Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/vU-75r0gInbOCnxxQxxUry9G0nQ.roa
File: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (raw, json)
Hash identifier: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=
Subject key identifier: BD:4F:BB:E6:BD:20:22:76:CE:0A:7C:71:43:1C:54:AF:2F:46:D2:74
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019427470D48EA182E7098256C4E353E1E58
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/vU-75r0gInbOCnxxQxxUry9G0nQ.roa
Signing time: Thu 02 Jan 2025 13:49:15 +0000
ROA not before: Thu 02 Jan 2025 13:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12302
IP address blocks: 46.97.0.0/16 maxlen: 16
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
46.97.120.0/21 maxlen: 21
46.97.128.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.153.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
81.12.128.0/17 maxlen: 17
81.12.128.0/21 maxlen: 21
81.12.128.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.132.0/23 maxlen: 23
81.12.134.0/24 maxlen: 24
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.228.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.231.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.240.0/21 maxlen: 21
81.12.242.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.245.0/24 maxlen: 24
81.12.246.0/24 maxlen: 24
81.12.247.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
91.233.130.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
165.78.0.0/16 maxlen: 16
165.78.0.0/19 maxlen: 19
165.78.0.0/21 maxlen: 21
165.78.32.0/19 maxlen: 19
165.78.64.0/19 maxlen: 19
165.78.64.0/21 maxlen: 21
165.78.96.0/19 maxlen: 19
165.78.128.0/19 maxlen: 19
165.78.128.0/21 maxlen: 21
165.78.160.0/19 maxlen: 19
165.78.192.0/19 maxlen: 19
165.78.192.0/21 maxlen: 21
165.78.224.0/19 maxlen: 19
185.34.64.0/23 maxlen: 23
192.145.100.0/22 maxlen: 22
213.233.64.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.67.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.82.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.84.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.88.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.96.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.115.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.194.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
217.10.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0d:48:ea:18:2e:70:98:25:6c:4e:35:3e:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jan 2 13:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4fbbe6bd202276ce0a7c71431c54af2f46d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ac:5e:0d:99:f6:23:8b:45:d0:65:6b:33:88:
02:f1:96:7b:26:dc:c4:f6:e0:29:c5:88:cd:59:0c:
b1:49:57:6c:e1:f3:2c:80:a4:18:03:98:8c:13:b0:
94:80:04:0f:45:a9:d3:86:7e:4a:3f:d4:b2:f4:d4:
8d:15:1c:89:31:f0:4f:d8:87:3b:f1:49:24:92:11:
0a:d9:7c:f5:38:e7:e8:d9:59:f3:95:c3:e0:74:48:
e4:75:4b:9d:80:75:51:c6:ff:8c:c2:84:7c:cd:a9:
c7:aa:53:f0:54:97:df:41:0e:ce:3c:9c:e6:74:5a:
db:2e:73:88:cd:87:7c:6a:19:7d:d7:d5:90:65:40:
2e:6c:da:9c:19:02:97:17:07:3a:17:10:85:2b:f0:
27:f1:dd:69:2e:70:1c:8a:d5:2c:ac:8e:0c:7c:56:
07:40:7e:9e:a5:72:07:c1:c0:a7:37:59:49:60:d2:
9f:1c:4c:4d:7a:92:69:88:b4:84:a8:d4:f9:b2:0e:
cd:20:ee:45:50:0c:b9:ca:15:93:e4:05:5c:3a:cb:
f4:ee:6d:fc:59:c3:a0:7d:1d:44:b5:bb:c4:8d:93:
97:81:d6:57:e8:4d:17:d9:eb:85:74:83:8a:7c:39:
0a:46:87:99:5a:0b:23:41:42:a2:c4:57:2d:ca:3e:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:BB:E6:BD:20:22:76:CE:0A:7C:71:43:1C:54:AF:2F:46:D2:74
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/vU-75r0gInbOCnxxQxxUry9G0nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
91.233.130.0/23
136.255.0.0/16
165.78.0.0/16
185.34.64.0/23
192.145.100.0/22
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
88:58:e3:99:28:57:0a:19:4a:61:00:4c:dd:d6:4a:5b:f8:52:
8d:dd:f9:40:9e:55:db:f3:d9:b5:e1:1c:fc:3e:0b:0a:e4:c0:
96:58:63:86:34:c8:cc:98:9b:f5:9e:f0:95:fb:ba:5a:9e:3b:
3d:48:84:29:b6:4b:3a:51:02:60:67:29:6e:c1:75:ca:cd:af:
4b:b9:16:ef:d6:4f:82:60:0d:f5:6a:09:71:43:01:be:fa:b1:
3a:d6:e7:b9:6c:40:57:51:9d:ff:a0:71:f3:fc:93:44:a3:03:
ee:b8:9a:a7:1f:de:0e:16:52:2d:b4:1f:6a:5e:fc:06:9b:8f:
8e:6b:d2:e8:05:2f:63:8e:de:a7:a9:08:1a:37:fd:0e:4d:e8:
44:3b:ed:b4:3c:31:19:82:7c:8d:52:6f:34:76:5d:f8:df:26:
7e:41:ea:1f:4d:f2:cf:e5:0e:ae:18:51:39:a1:ec:3b:e4:61:
43:7f:7f:85:4a:7e:9b:fd:8a:d8:a1:c3:06:41:c4:a7:7f:e3:
aa:72:15:1a:3e:58:73:9b:10:49:4a:38:9c:f7:f8:39:cb:2a:
2f:3d:10:f7:71:e3:0e:be:b6:b0:b2:32:4a:7e:c5:7a:0d:df:
95:95:97:bd:a4:b0:f1:80:ee:7d:ef:cb:c2:ed:c9:0e:05:1c:
38:89:58:e3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQnRw1I6hgucJglbE41Ph5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjUwMTAyMTM0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRmYmJlNmJkMjAyMjc2Y2UwYTdjNzE0MzFjNTRhZjJmNDZkMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qxeDZn2I4tF0GVrM4gC8ZZ7JtzE
9uApxYjNWQyxSVds4fMsgKQYA5iME7CUgAQPRanThn5KP9Sy9NSNFRyJMfBP2Ic7
8UkkkhEK2Xz1OOfo2VnzlcPgdEjkdUudgHVRxv+MwoR8zanHqlPwVJffQQ7OPJzm
dFrbLnOIzYd8ahl919WQZUAubNqcGQKXFwc6FxCFK/An8d1pLnAcitUsrI4MfFYH
QH6epXIHwcCnN1lJYNKfHExNepJpiLSEqNT5sg7NIO5FUAy5yhWT5AVcOsv07m38
WcOgfR1EtbvEjZOXgdZX6E0X2euFdIOKfDkKRoeZWgsjQUKixFctyj5ERwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFL1Pu+a9ICJ2zgp8cUMcVK8vRtJ0MB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdlUtNzVyMGdJbmJPQ254eFF4eFVyeTlHMG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzAwMALmEDBAdR
DIADBAFb6YIDAwCI/wMDAKVOAwQBuSJAAwQCwJFkAwQG1elAAwQF2QrAMA0GCSqG
SIb3DQEBCwUAA4IBAQCIWOOZKFcKGUphAEzd1kpb+FKN3flAnlXb89m14Rz8PgsK
5MCWWGOGNMjMmJv1nvCV+7panjs9SIQptks6UQJgZyluwXXKza9LuRbv1k+CYA31
aglxQwG++rE61ue5bEBXUZ3/oHHz/JNEowPuuJqnH94OFlIttB9qXvwGm4+Oa9Lo
BS9jjt6nqQgaN/0OTehEO+20PDEZgnyNUm80dl343yZ+QeofTfLP5Q6uGFE5oew7
5GFDf3+FSn6b/YrYocMGQcSnf+OqchUaPlhzmxBJSjic9/g5yyovPRD3ceMOvraw
sjJKfsV6Dd+VlZe9pLDxgO5978vC7ckOBRw4iVjj
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:17:59 2025 by rpki-client