Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CT-Ye6MZRoq8k9wtLtOYVZzC7fU.roa
File: CT-Ye6MZRoq8k9wtLtOYVZzC7fU.roa (raw, json)
Hash identifier: QodVcwl5wSSnP6oFTh1SdwicrRjpjKYib65PR1f9dro=
Subject key identifier: 09:3F:98:7B:A3:19:46:8A:BC:93:DC:2D:2E:D3:98:55:9C:C2:ED:F5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FA996D112C75F4700931CD5774C4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CT-Ye6MZRoq8k9wtLtOYVZzC7fU.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fa:99:6d:11:2c:75:f4:70:09:31:cd:57:74:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=093f987ba319468abc93dc2d2ed398559cc2edf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:52:04:8c:81:9b:66:b6:94:f0:d8:ca:ec:
2c:ac:c1:47:ac:b9:68:1e:bb:82:6a:f2:2c:88:f5:
9b:04:21:92:b3:70:b1:eb:54:82:34:17:d0:f3:11:
f1:f6:cd:0e:e0:1f:ed:fb:ae:3a:83:da:ed:8d:67:
20:f5:7d:8e:8e:ce:76:d0:b6:d0:f6:8d:3f:2e:fd:
da:84:e4:98:9f:91:18:42:5e:04:90:3a:25:ad:9e:
66:4c:f6:5f:6d:84:ee:9f:7e:d0:79:e3:be:9d:24:
4c:cf:f7:cc:2c:40:17:40:4a:f1:36:88:a8:b0:8e:
19:59:4a:ca:c4:f6:a0:04:49:8d:5d:cb:4d:3c:63:
91:90:d0:f8:5e:5d:e3:0a:8a:d1:05:0e:ea:a3:93:
c0:e7:5e:32:5d:ab:1b:8f:bc:7f:7a:86:ef:b3:4b:
6b:db:0f:fe:35:2e:a7:ec:f6:7e:6d:a2:25:46:a3:
ae:3a:e9:4a:a7:03:c7:ea:64:d2:61:57:58:aa:7c:
88:9f:0b:c3:3b:6e:c6:26:61:0b:f0:b1:31:84:d2:
09:ff:ca:56:96:41:9b:ab:39:16:47:ac:48:64:39:
d9:fc:f1:61:92:0c:82:d2:2d:45:bf:7b:fa:98:07:
ae:f7:13:ab:0d:37:77:fb:86:8d:dd:18:ad:3e:6f:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:98:7B:A3:19:46:8A:BC:93:DC:2D:2E:D3:98:55:9C:C2:ED:F5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CT-Ye6MZRoq8k9wtLtOYVZzC7fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.213.255
85.133.220.0/24
85.133.223.0/24
85.133.225.0-85.133.226.255
85.133.228.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:da:8b:04:cc:a1:e4:10:b8:62:50:3c:2f:d6:40:99:4b:e3:
ed:d3:46:e3:74:de:41:42:21:dd:57:91:6a:c2:0f:8a:32:e8:
3c:ed:c8:15:9c:09:9d:6f:05:f1:41:91:64:b8:ad:f3:bd:82:
93:fc:2e:80:88:0c:25:67:04:9f:06:a2:f5:00:25:a5:a3:ec:
ec:d7:93:3d:6a:26:8f:7d:37:e9:b8:3e:ac:f5:ca:da:88:a0:
44:ca:5b:2b:a0:26:64:8f:91:00:0d:33:d1:d9:90:56:03:90:
11:a7:97:02:b4:7f:2a:88:24:25:f0:00:87:17:0c:fc:85:67:
90:7d:5e:8b:59:e0:c4:96:ec:c1:af:4b:be:20:88:de:7f:7c:
d1:df:35:b9:d0:60:2b:39:2a:db:dd:d8:09:56:5c:53:ea:bf:
f9:19:fd:69:e1:58:ba:11:90:b1:da:d2:d8:74:f7:e2:b6:4b:
8a:5f:b2:59:05:5d:29:73:48:59:4d:7c:93:83:75:2f:02:81:
88:68:2e:b8:12:96:9f:31:1b:a8:03:29:e9:ed:6c:74:4c:ef:
70:a5:db:0c:1d:83:41:09:a9:ed:76:8a:6b:ed:5b:f4:7c:a6:
9d:9a:72:15:c0:f5:39:f7:6c:a0:6d:7b:f9:ab:5e:22:e7:aa:
08:4b:90:fe
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISAZQntfqZbREsdfRwCTHNV3TEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMTAyMTU1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTNmOTg3YmEzMTk0NjhhYmM5M2RjMmQyZWQzOTg1NTljYzJlZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VhSBIyBm2a2lPDYyuwsrMFHrLlo
HruCavIsiPWbBCGSs3Cx61SCNBfQ8xHx9s0O4B/t+646g9rtjWcg9X2Ojs520LbQ
9o0/Lv3ahOSYn5EYQl4EkDolrZ5mTPZfbYTun37QeeO+nSRMz/fMLEAXQErxNoio
sI4ZWUrKxPagBEmNXctNPGORkND4Xl3jCorRBQ7qo5PA514yXasbj7x/eobvs0tr
2w/+NS6n7PZ+baIlRqOuOulKpwPH6mTSYVdYqnyInwvDO27GJmEL8LExhNIJ/8pW
lkGbqzkWR6xIZDnZ/PFhkgyC0i1Fv3v6mAeu9xOrDTd3+4aN3RitPm/Y/wIDAQAB
o4ICizCCAocwHQYDVR0OBBYEFAk/mHujGUaKvJPcLS7TmFWcwu31MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvQ1QtWWU2TVpSb3E4azl3dEx0T1lWWnpDN2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB8BAIAATB2AwQFVYWA
MAwDBAJVhaQDBABVhcADBAJVhcQwDAMEAFWF0QMEAVWF1AMEAFWF3AMEAFWF3zAM
AwQAVYXhAwQAVYXiMAwDBAJVheQDBABVhegDBABVhesDBABVhe8DBAFVhfQwDAME
AFWF9wMEAVWF+AMEAFWF/zANBAIAAjAHAwUDKgSHwDANBgkqhkiG9w0BAQsFAAOC
AQEAftqLBMyh5BC4YlA8L9ZAmUvj7dNG43TeQUIh3VeRasIPijLoPO3IFZwJnW8F
8UGRZLit872Ck/wugIgMJWcEnwai9QAlpaPs7NeTPWomj3036bg+rPXK2oigRMpb
K6AmZI+RAA0z0dmQVgOQEaeXArR/KogkJfAAhxcM/IVnkH1ei1ngxJbswa9LviCI
3n980d81udBgKzkq293YCVZcU+q/+Rn9aeFYuhGQsdrS2HT34rZLil+yWQVdKXNI
WU18k4N1LwKBiGguuBKWnzEbqAMp6e1sdEzvcKXbDB2DQQmp7XaKa+1b9HymnZpy
FcD1OfdsoG17+ateIueqCEuQ/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:41 2025 by rpki-client