Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa
File: Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa (raw, json)
Hash identifier: Gr5X2Rmhr1oI9Q5+L8dhJwGmpeVsMSPTaTpb15ko9Pw=
Subject key identifier: 65:C8:7C:8C:EA:9F:90:BE:55:66:2D:FE:5E:E1:38:01:98:F5:51:64
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194A286BBD21DC47C93875D33EA8DB1A3E6
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa
Signing time: Sun 26 Jan 2025 12:12:06 +0000
ROA not before: Sun 26 Jan 2025 12:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:86:bb:d2:1d:c4:7c:93:87:5d:33:ea:8d:b1:a3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 26 12:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65c87c8cea9f90be55662dfe5ee1380198f55164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:2d:6d:f8:e4:8f:1e:03:63:6a:5e:cd:56:
5d:08:01:91:c5:3b:2c:74:b3:ea:5a:ce:ea:b1:88:
04:77:61:08:65:87:82:33:d6:fc:be:34:6b:ff:f8:
f2:6b:36:4d:82:d6:ab:68:cc:d9:d4:d6:1f:32:06:
a9:bb:b7:28:1c:9e:a9:a7:f6:16:e9:a3:66:b5:51:
40:41:2a:20:8b:9d:25:10:de:d7:5b:8e:3b:7a:d1:
d8:a5:01:4c:f2:39:91:a6:d2:72:ac:da:26:fc:ab:
04:8d:e9:76:60:00:6e:bf:7a:46:cc:99:aa:9f:ce:
ff:19:99:3c:25:a7:c9:07:f9:aa:a2:8e:9e:d0:99:
c2:a5:1a:67:e3:d6:0d:e6:0d:1e:77:d5:bf:d1:77:
be:33:00:8b:7e:e3:fc:15:21:27:d5:3d:cb:eb:a4:
b4:9a:d0:36:20:f3:da:b5:95:1b:1c:7d:25:75:76:
a4:a7:a3:b7:1a:90:ad:eb:f7:c4:fd:49:95:4d:c8:
fe:68:94:33:31:97:eb:4e:86:bd:c5:37:b9:fa:69:
6b:60:21:99:fc:ff:4b:83:2c:e0:0e:88:b1:08:01:
03:e2:84:a1:02:45:bf:bb:0e:74:cf:31:31:26:84:
07:75:35:8d:91:89:23:bd:79:a0:7b:93:1a:a4:2e:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:7C:8C:EA:9F:90:BE:55:66:2D:FE:5E:E1:38:01:98:F5:51:64
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
0f:44:54:cf:6d:36:a8:c6:21:53:50:15:6b:f7:cd:df:20:c4:
16:72:ef:e7:7a:b5:57:36:93:bd:d5:58:35:64:c6:61:35:f3:
9d:dd:f1:dc:f8:5c:f3:d0:98:28:38:55:fc:ac:a9:c0:7e:8c:
ea:3f:7f:47:cc:22:98:0f:82:b8:f4:21:7c:51:8c:7e:36:b7:
7b:b7:53:71:53:a6:09:64:7f:40:60:7c:d2:44:cc:85:cc:16:
26:1f:5b:5f:de:29:52:1b:36:4f:03:44:71:77:db:5d:e1:0f:
85:f4:6b:e3:44:ed:d2:c8:7e:47:50:a6:b1:ea:de:85:dd:c6:
31:2d:69:fa:7d:23:a5:83:c9:fa:86:5f:d1:53:9d:fb:3a:d4:
07:fd:36:63:08:6f:94:09:52:e4:2e:65:84:0a:94:91:e1:de:
f6:1b:02:6e:66:d5:e6:76:25:b7:fc:b5:6e:68:e8:71:d7:4a:
da:92:bf:c4:f5:ee:39:3a:89:88:e5:76:03:d1:a5:36:69:af:
20:bc:ca:89:5f:96:2b:41:76:c3:6e:bf:52:bc:59:7c:cf:e5:
45:34:28:1d:a7:b0:a8:f8:0b:5f:d8:65:a5:1b:86:44:f9:a1:
fb:9b:4d:85:ff:cd:d4:aa:53:13:52:5d:93:0d:51:85:8e:45:
21:87:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:58 2025 by rpki-client