Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/zx8UfD9quZ7fEz4PwkX1o5REJLY.roa
File: zx8UfD9quZ7fEz4PwkX1o5REJLY.roa (raw, json)
Hash identifier: LkvbOVOOf/VwC+FHhoaKwwmWUyhGBXApLbknTiX5gZQ=
Subject key identifier: CF:1F:14:7C:3F:6A:B9:9E:DF:13:3E:0F:C2:45:F5:A3:94:44:24:B6
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018AB6610FEC72C8075B91B23B1F1EFEB1B9
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/zx8UfD9quZ7fEz4PwkX1o5REJLY.roa
Signing time: Thu 21 Sep 2023 06:15:28 +0000
ROA not before: Thu 21 Sep 2023 06:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208913
IP address blocks: 195.2.196.0/23 maxlen: 24
86.107.53.0/24 maxlen: 24
91.238.148.0/23 maxlen: 24
194.140.235.0/24 maxlen: 24
85.204.243.0/24 maxlen: 24
85.204.253.0/24 maxlen: 24
85.204.247.0/24 maxlen: 24
85.204.250.0/24 maxlen: 24
91.214.188.0/22 maxlen: 24
188.241.192.0/24 maxlen: 24
195.93.140.0/23 maxlen: 24
91.198.23.0/24 maxlen: 24
93.114.84.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
92.114.109.0/24 maxlen: 24
92.114.110.0/24 maxlen: 24
188.208.108.0/24 maxlen: 24
188.208.116.0/24 maxlen: 24
188.211.234.0/24 maxlen: 24
188.215.76.0/23 maxlen: 24
89.36.199.0/24 maxlen: 24
89.40.41.0/24 maxlen: 24
94.177.23.0/24 maxlen: 24
195.254.140.0/23 maxlen: 24
194.42.100.0/23 maxlen: 24
85.204.26.0/24 maxlen: 24
86.106.108.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
89.42.52.0/23 maxlen: 24
93.119.193.0/24 maxlen: 24
94.177.6.0/23 maxlen: 24
194.106.204.0/23 maxlen: 24
193.39.119.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
193.36.44.0/24 maxlen: 24
188.214.81.0/24 maxlen: 24
188.214.89.0/24 maxlen: 24
176.126.198.0/23 maxlen: 24
188.210.254.0/24 maxlen: 24
176.126.204.0/24 maxlen: 24
89.32.125.0/24 maxlen: 24
89.200.240.0/23 maxlen: 24
89.32.130.0/23 maxlen: 24
193.93.40.0/22 maxlen: 24
93.180.208.0/22 maxlen: 24
89.39.91.0/24 maxlen: 24
195.189.176.0/24 maxlen: 24
195.189.186.0/23 maxlen: 24
79.139.80.0/23 maxlen: 24
188.240.4.0/22 maxlen: 24
91.229.228.0/24 maxlen: 24
91.216.138.0/24 maxlen: 24
195.135.192.0/23 maxlen: 24
89.38.134.0/24 maxlen: 24
77.223.214.0/23 maxlen: 24
86.105.241.0/24 maxlen: 24
194.8.81.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
188.213.128.0/22 maxlen: 24
195.210.44.0/23 maxlen: 24
46.102.105.0/24 maxlen: 24
195.189.250.0/23 maxlen: 24
91.223.183.0/24 maxlen: 24
46.102.118.0/23 maxlen: 24
94.176.150.0/24 maxlen: 24
91.227.33.0/24 maxlen: 24
89.47.94.0/24 maxlen: 24
89.40.164.0/23 maxlen: 24
193.138.97.0/24 maxlen: 24
89.47.43.0/24 maxlen: 24
89.47.48.0/22 maxlen: 24
193.192.44.0/23 maxlen: 24
89.37.58.0/24 maxlen: 24
93.114.182.0/24 maxlen: 24
195.34.80.0/23 maxlen: 24
45.14.76.0/22 maxlen: 24
193.108.52.0/22 maxlen: 24
193.37.136.0/24 maxlen: 24
193.239.172.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
193.169.8.0/23 maxlen: 24
93.115.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:61:0f:ec:72:c8:07:5b:91:b2:3b:1f:1e:fe:b1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Sep 21 06:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf1f147c3f6ab99edf133e0fc245f5a3944424b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:25:05:59:39:1b:fd:f5:f1:28:ed:b1:e3:02:
68:5f:e2:ec:31:12:81:8d:c3:e9:f7:10:e7:bc:3a:
ef:3e:31:b4:b7:75:65:6f:6b:dc:ee:68:ad:8a:a1:
47:2d:f6:a0:3d:0b:ec:71:81:e5:dc:95:df:c4:e8:
82:8e:52:2c:20:61:19:69:a3:56:d5:9d:36:58:96:
70:3c:5b:2a:02:43:14:e0:39:90:6c:94:cc:2f:54:
30:53:6e:29:bc:9a:41:21:c8:ab:6e:dc:91:ec:6c:
2c:23:b1:71:da:e8:2a:84:87:24:5d:be:79:61:3c:
cc:df:9f:db:dd:48:f0:e1:c2:26:cc:4b:97:f6:eb:
10:d7:b0:16:86:86:5a:86:4c:62:e4:eb:6d:02:5c:
75:c9:09:dd:08:12:2e:e5:d9:62:36:eb:1d:64:f6:
16:10:c9:96:ff:5f:5c:84:fd:67:21:f5:81:20:17:
31:a5:ea:dc:e6:29:36:20:66:aa:6f:f4:3c:d4:fb:
b6:20:cc:f4:c1:10:0e:75:62:b7:b1:35:af:57:6d:
d8:95:d9:05:cb:8d:bf:6b:2d:aa:cc:71:06:40:8b:
4c:a5:5d:a1:50:54:07:bc:d1:85:aa:00:c8:bb:6d:
9e:57:21:ff:2a:8b:a8:a7:95:f6:98:bc:70:5c:54:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:14:7C:3F:6A:B9:9E:DF:13:3E:0F:C2:45:F5:A3:94:44:24:B6
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/zx8UfD9quZ7fEz4PwkX1o5REJLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.76.0/22
46.102.105.0/24
46.102.118.0/23
77.223.214.0/23
79.139.80.0/23
85.204.26.0/24
85.204.243.0/24
85.204.247.0/24
85.204.250.0/24
85.204.253.0/24
86.104.72.0/22
86.105.241.0/24
86.106.108.0/24
86.107.53.0/24
89.32.125.0/24
89.32.130.0/23
89.36.199.0/24
89.37.58.0/24
89.38.134.0/24
89.39.91.0/24
89.40.41.0/24
89.40.164.0/23
89.42.52.0/23
89.47.43.0/24
89.47.48.0/22
89.47.94.0/24
89.200.240.0/23
91.198.23.0/24
91.214.188.0/22
91.216.138.0/24
91.223.183.0/24
91.227.33.0/24
91.229.228.0/24
91.238.148.0/23
92.114.109.0-92.114.110.255
93.114.84.0/24
93.114.182.0/24
93.115.36.0/24
93.119.193.0/24
93.180.208.0/22
94.176.150.0/24
94.177.6.0/23
94.177.23.0/24
176.126.198.0/23
176.126.204.0/24
188.208.108.0/24
188.208.116.0/24
188.210.254.0/24
188.211.234.0/24
188.213.128.0/22
188.214.81.0/24
188.214.89.0/24
188.215.76.0/23
188.240.4.0/22
188.241.59.0/24
188.241.192.0/24
193.36.44.0/24
193.37.136.0/24
193.39.119.0/24
193.93.40.0/22
193.105.176.0/24
193.108.52.0/22
193.138.97.0/24
193.169.8.0/23
193.192.44.0/23
193.239.172.0/23
194.8.81.0/24
194.42.100.0/23
194.106.204.0/23
194.140.235.0/24
194.246.106.0/23
195.2.196.0/23
195.34.80.0/23
195.42.232.0/22
195.93.140.0/23
195.135.192.0/23
195.189.176.0/24
195.189.186.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
Signature Algorithm: sha256WithRSAEncryption
94:5f:86:5d:a4:dc:ee:e4:0f:d8:0b:72:f2:21:c8:65:f9:2d:
76:b8:ed:10:dc:39:68:d8:55:58:46:a0:20:7d:b3:30:58:39:
31:22:61:7d:58:b6:d2:10:19:dd:1a:a3:9c:be:d2:bd:a4:09:
59:12:1f:dc:94:9f:08:96:67:80:aa:95:ac:21:7c:ec:5e:81:
59:f8:f8:fa:67:cf:92:a0:26:8a:fe:68:60:6c:e4:ac:eb:f6:
9e:5d:df:f7:d6:93:16:59:1c:0e:e6:b5:30:04:d2:e0:74:87:
ce:d2:ff:13:a8:ae:2c:c2:0b:c8:9f:d8:d9:f2:64:50:8c:39:
b9:72:fe:ed:37:9a:8f:78:9e:06:27:78:e4:0e:be:06:86:6d:
9e:85:3b:2d:0c:49:17:b2:ee:08:0d:6f:51:06:34:97:04:93:
d8:48:7c:2c:fb:51:0f:00:05:1e:11:ed:3a:05:aa:ae:c8:b7:
14:41:08:2c:16:bd:07:32:63:a1:ed:39:33:e7:78:35:6c:c2:
a6:cd:0d:d9:9b:5f:23:54:7d:a1:9e:65:f2:2f:d1:c1:23:1e:
af:b9:62:27:4f:19:42:8f:96:9f:19:9d:cf:e3:89:96:b1:dd:
d0:9e:9a:96:0f:6f:6a:77:4e:94:fd:4a:56:bc:5b:c2:61:2e:
dc:7e:c8:da
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgISAYq2YQ/scsgHW5GyOx8e/rG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWYzMmQwY2ZhN2E4NmQzMGU3ZTExYTczZWJiZDBiMjRk
YmY0MWYwHhcNMjMwOTIxMDYxNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjFmMTQ3YzNmNmFiOTllZGYxMzNlMGZjMjQ1ZjVhMzk0NDQyNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiUFWTkb/fXxKO2x4wJoX+LsMRKB
jcPp9xDnvDrvPjG0t3Vlb2vc7mitiqFHLfagPQvscYHl3JXfxOiCjlIsIGEZaaNW
1Z02WJZwPFsqAkMU4DmQbJTML1QwU24pvJpBIcirbtyR7GwsI7Fx2ugqhIckXb55
YTzM35/b3Ujw4cImzEuX9usQ17AWhoZahkxi5OttAlx1yQndCBIu5dliNusdZPYW
EMmW/19chP1nIfWBIBcxperc5ik2IGaqb/Q81Pu2IMz0wRAOdWK3sTWvV23YldkF
y42/ay2qzHEGQItMpV2hUFQHvNGFqgDIu22eVyH/Kouop5X2mLxwXFQg8QIDAQAB
o4ID+zCCA/cwHQYDVR0OBBYEFM8fFHw/arme3xM+D8JF9aOURCS2MB8GA1UdIwQY
MBaAFD4fMtDPp6htMOfhGnPrvQsk2/QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUt
NjA2OGMwNGQxYmUwLzEveng4VWZEOXF1WjdmRXo0UHdrWDFvNVJFSkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUtNjA2OGMwNGQxYmUw
LzEvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICDwYIKwYBBQUHAQcBAf8EggH+MIIB+jCCAfYEAgABMIIB
7gMEAi0OTAMEAC5maQMEAS5mdgMEAU3f1gMEAU+LUAMEAFXMGgMEAFXM8wMEAFXM
9wMEAFXM+gMEAFXM/QMEAlZoSAMEAFZp8QMEAFZqbAMEAFZrNQMEAFkgfQMEAVkg
ggMEAFkkxwMEAFklOgMEAFkmhgMEAFknWwMEAFkoKQMEAVkopAMEAVkqNAMEAFkv
KwMEAlkvMAMEAFkvXgMEAVnI8AMEAFvGFwMEAlvWvAMEAFvYigMEAFvftwMEAFvj
IQMEAFvl5AMEAVvulDAMAwQAXHJtAwQAXHJuAwQAXXJUAwQAXXK2AwQAXXMkAwQA
XXfBAwQCXbTQAwQAXrCWAwQBXrEGAwQAXrEXAwQBsH7GAwQAsH7MAwQAvNBsAwQA
vNB0AwQAvNL+AwQAvNPqAwQCvNWAAwQAvNZRAwQAvNZZAwQBvNdMAwQCvPAEAwQA
vPE7AwQAvPHAAwQAwSQsAwQAwSWIAwQAwSd3AwQCwV0oAwQAwWmwAwQCwWw0AwQA
wYphAwQBwakIAwQBwcAsAwQBwe+sAwQAwghRAwQBwipkAwQBwmrMAwQAwozrAwQB
wvZqAwQBwwLEAwQBwyJQAwQCwyroAwQBw12MAwQBw4fAAwQAw72wAwQBw726AwQB
w736AwQBw9IsAwQBw/6MMA0GCSqGSIb3DQEBCwUAA4IBAQCUX4ZdpNzu5A/YC3Ly
Ichl+S12uO0Q3Dlo2FVYRqAgfbMwWDkxImF9WLbSEBndGqOcvtK9pAlZEh/clJ8I
lmeAqpWsIXzsXoFZ+Pj6Z8+SoCaK/mhgbOSs6/aeXd/31pMWWRwO5rUwBNLgdIfO
0v8TqK4swgvIn9jZ8mRQjDm5cv7tN5qPeJ4GJ3jkDr4Ghm2ehTstDEkXsu4IDW9R
BjSXBJPYSHws+1EPAAUeEe06BaquyLcUQQgsFr0HMmOh7Tkz53g1bMKmzQ3Zm18j
VH2hnmXyL9HBIx6vuWInTxlCj5afGZ3P44mWsd3QnpqWD29qd06U/UpWvFvCYS7c
fsja
-----END CERTIFICATE-----
Generated at Sun May 11 19:25:26 2025 by rpki-client