Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fAMeVIYaia-kItSwnU9rDfVMOzQ.roa
File: fAMeVIYaia-kItSwnU9rDfVMOzQ.roa (raw, json)
Hash identifier: ror7s5Cmup/woifs1uW2kzG0sYsn0EcPXSwKTIZTzxI=
Subject key identifier: 7C:03:1E:54:86:1A:89:AF:A4:22:D4:B0:9D:4F:6B:0D:F5:4C:3B:34
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01962EFD13D192FE9AE932579799C5F8ECC8
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fAMeVIYaia-kItSwnU9rDfVMOzQ.roa
Signing time: Sun 13 Apr 2025 11:50:59 +0000
ROA not before: Sun 13 Apr 2025 11:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:fd:13:d1:92:fe:9a:e9:32:57:97:99:c5:f8:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 13 11:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c031e54861a89afa422d4b09d4f6b0df54c3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:12:4a:b2:12:06:1f:96:95:3b:b8:08:a7:
c1:1c:1e:1d:90:60:5d:4f:73:50:d6:38:d5:2f:c4:
59:a5:a4:5e:c4:28:cb:8c:e7:5a:50:17:66:24:b8:
ef:b0:54:82:7c:22:6a:08:de:1d:de:a8:75:94:17:
da:eb:cf:ad:dd:e5:2d:f0:23:7b:21:75:7d:a5:75:
d7:48:4b:1c:89:3e:c0:d4:62:e8:17:a6:7f:72:b6:
86:68:87:a4:42:53:fe:4b:91:61:55:79:58:82:3b:
34:23:35:88:00:6d:93:3f:2a:30:74:c9:f1:e4:9e:
fd:79:4d:5f:2b:1e:66:30:19:54:94:07:8e:42:08:
54:d5:e5:a8:7a:2b:8c:4c:46:81:04:85:48:60:6e:
97:36:18:4a:7e:65:06:77:8c:1b:ed:93:98:69:3f:
47:21:91:bd:90:a2:f8:2a:29:5a:27:73:a5:72:b8:
4a:c5:70:21:bc:74:ed:7d:18:e3:5c:e3:a7:3f:5d:
0f:9b:22:90:ee:f0:78:1e:a9:70:9a:54:5e:4a:b4:
39:2f:0d:d9:d1:a9:9f:ca:88:e4:82:da:57:18:29:
fd:05:b6:3c:4d:1a:44:0a:66:27:53:8a:2b:60:b0:
b9:84:16:62:d4:23:2a:53:fa:6f:a3:24:e3:35:a8:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:03:1E:54:86:1A:89:AF:A4:22:D4:B0:9D:4F:6B:0D:F5:4C:3B:34
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fAMeVIYaia-kItSwnU9rDfVMOzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
15:cd:52:1d:9a:74:c9:14:ea:73:bc:46:0f:48:1d:aa:28:5d:
e7:22:0a:a7:42:d7:0e:84:03:73:42:30:7f:f2:b6:9d:87:80:
32:7c:66:9c:28:b2:39:5f:84:be:bd:13:62:1c:d8:22:70:04:
06:b7:db:39:37:a3:46:5a:13:c3:c0:36:71:23:a8:f7:12:61:
2a:91:33:f5:58:a0:91:77:1f:3e:49:cb:b5:e3:f8:36:2b:97:
3d:74:9d:5c:5d:85:8f:2b:6d:15:41:7f:c0:2b:ec:14:8a:ba:
39:a5:ab:e8:94:97:88:56:1f:44:9f:5b:cd:5a:ff:0c:d1:8e:
91:99:9e:12:12:d4:0f:2f:fc:e5:8b:6e:ac:33:a7:e5:44:cf:
25:54:a1:1b:5c:69:03:4f:b9:8a:22:89:61:3b:f3:ee:42:27:
57:75:59:cb:99:74:1b:08:db:14:61:b2:37:89:f0:01:42:b7:
e3:74:de:ce:f4:b4:60:db:60:68:fe:fc:d4:c8:a1:58:8e:c7:
fc:9b:24:b3:84:77:df:75:ad:19:c2:8e:24:fc:74:28:59:51:
42:31:bb:09:61:3d:be:e8:af:5a:79:49:f6:9f:cc:07:1a:73:
cd:b0:f8:99:6c:49:8b:a7:42:40:0c:06:80:41:96:6e:99:0f:
c7:3c:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net