Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J-cnqcqwWeWzTjqre3xxSQ9c0AA.roa
File: J-cnqcqwWeWzTjqre3xxSQ9c0AA.roa (raw, json)
Hash identifier: b6bGLIOr4nBmiiRJzOCU6LwgHBDYVG1GUqPXU9eGRp4=
Subject key identifier: 27:E7:27:A9:CA:B0:59:E5:B3:4E:3A:AB:7B:7C:71:49:0F:5C:D0:00
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0194AC0A0A57B7C9F658EAE93B3664E1EFD4
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J-cnqcqwWeWzTjqre3xxSQ9c0AA.roa
Signing time: Tue 28 Jan 2025 08:32:06 +0000
ROA not before: Tue 28 Jan 2025 08:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:0a:0a:57:b7:c9:f6:58:ea:e9:3b:36:64:e1:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 28 08:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e727a9cab059e5b34e3aab7b7c71490f5cd000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:05:0d:4b:13:2f:0a:cf:82:f3:09:3b:23:
29:63:00:15:b7:4f:10:28:b5:66:e6:0d:d2:80:02:
12:b6:04:1a:f4:8b:c0:d2:6c:93:d4:7f:db:9a:20:
a1:98:ef:34:e2:84:eb:38:4d:4d:38:0b:ff:72:b3:
c3:72:81:b7:af:10:49:3e:b4:6d:a8:81:ef:3e:84:
25:27:40:54:16:9a:a7:bb:cb:0d:aa:4b:ad:f2:29:
3e:66:3d:87:1e:95:ea:72:9b:64:20:dc:c3:5c:0f:
08:a7:40:11:d0:a8:e6:43:f6:2b:72:29:83:cb:7b:
bb:24:03:94:5f:bf:ad:2b:78:cf:e8:30:a2:d6:4f:
79:c3:51:56:37:e2:06:d4:3f:2e:b3:3f:17:18:c2:
bc:fe:29:97:ae:54:c8:9f:a2:5e:1a:b0:64:12:73:
03:96:ab:cc:bc:1d:d8:12:f4:81:6f:d3:f1:d2:da:
2e:3f:ba:7e:ff:0b:bf:9f:9d:01:18:d8:9e:3f:15:
25:de:5f:c9:74:d1:05:2d:ce:1f:11:96:81:21:64:
2c:e0:48:8b:8b:02:83:05:e9:59:22:cc:82:60:64:
20:b2:f6:a6:46:c1:9d:3b:34:f1:94:42:89:99:4e:
13:68:b5:0e:78:30:c4:fd:ef:9b:42:42:62:80:ca:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:27:A9:CA:B0:59:E5:B3:4E:3A:AB:7B:7C:71:49:0F:5C:D0:00
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J-cnqcqwWeWzTjqre3xxSQ9c0AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0-62.169.133.255
62.169.135.0/24
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.235.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.48.0/22
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:06:99:bb:cc:ee:b6:31:6d:f5:ce:ba:25:ce:39:41:4a:07:
bb:f7:a8:c4:7c:73:81:17:f7:02:2d:f2:bf:db:1f:1d:49:5b:
7e:5a:86:85:4c:01:92:b0:6f:fc:b4:5d:3e:66:5d:06:1f:30:
07:1c:11:bc:e8:e1:1f:20:9b:f3:80:25:fe:89:42:07:8a:e4:
6c:9e:d5:fa:ab:ea:ca:42:25:61:f4:6f:6d:a7:cf:99:f4:33:
52:47:9e:a1:e4:58:46:b7:28:fc:04:20:c3:1a:89:ca:18:20:
d6:31:1b:2f:28:c2:d3:cf:88:8a:fe:3c:d3:8e:69:e9:ad:ef:
69:4d:e5:08:c7:cc:7d:66:19:b3:8a:6d:4d:f1:ac:c8:48:22:
5c:40:b0:65:36:ef:d1:10:a8:b0:67:c5:85:a2:df:10:24:c5:
85:55:3e:9a:e2:e5:cf:ed:a9:6d:27:00:f0:dc:95:80:78:08:
5c:27:28:f0:da:f1:8d:4d:ab:9b:97:61:cc:55:9c:99:f9:a6:
5d:db:64:d5:11:4a:69:e5:c9:91:9e:cb:73:10:1d:40:d1:83:
8c:5c:1d:51:52:9b:36:da:b5:2c:dd:20:6f:59:9d:1d:fd:d5:
b8:b7:3f:d7:a6:10:b6:62:f7:78:95:09:1c:84:a6:f9:8b:7b:
81:84:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:22 2025 by rpki-client