Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/t4Mz5XwpvViTfoBPC5odbwhbyII.roa
File: t4Mz5XwpvViTfoBPC5odbwhbyII.roa (raw, json)
Hash identifier: S6sdSlSF5tAAZJY3yT2wIhYWG4HF1Pc/9/M/3E5AUig=
Subject key identifier: B7:83:33:E5:7C:29:BD:58:93:7E:80:4F:0B:9A:1D:6F:08:5B:C8:82
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01941FFA48F125919D6680794659C883CB52
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/t4Mz5XwpvViTfoBPC5odbwhbyII.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 2.84.0.0/14 maxlen: 14
2.84.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
2.85.0.0/16 maxlen: 16
2.86.0.0/16 maxlen: 16
2.86.64.0/19 maxlen: 19
2.87.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
45.139.212.0/22 maxlen: 22
45.139.212.0/23 maxlen: 23
45.139.214.0/23 maxlen: 23
62.103.0.0/16 maxlen: 16
62.103.0.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.147.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
62.103.228.0/24 maxlen: 24
79.128.0.0/14 maxlen: 14
79.128.0.0/16 maxlen: 16
79.128.176.0/24 maxlen: 24
79.128.177.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.129.0.0/16 maxlen: 16
79.130.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
80.106.0.0/15 maxlen: 15
80.106.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
80.107.0.0/16 maxlen: 24
80.107.91.0/24 maxlen: 24
80.107.116.0/22 maxlen: 22
80.107.204.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
83.235.64.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.71.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.77.0/24 maxlen: 24
85.72.0.0/14 maxlen: 14
85.72.0.0/16 maxlen: 16
85.73.0.0/16 maxlen: 16
85.73.128.0/18 maxlen: 18
85.73.192.0/18 maxlen: 18
85.74.0.0/16 maxlen: 16
85.74.160.0/20 maxlen: 20
85.74.192.0/19 maxlen: 19
85.75.0.0/16 maxlen: 16
85.75.0.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.112.0/21 maxlen: 21
85.75.224.0/20 maxlen: 20
87.202.0.0/15 maxlen: 15
87.202.0.0/16 maxlen: 16
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
87.203.0.0/16 maxlen: 16
87.203.64.0/18 maxlen: 18
94.64.0.0/13 maxlen: 13
94.64.0.0/16 maxlen: 16
94.65.0.0/16 maxlen: 16
94.66.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
94.66.96.0/22 maxlen: 22
94.66.128.0/18 maxlen: 18
94.66.220.0/22 maxlen: 22
94.67.0.0/16 maxlen: 16
94.67.128.0/17 maxlen: 17
94.68.0.0/16 maxlen: 16
94.69.0.0/16 maxlen: 16
94.69.64.0/19 maxlen: 19
94.70.0.0/16 maxlen: 16
94.70.0.0/19 maxlen: 20
94.71.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.146.0.0/16 maxlen: 16
178.147.0.0/16 maxlen: 16
185.44.144.0/22 maxlen: 22
185.44.144.0/23 maxlen: 23
185.44.146.0/23 maxlen: 23
195.167.0.0/17 maxlen: 17
195.167.92.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
195.170.0.0/24 maxlen: 24
195.170.2.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
217.195.128.0/20 maxlen: 20
217.195.128.0/21 maxlen: 21
217.195.128.0/22 maxlen: 22
2a02:580::/29 maxlen: 29
2a02:582:1800::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:586::/35 maxlen: 35
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586:4000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:c000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:1800::/38 maxlen: 38
2a02:587:2000::/36 maxlen: 36
2a02:587:3000::/36 maxlen: 36
2a02:587:4000::/34 maxlen: 34
2a02:587:4800::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:501a::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:587:501e::/48 maxlen: 48
2a02:587:50da::/48 maxlen: 48
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:587:5400::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:6400::/38 maxlen: 38
2a02:587:8000::/34 maxlen: 34
2a02:587:8400::/40 maxlen: 40
2a02:587:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:f1:25:91:9d:66:80:79:46:59:c8:83:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b78333e57c29bd58937e804f0b9a1d6f085bc882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:64:3f:1a:ee:fd:c1:11:2f:a8:0e:58:19:
7d:6b:7b:35:c4:28:48:ee:60:f5:9c:95:e4:e8:ba:
13:f4:25:a9:1b:be:d2:60:14:1a:1d:44:06:2f:0a:
05:70:57:7a:5b:29:d6:77:6d:11:d2:b4:d5:80:b8:
2d:13:8a:2d:e4:66:f5:d4:6b:6e:fe:9e:ca:bd:cf:
f6:09:cb:ef:77:46:23:2a:92:f1:33:50:e6:65:4d:
01:d4:8e:20:72:1b:f9:d4:1a:9e:64:17:e9:4b:32:
e4:ea:bb:bd:62:d8:6f:81:e8:c5:3c:04:9d:18:67:
30:f1:5e:e7:80:5b:78:0f:1d:7e:f0:4b:7b:71:0a:
82:83:bd:63:94:25:05:a6:0e:07:36:18:0f:6a:41:
b0:ec:88:43:a8:b2:8f:63:15:48:1d:01:cf:02:60:
e9:42:30:5f:04:ee:34:c1:ef:1a:79:61:4d:ed:7b:
f7:ff:5b:fb:47:88:eb:fb:9a:cd:ab:90:18:a8:79:
19:a8:bb:75:1a:0f:e3:88:6d:9b:63:06:64:f4:5f:
f0:0b:10:84:7f:1b:10:96:7d:e7:a3:f3:60:b9:f1:
75:ae:cf:d9:c9:e6:af:cc:cf:93:2e:1b:6f:69:1e:
a5:6a:d5:f6:be:b1:05:ad:0c:98:75:d7:a6:51:fa:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:33:E5:7C:29:BD:58:93:7E:80:4F:0B:9A:1D:6F:08:5B:C8:82
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/t4Mz5XwpvViTfoBPC5odbwhbyII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
14:a5:e4:ff:b3:f2:9b:04:38:f4:95:3a:f2:0b:86:9a:2b:f5:
50:66:1a:f9:79:79:76:5b:b1:b9:ef:3f:77:21:bd:dc:79:51:
c4:f9:2f:81:b4:91:4c:07:4b:f4:f9:92:48:5c:fe:c3:c3:4f:
21:ae:91:32:65:89:35:af:26:86:12:43:2a:1a:ff:3e:d6:6c:
b7:a4:82:f6:67:16:4e:af:4f:c2:0c:25:5e:43:cf:38:26:5e:
ef:5d:5e:25:24:13:bf:b5:6b:48:26:51:b4:e9:03:0a:12:c3:
e1:a3:f5:e3:08:88:1d:f9:0a:ea:76:a4:16:22:be:62:00:9d:
15:a9:bf:11:fd:f8:e4:e4:83:11:99:41:fe:f6:08:29:34:02:
26:05:d3:30:fa:35:3b:aa:f3:64:6e:97:ca:65:e5:aa:84:44:
2f:77:18:b9:15:c8:a6:04:7b:eb:2b:ae:9a:c8:b2:09:33:9f:
f9:44:ec:e3:b9:10:2e:ba:64:85:21:ec:88:72:fc:39:72:52:
66:b9:4a:bb:23:96:ea:6a:26:c4:4b:d9:08:4d:7a:c0:d0:ea:
9e:f5:8a:e6:97:3f:fa:d1:6d:81:5d:67:bc:a0:7c:2e:63:e8:
f3:02:55:3a:28:2c:c9:c7:0e:54:1c:cb:fc:be:53:19:8f:34:
f0:b2:04:e9
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZQf+kjxJZGdZoB5RlnIg8tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjUwMTAxMDM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzgzMzNlNTdjMjliZDU4OTM3ZTgwNGYwYjlhMWQ2ZjA4NWJjODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA185kPxru/cERL6gOWBl9a3s1xChI
7mD1nJXk6LoT9CWpG77SYBQaHUQGLwoFcFd6WynWd20R0rTVgLgtE4ot5Gb11Gtu
/p7Kvc/2Ccvvd0YjKpLxM1DmZU0B1I4gchv51BqeZBfpSzLk6ru9YthvgejFPASd
GGcw8V7ngFt4Dx1+8Et7cQqCg71jlCUFpg4HNhgPakGw7IhDqLKPYxVIHQHPAmDp
QjBfBO40we8aeWFN7Xv3/1v7R4jr+5rNq5AYqHkZqLt1Gg/jiG2bYwZk9F/wCxCE
fxsQln3no/NgufF1rs/ZyeavzM+TLhtvaR6latX2vrEFrQyYddemUfoptwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFLeDM+V8Kb1Yk36ATwuaHW8IW8iCMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvdDRNejVYd3B2VmlUZm9CUEM1b2Rid2hieUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwMCAlQDBAUf
2aADBAIti9QDAwA+ZwMDAk+AAwMBUGoDAwBT6wMDAlVIAwMBV8oDAwNeQAMDAbKS
AwQCuSyQAwQHw6cAAwQFw6oAAwMA1M0DBATZw4AwDQQCAAIwBwMFAyoCBYAwDQYJ
KoZIhvcNAQELBQADggEBABSl5P+z8psEOPSVOvILhpor9VBmGvl5eXZbsbnvP3ch
vdx5UcT5L4G0kUwHS/T5kkhc/sPDTyGukTJliTWvJoYSQyoa/z7WbLekgvZnFk6v
T8IMJV5DzzgmXu9dXiUkE7+1a0gmUbTpAwoSw+Gj9eMIiB35Cup2pBYivmIAnRWp
vxH9+OTkgxGZQf72CCk0AiYF0zD6NTuq82Rul8pl5aqERC93GLkVyKYEe+srrprI
sgkzn/lE7OO5EC66ZIUh7Ihy/DlyUma5SrsjlupqJsRL2QhNesDQ6p71iuaXP/rR
bYFdZ7ygfC5j6PMCVTooLMnHDlQcy/y+UxmPNPCyBOk=
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:41:25 2025 by rpki-client on console.sobornost.net