Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa
File: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (raw, json)
Hash identifier: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=
Subject key identifier: BE:4C:90:F6:C4:53:EA:05:70:BF:EF:EB:E4:7C:6C:FE:F9:A4:35:72
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0194214437F346A3ABC299CEC2A9CC2EA6F7
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61323
IP address blocks: 31.193.0.0/20 maxlen: 20
37.220.88.0/21 maxlen: 21
45.67.172.0/22 maxlen: 22
45.84.20.0/22 maxlen: 24
45.131.136.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
45.157.40.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
78.24.88.0/24 maxlen: 24
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.109.160.0/20 maxlen: 20
78.137.112.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
81.201.128.0/20 maxlen: 20
94.229.160.0/20 maxlen: 20
109.108.128.0/19 maxlen: 19
159.253.208.0/21 maxlen: 21
176.124.52.0/22 maxlen: 24
178.238.128.0/20 maxlen: 20
185.55.76.0/23 maxlen: 24
185.55.76.0/24 maxlen: 24
185.55.77.0/24 maxlen: 24
185.55.78.0/23 maxlen: 23
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
185.160.180.0/22 maxlen: 22
185.160.252.0/22 maxlen: 24
185.162.224.0/22 maxlen: 22
185.166.128.0/22 maxlen: 22
185.181.196.0/22 maxlen: 22
185.182.88.0/22 maxlen: 22
185.197.60.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
185.210.196.0/22 maxlen: 22
185.213.116.0/22 maxlen: 22
185.216.76.0/22 maxlen: 22
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.221.204.0/22 maxlen: 22
185.226.220.0/22 maxlen: 22
185.234.36.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a09:b600:5::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:37:f3:46:a3:ab:c2:99:ce:c2:a9:cc:2e:a6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4c90f6c453ea0570bfefebe47c6cfef9a43572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:6e:54:b3:8b:6d:4b:89:f1:0c:04:39:13:
ad:c4:8c:04:ab:5c:a6:08:0b:25:d8:9a:7d:7d:a4:
4c:45:96:1d:79:54:3a:46:95:af:52:03:5d:75:58:
1e:b9:c5:a5:8b:ea:50:eb:b1:da:ba:56:54:d8:0e:
08:3f:c3:12:3b:43:ab:3f:13:9f:e1:2a:f5:5f:78:
d7:55:73:3c:41:ae:69:c7:c6:75:06:3c:a7:cb:89:
df:2d:72:e7:c0:5e:3d:e8:88:79:2b:5a:70:d0:a7:
ce:5d:75:6c:01:b9:c9:c6:6c:29:9e:44:61:b1:5e:
18:9c:ea:e3:e7:3f:fa:34:3d:bf:e8:71:8a:49:f1:
90:cf:dd:e6:1a:48:07:0d:ed:f4:f6:8c:9c:ed:a0:
e6:ac:a6:61:84:2f:1e:ee:76:80:df:28:59:ac:78:
71:8c:f8:d5:36:a2:70:de:85:84:20:75:40:8f:14:
5d:57:2c:b1:7e:9e:7c:09:52:97:59:a2:fd:3c:dc:
44:2a:2c:44:d2:53:61:0f:bb:e3:70:73:98:58:15:
94:e3:2c:64:58:5d:b6:38:a7:2e:7c:34:ce:a5:dc:
23:f3:1a:84:35:68:76:97:e5:ea:cb:bd:a2:af:b0:
1c:7f:7f:1d:35:f0:70:be:f1:fb:da:24:a1:a5:21:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:90:F6:C4:53:EA:05:70:BF:EF:EB:E4:7C:6C:FE:F9:A4:35:72
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.67.172.0/22
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.213.116.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::/47
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
64:62:77:7c:46:6f:fd:53:8e:d2:b1:30:a9:4d:0f:ec:b3:41:
92:e8:82:75:3e:9b:44:ae:cd:2a:6e:70:67:dd:3c:30:8e:50:
10:eb:6c:43:ef:97:02:1f:ab:3b:84:11:89:5f:31:fe:61:3c:
6b:d1:dc:90:71:bb:ae:d1:3f:65:f7:af:2e:f8:b3:bd:74:1e:
03:bd:81:ce:b0:68:95:a5:0b:c4:49:d6:58:0c:44:ae:cc:79:
ad:69:a8:ac:2f:cc:0c:1e:c8:e4:38:e6:1f:59:ea:35:a7:66:
58:ac:f0:ca:35:4b:c3:a3:f7:87:ed:78:97:14:a5:60:63:3a:
a8:bc:12:b5:56:b7:dd:1b:69:ab:25:bc:a7:16:13:22:87:07:
96:3f:3f:7a:be:30:78:6c:f4:80:46:7f:1d:b6:f6:ba:4d:6d:
ef:76:67:24:23:28:12:9d:55:75:66:da:0c:8f:31:5b:11:85:
67:2a:b1:b8:53:1e:7f:8d:39:4f:63:be:bb:24:5d:45:41:c7:
2f:df:ff:b0:5e:15:1c:26:94:7f:7b:99:a0:c0:3c:2c:87:54:
33:cd:84:88:53:e5:70:1e:c9:51:0e:0e:2b:a6:d6:21:6f:f8:
60:c4:64:0c:08:20:73:93:1f:bb:5c:43:dd:55:46:08:09:6b:
91:5b:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:37 2025 by rpki-client