Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/JElIcOkDhIb5c2W_nQ-FoPnhPug.roa
File: JElIcOkDhIb5c2W_nQ-FoPnhPug.roa (raw, json)
Hash identifier: b1KlD44TbUaQWj/WgMfaexGt0A0syY3tHrkEIzRunJY=
Subject key identifier: 24:49:48:70:E9:03:84:86:F9:73:65:BF:9D:0F:85:A0:F9:E1:3E:E8
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01942521E39D329C6AC9F78147696D7DFCA1
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/JElIcOkDhIb5c2W_nQ-FoPnhPug.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61098
IP address blocks: 85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
89.145.160.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
89.145.166.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
92.39.56.0/22 maxlen: 24
92.39.60.0/22 maxlen: 24
138.124.208.0/22 maxlen: 24
138.124.212.0/22 maxlen: 24
138.124.216.0/23 maxlen: 24
159.100.240.0/22 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.248.0/21 maxlen: 24
185.19.28.0/22 maxlen: 24
185.150.8.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.176.0/22 maxlen: 24
194.182.180.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
2a04:c41::/32 maxlen: 48
2a04:c42::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c45::/32 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e3:9d:32:9c:6a:c9:f7:81:47:69:6d:7d:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24494870e9038486f97365bf9d0f85a0f9e13ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:cd:7d:48:88:c9:9c:c7:26:8e:34:aa:6c:
81:5f:5f:fe:fb:d3:45:58:0a:5f:97:5e:0e:40:c9:
2f:4a:ed:9c:14:f7:13:fb:d5:88:99:44:a7:7f:6a:
2c:2f:5f:cd:5f:58:eb:e5:fc:d3:b9:c6:ab:04:76:
33:d4:ff:d0:3c:7f:fd:bc:49:d0:04:62:e6:f6:2a:
bc:9c:b1:91:80:cf:18:31:63:31:22:78:54:a6:b0:
cc:df:22:5f:03:8b:1f:d6:35:8f:21:c3:a9:e5:ef:
c0:ea:d0:44:65:23:59:8e:40:fa:f5:7a:26:94:c2:
ab:2e:7e:45:29:fd:66:31:96:a2:58:19:f5:99:22:
51:08:64:0b:6b:95:d3:d4:68:54:5d:ce:07:fd:8e:
91:dd:51:98:61:97:78:66:31:fc:f8:fd:40:e7:0c:
10:49:79:5c:9b:cd:3d:95:ad:4f:51:60:e6:94:5e:
47:08:50:7b:14:00:c1:9c:d4:f2:b4:7b:20:53:04:
7a:6c:a5:4f:7e:cd:ec:ba:8c:23:af:35:f4:93:cb:
aa:df:66:7a:83:1a:73:d8:9b:96:b1:c5:c0:c9:5f:
d0:57:44:6d:b6:5e:1a:d8:a2:f1:4f:e8:26:a5:ea:
97:f3:61:4e:66:b0:20:81:61:d0:c7:ce:a0:6c:68:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:48:70:E9:03:84:86:F9:73:65:BF:9D:0F:85:A0:F9:E1:3E:E8
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/JElIcOkDhIb5c2W_nQ-FoPnhPug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
92.39.56.0/21
138.124.208.0-138.124.217.255
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc0:70::/47
2a07:6cc1::-2a07:6cc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:60:85:5f:f5:76:49:87:40:55:04:39:f8:ff:bc:f3:19:aa:
c6:ee:5a:c6:ef:71:5c:19:2c:8b:3e:d5:b5:d8:17:dd:af:db:
75:cb:7b:9a:52:6e:ca:07:64:77:b6:e4:ce:06:b7:90:a4:99:
b0:4b:60:c6:e4:83:f0:a7:fa:14:a9:a8:86:67:ba:30:ed:24:
ba:af:56:5e:cd:ad:67:14:98:f4:ee:c3:81:2a:1e:28:3c:17:
78:d0:60:c3:ae:2d:7d:e7:83:89:aa:22:a1:4a:01:02:a4:b2:
77:0d:3c:99:2e:0c:32:c9:02:e6:be:37:64:4f:74:88:dc:c4:
72:64:18:5e:1b:b3:9c:01:45:0f:d5:22:b5:8e:b5:45:8e:55:
d2:1e:09:2c:fe:11:74:bb:2d:73:40:17:70:05:9c:53:c4:4c:
62:fc:83:1c:f3:ee:37:f7:0f:58:87:9f:cb:d8:5a:9a:c9:43:
5f:46:b9:67:86:7d:56:88:4f:96:d5:0d:19:cd:5d:9f:54:d2:
98:64:47:fe:71:e3:5f:06:c9:fe:3b:4e:48:eb:01:9d:e2:33:
72:0e:c7:0e:76:e4:67:11:2d:6f:38:ac:92:61:99:42:08:f2:
a5:95:99:1b:16:d2:7a:61:b2:b0:08:ba:af:a8:11:01:4d:19:
d7:e3:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:10 2025 by rpki-client