Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa
File: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (raw, json)
Hash identifier: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=
Subject key identifier: 97:19:56:24:F7:00:8F:BB:E0:C0:79:36:1F:2B:77:09:73:4D:EB:1B
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01942521E3FCE4344E24ABA6811D76C39FBF
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
212.169.64.0/18 maxlen: 18
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e3:fc:e4:34:4e:24:ab:a6:81:1d:76:c3:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97195624f7008fbbe0c079361f2b7709734deb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:b7:8f:2f:9d:5e:f9:e6:64:f7:9d:4f:f8:
cb:e9:20:89:8f:75:89:60:20:cf:2f:d5:2c:e5:ac:
25:fc:2d:2e:69:67:69:93:e6:55:8b:5b:14:0c:1d:
e4:ba:02:47:4c:ef:99:f6:b0:05:c1:38:49:08:26:
43:4d:1e:9a:0e:8f:3f:fc:da:9f:8e:22:39:d5:c0:
4f:88:51:77:af:37:0e:67:f7:a7:67:3d:65:7f:15:
34:98:50:c1:d8:c1:02:87:f3:e4:73:7e:01:7c:b4:
17:fb:64:62:ca:89:ac:1f:11:5d:49:5b:4b:04:0c:
a3:cf:4f:96:fe:64:74:0b:35:32:40:06:ad:20:a4:
64:8e:58:69:5d:f0:99:c0:aa:32:a1:8c:3d:7b:74:
1e:f4:e8:73:1f:60:fc:e9:7f:56:e9:ab:da:93:d0:
45:7b:0b:a8:3a:d9:31:b4:84:fa:7e:d4:18:0b:51:
c3:23:a8:87:2a:28:5c:60:27:6b:54:39:ea:09:1d:
2e:0d:51:d1:78:8f:ee:01:e7:f8:1f:31:ef:5b:00:
6b:aa:57:c9:82:8a:76:9e:f2:d1:e1:d5:a4:c6:c7:
1a:b6:61:53:6d:37:ce:7c:f8:66:75:09:9e:56:07:
18:90:4d:b6:82:43:e1:14:b9:e1:10:fc:2c:53:52:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:56:24:F7:00:8F:BB:E0:C0:79:36:1F:2B:77:09:73:4D:EB:1B
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
212.169.64.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
33:3f:81:14:1f:2b:a1:70:17:9c:9f:55:74:2b:67:92:43:d9:
91:e2:9c:97:a8:59:28:fe:88:eb:eb:0c:79:a7:8f:da:97:7d:
6d:52:ef:c2:38:6a:b3:e8:7b:d3:6f:c3:ec:31:af:00:a2:b7:
f2:c6:0f:2b:65:52:b1:e7:04:16:ca:b3:0c:6d:d5:19:82:7a:
e2:a1:6e:1b:85:4b:da:5d:53:28:18:b6:7d:9d:fc:95:23:01:
4e:57:98:af:62:8d:2f:02:ee:c5:c7:ce:04:b5:c7:3e:2c:50:
81:ea:06:73:af:f9:51:ea:1a:eb:0f:01:6b:e6:b5:76:62:e4:
1d:4b:34:5f:bb:52:c5:f7:aa:65:9a:b9:1d:bf:16:1c:aa:a2:
3a:bf:b1:b7:0a:74:0e:72:f5:3b:2f:c6:c1:69:7b:85:59:6b:
d5:19:5e:40:9b:c8:32:1b:61:fa:2a:31:3d:b6:0d:35:17:3e:
ee:46:83:a9:2d:b8:fc:fa:aa:57:96:56:53:62:a8:99:26:6d:
1a:93:b3:3a:02:56:ce:53:3e:1c:fb:5c:ab:57:2d:6a:56:60:
e7:47:4f:7d:7e:94:ab:e3:9e:a5:a1:09:0f:e4:99:16:45:c1:
1b:09:60:dc:01:3c:55:37:d8:42:38:41:90:06:9c:20:6f:ac:
9a:31:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:26 2025 by rpki-client