Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/LfGgE-LuNECxbnJjQPipuFhLg2I.roa
File: LfGgE-LuNECxbnJjQPipuFhLg2I.roa (raw, json)
Hash identifier: sLqkOyJdwRO4Ttr9wdylpZQWm0xGNFrW7MHGvK06MGA=
Subject key identifier: 2D:F1:A0:13:E2:EE:34:40:B1:6E:72:63:40:F8:A9:B8:58:4B:83:62
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019420D64C983C3EFEFAEE60FEE0E9CB35D7
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/LfGgE-LuNECxbnJjQPipuFhLg2I.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216071
IP address blocks: 5.35.32.0/24 maxlen: 24
5.35.33.0/24 maxlen: 24
5.35.34.0/24 maxlen: 24
5.35.36.0/24 maxlen: 24
5.35.37.0/24 maxlen: 24
5.35.38.0/24 maxlen: 24
5.35.39.0/24 maxlen: 24
5.35.44.0/24 maxlen: 24
5.35.45.0/24 maxlen: 24
5.35.46.0/24 maxlen: 24
5.35.47.0/24 maxlen: 24
5.35.68.0/24 maxlen: 24
5.35.69.0/24 maxlen: 24
5.35.70.0/24 maxlen: 24
5.35.71.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.138.0/24 maxlen: 24
77.105.139.0/24 maxlen: 24
77.105.140.0/24 maxlen: 24
77.105.141.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.246.96.0/24 maxlen: 24
77.246.97.0/24 maxlen: 24
77.246.98.0/24 maxlen: 24
77.246.99.0/24 maxlen: 24
77.246.100.0/24 maxlen: 24
77.246.101.0/24 maxlen: 24
77.246.102.0/24 maxlen: 24
77.246.103.0/24 maxlen: 24
77.246.104.0/24 maxlen: 24
77.246.105.0/24 maxlen: 24
77.246.106.0/24 maxlen: 24
77.246.107.0/24 maxlen: 24
77.246.108.0/24 maxlen: 24
77.246.109.0/24 maxlen: 24
77.246.110.0/24 maxlen: 24
77.246.111.0/24 maxlen: 24
89.110.64.0/24 maxlen: 24
89.110.65.0/24 maxlen: 24
89.110.66.0/24 maxlen: 24
89.110.67.0/24 maxlen: 24
89.110.68.0/24 maxlen: 24
89.110.69.0/24 maxlen: 24
89.110.70.0/24 maxlen: 24
89.110.71.0/24 maxlen: 24
89.110.72.0/24 maxlen: 24
89.110.73.0/24 maxlen: 24
89.110.74.0/24 maxlen: 24
89.110.75.0/24 maxlen: 24
89.110.76.0/24 maxlen: 24
89.110.77.0/24 maxlen: 24
89.110.78.0/24 maxlen: 24
89.110.79.0/24 maxlen: 24
89.110.80.0/24 maxlen: 24
89.110.81.0/24 maxlen: 24
89.110.82.0/24 maxlen: 24
89.110.83.0/24 maxlen: 24
89.110.84.0/24 maxlen: 24
89.110.85.0/24 maxlen: 24
89.110.86.0/24 maxlen: 24
89.110.87.0/24 maxlen: 24
89.110.100.0/24 maxlen: 24
89.110.101.0/24 maxlen: 24
89.110.102.0/24 maxlen: 24
89.110.103.0/24 maxlen: 24
89.110.104.0/24 maxlen: 24
89.110.105.0/24 maxlen: 24
89.110.106.0/24 maxlen: 24
89.110.107.0/24 maxlen: 24
89.110.108.0/24 maxlen: 24
89.110.109.0/24 maxlen: 24
89.110.110.0/24 maxlen: 24
89.110.111.0/24 maxlen: 24
89.110.112.0/24 maxlen: 24
89.110.113.0/24 maxlen: 24
89.110.114.0/24 maxlen: 24
89.110.115.0/24 maxlen: 24
89.110.116.0/24 maxlen: 24
89.110.117.0/24 maxlen: 24
89.110.118.0/24 maxlen: 24
89.110.119.0/24 maxlen: 24
89.110.120.0/24 maxlen: 24
89.110.121.0/24 maxlen: 24
89.110.122.0/24 maxlen: 24
89.110.123.0/24 maxlen: 24
89.110.124.0/24 maxlen: 24
89.110.125.0/24 maxlen: 24
89.110.126.0/24 maxlen: 24
89.110.127.0/24 maxlen: 24
93.183.88.0/24 maxlen: 24
93.183.89.0/24 maxlen: 24
93.183.90.0/24 maxlen: 24
93.183.91.0/24 maxlen: 24
109.107.164.0/24 maxlen: 24
109.107.165.0/24 maxlen: 24
109.107.166.0/24 maxlen: 24
109.107.167.0/24 maxlen: 24
109.107.172.0/24 maxlen: 24
109.107.173.0/24 maxlen: 24
109.107.174.0/24 maxlen: 24
109.107.175.0/24 maxlen: 24
109.107.176.0/24 maxlen: 24
109.107.177.0/24 maxlen: 24
109.107.178.0/24 maxlen: 24
109.107.179.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
178.130.40.0/24 maxlen: 24
178.130.41.0/24 maxlen: 24
178.130.42.0/24 maxlen: 24
178.130.43.0/24 maxlen: 24
194.60.132.0/24 maxlen: 24
194.60.133.0/24 maxlen: 24
194.60.134.0/24 maxlen: 24
194.60.135.0/24 maxlen: 24
194.246.81.0/24 maxlen: 24
194.246.82.0/24 maxlen: 24
194.246.83.0/24 maxlen: 24
212.111.80.0/24 maxlen: 24
212.111.81.0/24 maxlen: 24
212.111.82.0/24 maxlen: 24
212.111.88.0/24 maxlen: 24
212.111.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4c:98:3c:3e:fe:fa:ee:60:fe:e0:e9:cb:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2df1a013e2ee3440b16e726340f8a9b8584b8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:3c:f7:08:87:7b:28:75:da:6a:fa:01:70:
30:7e:48:a5:04:f2:ef:84:7f:8b:62:09:90:0c:5b:
e1:97:7e:23:0e:eb:e3:d9:14:28:0f:65:7d:e5:86:
22:f8:eb:88:2a:79:24:79:6e:74:84:c1:75:ae:4c:
c7:95:82:b6:28:59:1e:24:49:c8:f5:72:c2:f7:98:
65:84:e4:21:64:d1:7e:5b:7a:ed:f3:7f:fb:c3:a5:
53:07:d7:62:04:db:7d:9c:40:67:68:b4:20:28:f1:
c7:19:5f:4f:7e:8d:17:9d:3d:30:bd:64:f1:ea:43:
17:82:59:ae:04:80:a6:39:34:c6:3b:ce:57:90:0c:
a1:c5:26:0e:1a:b0:de:0e:36:ff:f5:89:16:e2:0c:
25:7a:e5:2c:33:5e:35:db:cf:67:a4:36:6c:04:8a:
f5:55:b1:fb:60:2d:68:b9:e5:0b:bd:75:17:da:5f:
a2:f4:c1:cb:02:41:3b:a9:87:2b:8c:c3:41:2f:b5:
86:1c:f2:f8:49:2f:27:87:b7:09:48:d2:74:99:9b:
36:c1:77:e4:74:74:d9:99:26:04:30:87:41:cb:4b:
2f:31:22:f2:c3:ca:15:6f:c5:9a:2b:80:24:10:9e:
e7:23:f4:ba:16:fb:38:bf:06:34:ba:e1:72:47:86:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:A0:13:E2:EE:34:40:B1:6E:72:63:40:F8:A9:B8:58:4B:83:62
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/LfGgE-LuNECxbnJjQPipuFhLg2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.32.0-5.35.34.255
5.35.36.0/22
5.35.44.0/22
5.35.68.0/22
77.105.136.0/21
77.246.96.0/20
89.110.64.0-89.110.87.255
89.110.100.0-89.110.127.255
93.183.88.0/22
109.107.164.0/22
109.107.172.0-109.107.179.255
109.107.184.0/22
178.130.40.0/22
194.60.132.0/22
194.246.81.0-194.246.83.255
212.111.80.0-212.111.82.255
212.111.88.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:a0:7d:8f:2a:45:d8:8e:a9:9d:b4:00:4c:29:f4:e4:f7:39:
3f:1a:49:6a:92:1c:42:9d:45:e6:72:be:7b:e2:54:af:12:ca:
e1:be:58:fc:1b:8d:d1:aa:5f:a7:06:57:51:80:13:86:89:e3:
c7:eb:10:20:92:ee:ba:56:07:1f:02:d8:ae:4e:9a:79:3a:79:
ef:1f:5f:17:2c:10:60:d3:71:0f:fe:56:cf:f6:5b:bd:0e:87:
d4:e5:52:bc:be:53:e9:a7:4e:1b:06:06:2f:be:f7:30:32:3a:
62:49:20:29:a1:d9:bc:25:ff:e7:6d:b0:bf:bd:94:9b:56:34:
fc:24:d4:7d:22:47:fa:5d:29:35:ef:6e:7a:5d:e9:84:c6:0c:
aa:c5:59:35:2a:72:96:de:d3:8b:4f:7d:9b:2f:b3:cd:02:11:
99:bf:f4:1d:9f:64:01:7d:ff:cb:09:f0:f6:78:a0:86:86:2e:
37:f2:f3:3c:1e:e9:dd:2a:cf:4e:4c:1a:27:7a:e4:04:4a:4c:
50:a0:5b:2b:37:46:ce:76:61:1e:4c:4b:06:2a:35:02:6c:fb:
79:ef:7b:e3:8c:d6:f8:c9:e3:c5:8a:2c:e0:80:eb:e7:61:1e:
f9:09:36:80:ed:7c:2b:8b:6c:79:02:53:92:f9:6e:6d:3f:09:
29:58:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:29 2025 by rpki-client