Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa
File: 1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa (raw, json)
Hash identifier: x800ct6/X3EmID3N4yS/h3J8l59DPbBfkE8AT6PGI1Q=
Subject key identifier: FB:D5:F0:F9:FD:27:1B:FB:C1:A0:5A:A4:41:66:18:56:1A:D7:68:E4
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019427B5D89920912F6225887C592B0E0B2A
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12338
IP address blocks: 5.159.128.0/18 maxlen: 18
5.159.128.0/21 maxlen: 21
5.159.136.0/21 maxlen: 21
5.159.144.0/21 maxlen: 21
5.159.152.0/21 maxlen: 21
5.159.160.0/21 maxlen: 21
5.159.168.0/21 maxlen: 21
5.159.168.0/22 maxlen: 22
5.159.172.0/22 maxlen: 22
5.159.176.0/23 maxlen: 23
5.159.178.0/23 maxlen: 23
5.159.180.0/23 maxlen: 23
5.159.182.0/23 maxlen: 23
5.159.184.0/23 maxlen: 23
5.159.186.0/23 maxlen: 23
5.159.188.0/23 maxlen: 23
5.159.190.0/23 maxlen: 23
37.218.0.0/17 maxlen: 17
62.99.0.0/17 maxlen: 17
81.9.128.0/17 maxlen: 17
81.9.128.0/19 maxlen: 19
81.9.160.0/19 maxlen: 19
81.9.192.0/21 maxlen: 21
81.9.192.0/22 maxlen: 22
81.9.196.0/24 maxlen: 24
81.9.198.0/24 maxlen: 24
81.9.199.0/24 maxlen: 24
81.9.202.0/23 maxlen: 23
81.9.204.0/22 maxlen: 22
81.9.208.0/21 maxlen: 21
81.9.208.0/22 maxlen: 22
81.9.212.0/24 maxlen: 24
81.9.216.0/23 maxlen: 23
81.9.218.0/23 maxlen: 23
81.9.220.0/22 maxlen: 22
81.9.248.0/21 maxlen: 21
82.130.128.0/17 maxlen: 17
82.130.247.0/24 maxlen: 24
83.213.0.0/16 maxlen: 16
83.213.184.0/22 maxlen: 22
85.84.0.0/16 maxlen: 16
85.84.16.0/21 maxlen: 21
85.84.168.0/21 maxlen: 21
85.84.176.0/21 maxlen: 21
85.85.0.0/16 maxlen: 16
85.85.16.0/21 maxlen: 21
85.85.48.0/21 maxlen: 21
85.85.144.0/21 maxlen: 21
85.86.0.0/16 maxlen: 16
85.87.0.0/16 maxlen: 16
85.87.24.0/24 maxlen: 24
85.87.25.0/24 maxlen: 24
85.87.26.0/24 maxlen: 24
85.87.27.0/24 maxlen: 24
85.87.40.0/24 maxlen: 24
85.87.43.0/24 maxlen: 24
85.87.64.0/22 maxlen: 22
85.87.68.0/24 maxlen: 24
85.87.69.0/24 maxlen: 24
85.87.70.0/24 maxlen: 24
85.87.71.0/24 maxlen: 24
85.87.72.0/22 maxlen: 22
85.87.84.0/22 maxlen: 22
85.87.96.0/22 maxlen: 22
85.87.100.0/22 maxlen: 22
85.87.124.0/22 maxlen: 22
85.87.192.0/24 maxlen: 24
85.87.193.0/24 maxlen: 24
85.87.194.0/24 maxlen: 24
85.87.195.0/24 maxlen: 24
91.116.0.0/18 maxlen: 18
91.116.0.0/19 maxlen: 19
91.116.0.0/22 maxlen: 22
91.116.4.0/24 maxlen: 24
91.116.16.0/20 maxlen: 20
91.116.32.0/21 maxlen: 21
91.116.32.0/22 maxlen: 22
91.116.36.0/24 maxlen: 24
91.116.38.0/24 maxlen: 24
91.116.40.0/22 maxlen: 22
91.116.44.0/22 maxlen: 22
91.116.48.0/21 maxlen: 21
91.116.56.0/21 maxlen: 21
178.60.64.0/18 maxlen: 18
178.60.64.0/21 maxlen: 21
178.60.64.0/22 maxlen: 22
178.60.68.0/24 maxlen: 24
178.60.69.0/24 maxlen: 24
178.60.70.0/24 maxlen: 24
178.60.71.0/24 maxlen: 24
178.60.72.0/24 maxlen: 24
178.60.73.0/24 maxlen: 24
178.60.76.0/22 maxlen: 22
178.60.80.0/22 maxlen: 22
178.60.96.0/21 maxlen: 21
178.60.104.0/22 maxlen: 22
178.60.108.0/22 maxlen: 22
178.60.112.0/22 maxlen: 22
178.60.116.0/24 maxlen: 24
178.60.117.0/24 maxlen: 24
178.60.118.0/24 maxlen: 24
178.60.120.0/24 maxlen: 24
178.60.121.0/24 maxlen: 24
178.60.122.0/23 maxlen: 23
185.116.180.0/22 maxlen: 22
212.8.64.0/18 maxlen: 18
212.55.0.0/19 maxlen: 19
212.142.128.0/17 maxlen: 17
2a00:7b00::/29 maxlen: 29
2a00:7b00::/40 maxlen: 40
2a00:7b00:10::/48 maxlen: 48
2a00:7b00:11::/48 maxlen: 48
2a00:7b00:12::/48 maxlen: 48
2a00:7b00:13::/48 maxlen: 48
2a00:7b00:14::/48 maxlen: 48
2a00:7b00:15::/48 maxlen: 48
2a00:7b00:16::/48 maxlen: 48
2a00:7b00:17::/48 maxlen: 48
2a00:7b00:18::/48 maxlen: 48
2a00:7b00:19::/48 maxlen: 48
2a00:7b00:c10::/48 maxlen: 48
2a00:7b00:b000::/40 maxlen: 40
2a00:7b00:c000::/40 maxlen: 40
2a00:7b00:c800::/40 maxlen: 40
2a00:7b00:d000::/40 maxlen: 40
2a00:7b00:d800::/40 maxlen: 40
2a00:7b00:e000::/40 maxlen: 40
2a00:7b00:e800::/40 maxlen: 40
2a00:7b00:ef00::/40 maxlen: 40
2a00:7b00:f000::/40 maxlen: 40
2a00:7b00:f800::/40 maxlen: 40
2a00:7b00:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d8:99:20:91:2f:62:25:88:7c:59:2b:0e:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd5f0f9fd271bfbc1a05aa4416618561ad768e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:ac:f4:b2:55:47:ba:e3:f1:4f:8e:6c:e4:
62:fb:f8:f6:4a:9e:33:97:1d:c9:9e:99:89:10:d1:
6f:53:c7:72:53:50:41:55:72:f9:a0:f4:ed:41:6c:
01:c7:35:c0:61:b5:4c:58:8d:70:cb:e9:4a:f3:04:
6b:4e:5c:e4:16:96:73:e3:0a:96:a4:43:92:bc:9d:
33:ab:85:11:6c:bc:82:25:f7:de:2b:f7:8c:19:2a:
c8:40:18:ae:75:a4:b7:1b:96:9c:91:63:6d:33:1d:
4e:6a:2a:1a:e0:b2:fc:0d:66:75:1a:f0:d0:a6:b2:
af:84:eb:6f:6f:cb:37:a7:fe:05:e2:4c:8f:71:55:
28:71:d3:b7:63:b6:6c:08:eb:39:14:46:02:a2:d5:
4b:cc:32:e5:58:44:92:cc:9e:d8:21:db:5c:5f:cd:
13:bc:bc:01:c2:4b:fd:8d:d7:4c:be:f8:bb:a8:c6:
7c:87:1a:30:78:a9:78:40:b5:d9:b8:3c:d3:09:5f:
49:cc:08:f2:3b:5e:87:79:68:7c:00:bb:40:42:54:
58:30:b1:2e:0e:89:64:5f:16:73:c4:45:fd:23:71:
5e:b5:f0:8a:6f:38:e1:65:55:6c:29:95:7a:d1:56:
ff:50:79:ed:0a:9e:ab:2d:4f:db:c8:80:c8:82:3e:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:F0:F9:FD:27:1B:FB:C1:A0:5A:A4:41:66:18:56:1A:D7:68:E4
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.128.0/18
37.218.0.0/17
62.99.0.0/17
81.9.128.0/17
82.130.128.0/17
83.213.0.0/16
85.84.0.0/14
91.116.0.0/18
178.60.64.0/18
185.116.180.0/22
212.8.64.0/18
212.55.0.0/19
212.142.128.0/17
IPv6:
2a00:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e8:a8:86:d0:66:a2:b2:57:23:cc:95:46:28:ea:14:d3:23:
ba:6f:c7:f2:8a:f9:1c:21:89:5a:ef:1e:aa:18:7c:ca:84:9e:
f2:bc:b2:2c:21:10:75:95:77:30:1d:60:dd:2b:16:96:86:98:
0d:0c:fe:6d:0c:94:30:bf:fe:5e:47:a0:3e:40:d5:92:9b:26:
cf:db:b1:f0:c1:27:1e:7a:92:fb:b3:56:73:1d:dd:3c:95:8b:
08:08:47:0f:c5:ad:78:92:b2:ff:82:5c:ef:fd:96:40:f1:23:
36:5d:cf:c4:0c:2e:64:a5:6c:e9:b6:f7:01:78:9b:c7:f1:5e:
b0:55:d2:b9:03:91:3f:8e:47:c0:c7:f4:92:ab:41:5e:71:f7:
05:c2:49:56:76:6e:78:56:cc:5a:2b:89:eb:99:2c:2b:93:43:
ee:8f:72:c9:18:9b:d2:61:d7:74:53:8a:06:89:4a:e7:5e:48:
df:6e:e0:b4:77:30:42:59:a3:97:1e:0f:d2:1a:bb:be:56:69:
12:23:92:f9:c7:37:b3:f1:8c:9c:0f:be:b6:aa:82:df:4a:61:
a2:21:a9:ec:de:f9:65:fd:60:17:67:fe:17:b5:e7:94:7b:80:
e2:2b:b0:90:94:95:60:fe:38:9a:ee:df:05:45:3b:27:8a:87:
56:14:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:39 2025 by rpki-client