Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/jo0pN7D076eE90Y6hGT5weAHqLQ.roa
File: jo0pN7D076eE90Y6hGT5weAHqLQ.roa (raw, json)
Hash identifier: KMiwPalgkHI/+/RR9/xP5iHrAbZER5Tb1rvcJCwj8DA=
Subject key identifier: 8E:8D:29:37:B0:F4:EF:A7:84:F7:46:3A:84:64:F9:C1:E0:07:A8:B4
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0194B93E2A13585565CC31AD94CCD2C83D6F
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/jo0pN7D076eE90Y6hGT5weAHqLQ.roa
Signing time: Thu 30 Jan 2025 22:04:06 +0000
ROA not before: Thu 30 Jan 2025 22:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.111.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.10.248.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.83.132.0/22 maxlen: 24
185.85.255.0/24 maxlen: 24
185.103.148.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
185.243.136.0/22 maxlen: 24
193.108.230.0/23 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:3e:2a:13:58:55:65:cc:31:ad:94:cc:d2:c8:3d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 30 22:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8d2937b0f4efa784f7463a8464f9c1e007a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ac:77:0c:e6:86:5f:2c:ce:3c:03:04:79:ed:
56:db:9b:e2:53:e9:3a:70:64:63:60:f8:6e:b3:cc:
d9:42:6c:5f:0c:f0:ae:6c:9d:af:ab:64:02:89:f9:
bf:62:28:ce:b7:d7:80:de:61:9a:7e:89:1d:43:df:
57:11:10:aa:64:8f:7a:19:d0:49:ed:b1:43:e4:05:
80:c1:63:68:ff:cb:89:61:3d:d1:e9:70:d9:55:bd:
45:05:eb:4f:56:7b:11:63:5c:08:2d:f3:4c:35:5e:
e5:49:e7:2e:72:d3:fd:3a:69:4b:e9:d1:e4:d2:b7:
55:0f:fc:c6:19:53:27:4b:dc:ae:7c:e9:f1:52:a1:
43:0e:68:a0:a2:6a:9d:04:02:2a:10:57:2d:59:9f:
12:41:69:b1:7a:ee:ec:5b:d2:96:66:c9:0e:cc:69:
7f:32:34:a5:58:e0:1a:9e:e7:a5:5b:14:b2:93:c5:
db:7f:1b:60:1c:94:57:94:8f:96:82:76:13:8b:12:
d6:4b:28:97:80:49:cb:b3:f9:ef:a4:6e:56:2c:4b:
4c:28:73:a9:d0:0e:a8:81:a7:a3:f0:7a:d3:53:ec:
da:e4:82:0c:8a:30:0b:a4:53:ae:e2:09:7c:85:d2:
68:15:32:46:da:e3:7a:21:08:81:f8:c4:3b:aa:d2:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:29:37:B0:F4:EF:A7:84:F7:46:3A:84:64:F9:C1:E0:07:A8:B4
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/jo0pN7D076eE90Y6hGT5weAHqLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
31.25.176.0/21
37.122.219.0/24
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.70.152.0/22
185.83.132.0/22
185.85.255.0/24
185.103.148.0/22
185.153.16.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
185.243.136.0/22
193.108.230.0/23
193.246.154.0-193.246.157.255
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
a4:e6:39:66:c0:ec:5e:28:9e:2d:5e:21:da:84:25:f7:9e:da:
12:3d:da:72:9a:df:67:fa:07:5e:f1:f7:33:f8:98:a9:2b:56:
26:c5:d8:a0:56:d9:c9:e9:a9:d0:39:0c:f2:a8:fe:cc:28:d0:
4a:9c:5e:6f:2d:3f:1e:de:e2:7b:24:50:90:cb:70:ba:d2:c5:
c8:71:c0:a2:f2:8a:8d:3d:73:27:2a:06:3f:9b:a6:04:dd:36:
67:a7:3e:96:52:31:b6:09:4a:35:ad:06:8d:c3:c2:64:2a:df:
30:15:a3:d0:ea:c5:0f:6d:aa:bf:d4:aa:cd:a9:f2:b5:5a:69:
d3:72:2e:87:55:04:95:f3:e7:32:b2:a9:dc:f5:56:8d:5d:69:
d9:1a:9d:aa:a8:ce:19:c5:96:df:43:53:f2:ce:a0:ca:6b:46:
fd:27:c6:56:50:99:59:bd:dd:f1:eb:31:6f:7e:a1:e0:5f:91:
9e:32:94:ff:b7:6e:05:04:9b:0b:f2:1c:3c:1f:07:44:3d:f0:
9f:17:b1:54:62:e8:7a:4a:7f:5d:6d:f3:9f:6c:60:60:66:0a:
b5:2e:8a:ee:b4:9d:16:8e:e8:b7:49:c7:2f:5c:51:03:3a:8f:
41:66:50:4f:03:70:9e:f8:be:69:ac:b0:3f:d1:22:7e:c3:4c:
cc:85:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:30:44 2025 by rpki-client