Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SuLWc6-0OTyAcnHK3Ib3bZE2-5Y.roa
File: SuLWc6-0OTyAcnHK3Ib3bZE2-5Y.roa (raw, json)
Hash identifier: /lVp/BQd2mL+/QU6GAKeyL+nnOBkjfsn5QTxGPaGm3Q=
Subject key identifier: 4A:E2:D6:73:AF:B4:39:3C:80:72:71:CA:DC:86:F7:6D:91:36:FB:96
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748419C64C979156F96A6C14C50A537
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SuLWc6-0OTyAcnHK3Ib3bZE2-5Y.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
45.81.127.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.145.132.0/22 maxlen: 22
45.145.132.0/23 maxlen: 23
45.145.132.0/24 maxlen: 24
45.145.133.0/24 maxlen: 24
45.145.134.0/23 maxlen: 23
45.145.134.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:41:9c:64:c9:79:15:6f:96:a6:c1:4c:50:a5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ae2d673afb4393c807271cadc86f76d9136fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:99:19:43:40:d7:4a:1b:f3:d4:c3:e9:e8:
a0:8d:8d:a8:e1:db:a0:6d:1a:02:e8:3f:c6:17:6b:
d3:74:ce:46:57:72:c2:21:e8:fc:ce:0b:41:df:48:
48:53:22:0b:1c:42:ef:69:6a:ee:cf:49:62:8c:2b:
a6:26:00:b6:c8:32:79:f9:5f:06:2a:61:a3:8b:16:
e3:23:a6:6d:dd:45:a0:35:f9:4d:3e:9b:70:fe:8e:
d2:a8:dd:29:8b:7c:04:fd:ec:32:e6:ed:b3:a1:cb:
1c:7b:2e:02:f5:88:4b:7f:e1:2b:2b:50:b4:23:00:
38:e8:38:21:c5:26:b9:33:43:db:82:5e:07:84:89:
b6:99:7a:98:a2:40:8d:3d:c1:77:43:8f:c6:67:02:
44:93:81:00:da:18:33:0b:5a:c2:60:60:e5:6e:f4:
2b:fe:c6:44:78:c7:da:6e:90:09:6a:ed:71:54:d9:
55:82:e6:a0:57:de:25:c2:db:5e:38:9e:b1:f7:24:
8d:eb:77:fc:a2:a1:8a:82:79:28:04:b8:70:69:db:
28:86:ae:72:bc:9f:36:48:27:54:aa:a3:e9:28:f5:
73:f9:48:5f:4b:53:26:20:9b:28:91:4f:9c:e5:63:
9f:d5:01:47:a4:9f:e3:15:91:e3:be:0d:77:33:d1:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:D6:73:AF:B4:39:3C:80:72:71:CA:DC:86:F7:6D:91:36:FB:96
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SuLWc6-0OTyAcnHK3Ib3bZE2-5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:6e:d3:4b:42:e8:ff:ee:04:01:ae:5c:44:18:0e:af:98:79:
43:72:3d:c5:0b:4b:45:9a:5b:59:cf:3a:d9:53:ef:2e:d0:69:
8c:dc:0a:ef:f0:b0:2b:ec:40:db:65:4d:5a:7d:d5:0c:d6:49:
c9:85:54:0f:45:0e:5b:1c:5a:e6:73:84:45:b6:fd:69:79:f8:
24:6b:4a:e0:30:e9:96:01:99:e2:f9:77:5b:87:ec:41:ca:85:
9d:9e:dd:53:72:37:31:98:37:2c:ed:7a:90:df:c1:25:c1:75:
44:7e:1b:76:4d:03:63:4a:c7:2f:18:53:f9:be:70:14:8e:c4:
ab:ce:d3:c3:86:02:76:a3:b6:75:f3:e5:2c:7a:73:5e:e5:a5:
48:ac:97:08:ae:18:4e:c3:19:a4:aa:c8:28:28:85:2f:10:19:
69:3e:3d:ee:6a:f4:52:ca:44:93:29:97:59:ab:9b:6e:84:ef:
d9:49:0e:42:ee:84:69:fd:60:fe:4d:24:46:90:7d:ca:ee:7a:
1c:67:00:2e:ff:38:b1:83:66:08:4e:be:79:1d:c6:a4:2e:61:
91:db:bf:ce:0f:98:c4:b2:64:10:3f:5e:05:d8:fd:b1:72:eb:
4f:d1:7c:ba:84:d9:7c:ea:39:89:71:1e:7a:d0:3d:6b:b6:25:
7b:e3:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:43:46 2025 by rpki-client