Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/aDnOQceB59HugfgUIIHxxyrquB4.roa
File: aDnOQceB59HugfgUIIHxxyrquB4.roa (raw, json)
Hash identifier: WHUAy03nW9XLqqZOQvv6xQagdyuD+9TexDOsTfvpdL8=
Subject key identifier: 68:39:CE:41:C7:81:E7:D1:EE:81:F8:14:20:81:F1:C7:2A:EA:B8:1E
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0194266BE9F21AC127A0EFC7477CB24469FE
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/aDnOQceB59HugfgUIIHxxyrquB4.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 5.57.3.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
85.112.64.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.80.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
146.185.32.0/24 maxlen: 24
146.185.33.0/24 maxlen: 24
146.185.34.0/24 maxlen: 24
146.185.35.0/24 maxlen: 24
146.185.36.0/24 maxlen: 24
146.185.37.0/24 maxlen: 24
146.185.38.0/24 maxlen: 24
146.185.39.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.76.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
2a00:1580::/29 maxlen: 29
2a00:1580::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:f2:1a:c1:27:a0:ef:c7:47:7c:b2:44:69:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6839ce41c781e7d1ee81f8142081f1c72aeab81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:b8:0c:dc:22:08:7c:9a:f0:cc:25:59:4a:
40:41:12:d8:cb:6f:3f:fd:e7:d5:a2:f0:ee:51:c9:
ab:65:36:a3:c4:e2:61:a6:e6:fe:27:9f:db:cf:70:
18:b9:7c:54:0c:8b:49:c5:50:cb:54:d5:40:ea:f9:
f5:4f:51:39:19:0b:fc:21:fe:60:02:9f:75:a4:f9:
a1:ef:8d:88:21:2b:5c:42:38:d9:a7:ca:8f:50:3f:
d5:81:a6:75:dc:19:d1:4e:67:b4:09:11:8c:a5:46:
d0:bc:37:e3:33:33:75:0d:9e:a3:04:67:ce:a0:f0:
0c:c9:d9:7b:ab:05:7d:5c:cd:52:d9:f4:e9:86:72:
9e:e8:89:b7:66:a2:0c:a3:fc:ec:66:6f:28:c5:ce:
73:0a:9b:a1:b1:62:22:e3:92:82:8b:e1:ae:a9:5e:
44:36:13:3c:9e:74:10:70:74:c8:4d:b8:55:9a:d4:
e5:ca:3d:14:a4:83:e5:44:ff:ce:b1:ca:39:df:e5:
d5:29:8a:4f:ad:51:29:f2:76:4c:c4:96:cd:43:b3:
ca:bc:0c:e0:12:4b:64:1d:55:ad:02:b9:8d:8a:b9:
f1:cf:d8:64:4e:b7:74:c6:f0:7d:38:2f:07:0b:0e:
c1:a3:b1:ac:d9:a5:cf:cb:32:c9:09:af:e3:46:4d:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:CE:41:C7:81:E7:D1:EE:81:F8:14:20:81:F1:C7:2A:EA:B8:1E
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/aDnOQceB59HugfgUIIHxxyrquB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.80.0/24
85.112.82.0-85.112.95.255
146.185.32.0/21
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
26:33:4a:2a:00:8a:ef:f6:06:1f:ea:b8:94:3a:08:d4:2b:40:
aa:4e:77:5e:ea:98:c9:cf:d1:7d:a3:65:e4:bf:6c:2d:02:dc:
f4:a7:03:92:fb:2c:a4:48:da:29:30:db:2c:b0:11:43:77:f8:
bb:b6:f9:85:64:77:30:ef:d2:ee:fe:ab:ff:7b:ba:5b:ab:f2:
5c:57:30:47:2f:72:1b:86:8b:78:eb:66:95:19:4b:93:f7:d7:
84:25:1d:9c:9b:e2:78:77:7e:24:6f:fc:d3:17:97:e7:c9:8b:
b4:48:24:39:77:cc:98:be:e0:43:a1:bd:41:d8:cc:56:50:60:
ea:b2:62:58:83:d7:71:9b:0b:ad:8a:e3:df:da:9f:ef:0c:76:
8d:f8:cd:fc:23:41:e1:a7:6d:4f:bf:2f:13:94:fd:c8:a5:16:
74:45:d3:49:94:93:3f:81:c3:b6:5b:00:14:0c:f3:9e:ad:4f:
13:1e:64:00:8a:ae:0d:08:9b:2f:b8:7a:a0:ee:12:e3:4b:49:
15:9f:ed:37:e2:08:cc:53:f8:6e:c2:71:e6:19:9f:73:b8:a2:
ab:4f:b3:ce:26:57:0a:b7:9d:1f:9b:61:61:14:20:cb:14:7e:
98:65:f2:4e:f7:24:7b:a3:45:99:17:85:bc:4d:29:96:05:39:
51:1d:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:42 2025 by rpki-client