Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/utyHAEFwJnyFPJNvun5WhnSWaes.roa
File: utyHAEFwJnyFPJNvun5WhnSWaes.roa (raw, json)
Hash identifier: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=
Subject key identifier: BA:DC:87:00:41:70:26:7C:85:3C:93:6F:BA:7E:56:86:74:96:69:EB
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01941FFAB7E8C8695189C0F05B4B050DEE57
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/utyHAEFwJnyFPJNvun5WhnSWaes.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5617
IP address blocks: 5.184.0.0/15 maxlen: 15
5.184.0.0/16 maxlen: 24
31.60.0.0/14 maxlen: 25
37.47.0.0/16 maxlen: 24
37.108.0.0/16 maxlen: 25
37.225.0.0/16 maxlen: 25
37.228.0.0/18 maxlen: 18
46.134.0.0/16 maxlen: 25
46.170.0.0/15 maxlen: 24
79.162.0.0/15 maxlen: 24
79.163.0.0/16 maxlen: 25
79.163.128.0/17 maxlen: 25
79.184.0.0/13 maxlen: 13
79.184.0.0/16 maxlen: 24
79.185.0.0/16 maxlen: 24
79.186.0.0/16 maxlen: 24
79.187.0.0/16 maxlen: 24
79.188.0.0/16 maxlen: 24
79.189.0.0/16 maxlen: 24
79.190.0.0/16 maxlen: 24
79.191.0.0/16 maxlen: 24
80.48.0.0/13 maxlen: 13
80.48.0.0/14 maxlen: 14
80.48.0.0/16 maxlen: 24
80.49.0.0/16 maxlen: 24
80.50.0.0/16 maxlen: 24
80.51.0.0/16 maxlen: 24
80.52.0.0/16 maxlen: 24
80.53.0.0/16 maxlen: 24
80.54.0.0/16 maxlen: 24
80.55.0.0/16 maxlen: 24
83.0.0.0/11 maxlen: 11
83.0.0.0/13 maxlen: 13
83.0.0.0/16 maxlen: 24
83.1.0.0/16 maxlen: 24
83.2.0.0/16 maxlen: 24
83.3.0.0/16 maxlen: 24
83.4.0.0/16 maxlen: 24
83.5.0.0/16 maxlen: 24
83.6.0.0/16 maxlen: 24
83.7.0.0/16 maxlen: 24
83.8.0.0/13 maxlen: 13
83.8.0.0/16 maxlen: 24
83.9.0.0/16 maxlen: 24
83.10.0.0/16 maxlen: 24
83.11.0.0/16 maxlen: 24
83.12.0.0/16 maxlen: 24
83.13.0.0/16 maxlen: 24
83.14.0.0/16 maxlen: 24
83.15.0.0/16 maxlen: 24
83.16.0.0/13 maxlen: 13
83.16.0.0/16 maxlen: 24
83.17.0.0/16 maxlen: 24
83.18.0.0/16 maxlen: 24
83.19.0.0/16 maxlen: 24
83.20.0.0/16 maxlen: 24
83.21.0.0/16 maxlen: 24
83.22.0.0/16 maxlen: 24
83.23.0.0/16 maxlen: 24
83.24.0.0/13 maxlen: 13
83.24.0.0/16 maxlen: 24
83.25.0.0/16 maxlen: 24
83.26.0.0/16 maxlen: 24
83.27.0.0/16 maxlen: 24
83.28.0.0/16 maxlen: 24
83.29.0.0/16 maxlen: 24
83.30.0.0/16 maxlen: 24
83.31.0.0/16 maxlen: 24
87.96.0.0/17 maxlen: 24
91.94.0.0/16 maxlen: 24
95.48.0.0/14 maxlen: 14
95.48.0.0/16 maxlen: 24
95.49.0.0/16 maxlen: 24
95.50.0.0/16 maxlen: 24
95.51.0.0/16 maxlen: 24
178.42.0.0/15 maxlen: 24
178.56.0.0/16 maxlen: 24
188.47.0.0/16 maxlen: 24
193.110.120.0/22 maxlen: 22
194.204.128.0/18 maxlen: 18
194.204.152.0/24 maxlen: 24
194.204.159.0/24 maxlen: 24
195.116.0.0/16 maxlen: 24
195.117.0.0/16 maxlen: 24
195.205.0.0/16 maxlen: 24
195.205.147.0/24 maxlen: 24
195.205.239.0/24 maxlen: 24
212.160.0.0/16 maxlen: 24
212.160.172.0/24 maxlen: 24
212.244.0.0/16 maxlen: 24
212.244.226.0/24 maxlen: 24
213.25.0.0/16 maxlen: 24
213.25.92.0/24 maxlen: 24
213.25.125.0/24 maxlen: 24
213.25.166.0/24 maxlen: 24
213.76.0.0/16 maxlen: 24
213.76.129.0/24 maxlen: 24
213.76.135.0/24 maxlen: 24
213.76.140.0/24 maxlen: 24
213.76.143.0/24 maxlen: 24
213.76.146.0/24 maxlen: 24
213.77.0.0/16 maxlen: 24
213.77.0.0/17 maxlen: 17
213.77.5.0/24 maxlen: 24
213.77.20.0/24 maxlen: 24
213.77.34.0/24 maxlen: 24
213.77.68.0/24 maxlen: 24
213.77.68.192/26 maxlen: 26
217.96.0.0/14 maxlen: 14
217.96.0.0/16 maxlen: 24
217.97.0.0/16 maxlen: 24
217.98.0.0/16 maxlen: 24
217.99.0.0/16 maxlen: 24
217.116.96.0/20 maxlen: 20
217.116.100.0/22 maxlen: 22
2a00:f40::/29 maxlen: 29
2a01:1000::/21 maxlen: 21
2a01:1100::/28 maxlen: 28
2a01:1110::/28 maxlen: 28
2a01:1120::/28 maxlen: 28
2a01:1130::/28 maxlen: 28
2a01:1140::/28 maxlen: 28
2a01:1150::/28 maxlen: 28
2a01:1160::/28 maxlen: 28
2a01:1170::/28 maxlen: 28
2a01:1180::/28 maxlen: 28
2a01:1190::/28 maxlen: 28
2a01:11a0::/28 maxlen: 28
2a01:11b0::/28 maxlen: 28
2a01:11c0::/28 maxlen: 28
2a01:11d0::/28 maxlen: 28
2a01:1700:2::/48 maxlen: 48
2a01:1700:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:e8:c8:69:51:89:c0:f0:5b:4b:05:0d:ee:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=badc87004170267c853c936fba7e5686749669eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:33:39:bb:e1:86:45:77:ba:52:a5:2c:2b:
93:74:28:64:c3:4b:c8:b7:23:99:ab:8e:b7:fd:b0:
6f:4c:0d:7c:4a:ef:7f:8d:b1:32:4f:8f:14:9d:85:
d5:d8:54:19:a2:b8:f9:a6:aa:8e:92:2b:1b:5b:71:
25:d5:d0:2a:08:e3:27:64:36:e8:13:ca:df:8d:97:
a5:3d:da:75:c3:0a:16:39:91:24:5f:00:42:83:ef:
06:4e:3a:a2:a3:18:a7:67:ad:14:ce:48:e8:2e:e7:
08:87:38:78:5d:18:33:bd:4a:26:33:5b:be:d3:fa:
28:63:b7:ac:5f:ef:df:20:eb:7d:2a:1f:7f:82:24:
1b:6c:39:14:96:30:2b:dc:1d:c0:ce:88:0e:eb:eb:
25:9e:00:bf:b7:66:cc:97:05:e9:2c:1a:38:9a:64:
ed:f1:b4:2e:23:bd:07:28:63:0e:b3:49:c8:5b:9a:
01:75:1c:0b:f0:e6:c6:4d:0e:b5:56:40:03:73:89:
1a:87:28:1e:92:f9:1a:40:02:1d:43:0a:4d:6b:20:
54:1b:68:1c:02:46:fa:7e:d1:db:99:72:30:c7:77:
7c:95:02:eb:29:54:05:f7:cd:ec:93:8c:03:c8:15:
d5:44:70:64:b7:8b:79:7d:1f:8d:f6:e6:ef:89:7c:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:87:00:41:70:26:7C:85:3C:93:6F:BA:7E:56:86:74:96:69:EB
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/utyHAEFwJnyFPJNvun5WhnSWaes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.184.0.0/15
31.60.0.0/14
37.47.0.0/16
37.108.0.0/16
37.225.0.0/16
37.228.0.0/18
46.134.0.0/16
46.170.0.0/15
79.162.0.0/15
79.184.0.0/13
80.48.0.0/13
83.0.0.0/11
87.96.0.0/17
91.94.0.0/16
95.48.0.0/14
178.42.0.0/15
178.56.0.0/16
188.47.0.0/16
193.110.120.0/22
194.204.128.0/18
195.116.0.0/15
195.205.0.0/16
212.160.0.0/16
212.244.0.0/16
213.25.0.0/16
213.76.0.0/15
217.96.0.0/14
217.116.96.0/20
IPv6:
2a00:f40::/29
2a01:1000::/21
Signature Algorithm: sha256WithRSAEncryption
6b:75:d2:67:bd:84:d4:58:3a:26:34:b8:99:2f:ef:f9:19:85:
52:a5:c3:4a:d0:07:10:65:7b:60:72:f7:99:a0:79:fb:14:59:
9f:4f:3b:be:da:c6:ce:05:2b:31:3f:fe:ef:fc:8b:64:7f:9a:
42:87:0f:02:79:b3:5e:eb:a7:1c:f5:e6:83:fc:5c:72:e5:a9:
64:28:46:a3:32:53:3f:15:f9:6f:f3:73:a6:5a:e8:d5:66:40:
e1:7f:9c:3e:67:32:22:0f:d7:1f:e9:4b:ef:a6:b6:eb:f0:da:
92:8d:3a:90:c1:21:3e:6a:a0:94:ab:4d:d0:39:7b:b4:bd:55:
98:8d:32:b3:a3:25:d6:0f:92:17:41:ea:9e:6b:43:8a:9a:79:
12:a1:85:43:f2:38:48:25:e8:34:68:f3:0b:b6:35:cd:1e:07:
67:e0:6b:48:63:31:e7:34:b5:fc:0a:1c:c0:ac:24:3f:33:08:
75:ef:63:6c:fb:0d:f7:82:0b:9a:a0:b9:c6:14:7b:da:08:ec:
cc:0a:81:00:7a:5a:2f:ff:c1:b5:b1:75:77:57:b7:8b:45:0e:
41:a6:7f:77:65:fd:ae:e7:be:38:d9:d7:85:1a:3f:0f:40:47:
9b:0e:24:44:08:c4:1b:bc:50:96:79:8f:9e:71:6b:3b:2f:43:
5c:58:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:05 2025 by rpki-client