabdgaFd/
iLgZnbmUM0QvAK11UCR2dxmwqlK+mmTYxR7Y35umRqEPcRjVh7+ClZqcyIh+s1fc
p6WyJ9AJbXcscb7MTquBTEmlkYOkbpk9oefFRo6MuoAJDzXLp6LBRhjuLyGvn6kI
MN3ewMTgCSLxgm+i9RxHETmmr2IfeAGDTUVEdKYNtZ/h7EWv/VcoiP0UqGj9rUGZ
6Th2Flu0wmfT2ggK6zE7CMZTM7tfqyj+P0NWCdZfbJuPTcJU2ZQgnCiiowIDAQAB
o4IDEDCCAwwwHQYDVR0OBBYEFI+2g4zja8Zt/PhjcgN5IzdR+zkHMB8GA1UdIwQY
MBaAFPQ7+QgIrn7KBj90ao8diIZXNMijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAt
Mzg5MTk1YzRmMDdiLzEvajdhRGpPTnJ4bTM4LUdOeUEza2pOMUg3T1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAtMzg5MTk1YzRmMDdi
LzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCB3wQCAAEwgdgD
BAICONQDBAAfDu4DBAAf3uUDBAItiZQDBAItmbgDBAA+AyADBABU7oQDBABWafwD
BABWarUDBABWa8UDBAJZJoADBABZJocDBABZKyEDBAFb4ygDBAFb+vgDBABdcoAD
BABdcoUDBANdcxADBABesLYDBABe580DBABfqcADBABfqckDBAFfqcwDBACynVID
BAGynVoDBAC5YKMDBAK5qtQDBAC5sUkDBAC56jQDBAG589YDBAG81HwDBADByQ8D
BADCGtUDBALCIEwDBADCP5EDBALCYxQwKwQCAAIwJQMFACoFgoADBQIqCc1AMA4D
BQAqCc1FAwUAKgnNRgMFASoMucAwDQYJKoZIhvcNAQELBQADggEBAEbu3XaCZ//n
hdgmW5yJP3q5fBgXLtEjPcLItrJ4evAkeXlrcfp/7KIYUi7IxS/kuE8tIZHthU0q
tAGYcLKKsLRVKoRxP4twouy8N9+HWOy2Sjk/Yc+hznQQi8+r/mfH9ecmpZZUZSXb
CiD4j65SoBODB5NCdxjZ3GxCgo9r9MYhybfCqVzdI3r2qt+1fHdf1QfkXWqDkTES
ULJvpC7Twq+nJtptHKaP3kHmRphZWyCa4p6ffRHXCuo4Vg71Hu2TX08TDhkPpvEK
TkkbQSca3a9AmLBgFUlUzAB6AEAF0tY16OcAz1/iODsdQMHA8YUvo5XBP7x/spJS
+vGhwB9Dj7M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:29 2025 by rpki-client