Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/LtJ_LtRSezQcIAEEGoKqG_m3JYg.roa
File: LtJ_LtRSezQcIAEEGoKqG_m3JYg.roa (raw, json)
Hash identifier: u5sfrMRw1iPxmO8/zQOOPqRHD6mVSiL8/ijDSEaY3UQ=
Subject key identifier: 2E:D2:7F:2E:D4:52:7B:34:1C:20:01:04:1A:82:AA:1B:F9:B7:25:88
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 01945F524E00FBCD828EB52FD5EF5A3137E8
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/LtJ_LtRSezQcIAEEGoKqG_m3JYg.roa
Signing time: Mon 13 Jan 2025 11:00:16 +0000
ROA not before: Mon 13 Jan 2025 11:00:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
212.98.31.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.237.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:52:4e:00:fb:cd:82:8e:b5:2f:d5:ef:5a:31:37:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 13 11:00:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ed27f2ed4527b341c2001041a82aa1bf9b72588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:e1:2a:d7:19:cc:41:4c:d5:92:23:a0:18:
56:04:47:3b:35:95:fc:16:83:f5:00:e3:d6:cc:40:
2c:72:6b:be:d6:c2:ae:65:64:c7:1e:6c:0d:26:f6:
2b:f2:83:fe:5e:03:4d:1c:48:c4:32:ac:dd:80:99:
89:a0:2e:0a:14:39:95:f3:6d:5a:23:06:03:f2:a3:
ea:cf:32:01:69:b2:3c:1c:31:41:d5:7a:c7:33:04:
62:a8:aa:a7:87:b7:72:e2:c1:0d:59:54:fd:ef:27:
22:11:89:93:4a:f2:ca:9b:4a:79:c1:94:91:d0:88:
80:41:2a:71:1d:69:53:67:ee:81:a2:fe:f0:3d:cb:
9e:1f:7a:94:20:10:2b:4e:0b:ee:2a:34:11:d7:94:
5d:fb:3a:ac:ca:58:4b:49:a7:ac:ae:1a:40:1b:0e:
c4:79:7b:f1:89:58:69:a1:b1:48:9e:11:05:d4:8f:
17:66:87:c7:ef:08:a8:af:6b:e0:05:23:ab:21:6f:
85:d0:f7:e0:38:46:ae:3c:69:42:26:60:29:14:75:
d1:97:13:c2:71:93:2f:88:e2:fe:70:c3:4b:84:7e:
49:85:fc:0d:33:24:ce:c0:c2:a7:de:fc:11:02:38:
d8:18:d4:65:a7:fd:d8:0c:8c:49:66:9f:f4:43:c3:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:7F:2E:D4:52:7B:34:1C:20:01:04:1A:82:AA:1B:F9:B7:25:88
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/LtJ_LtRSezQcIAEEGoKqG_m3JYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
6a:a1:67:ca:e0:08:6b:26:91:11:06:08:6c:b9:78:52:b9:63:
6c:b0:64:24:86:15:8d:13:57:0c:00:15:2d:34:63:9e:ff:01:
86:41:c8:8a:3f:ea:59:d7:a6:74:9b:19:52:5b:f2:9d:c1:6e:
73:13:05:5e:24:cc:b6:fe:76:64:e6:37:64:e3:17:fa:32:ee:
c6:4c:dc:c3:57:2b:3f:9b:3b:5f:2c:21:4e:35:bb:d4:a2:6d:
4f:7c:c5:84:b5:72:cf:4f:09:b1:8e:8a:37:cc:52:00:5b:96:
69:9e:24:97:dd:fc:21:c1:cf:fa:6b:70:10:c7:e3:af:4e:46:
fd:03:78:28:a7:54:ea:a8:34:f6:6e:e6:e6:a7:34:a1:4a:0e:
cd:95:85:ea:2c:13:5e:db:b5:19:66:69:4f:34:eb:cd:43:f2:
46:4b:b7:c8:55:c0:73:b2:7a:59:65:f1:a1:30:c7:15:1b:c8:
64:b4:0e:2f:c1:ed:14:a6:cc:6f:3f:31:7b:b3:7a:54:46:b9:
81:85:85:03:75:d4:b8:ab:ea:64:46:28:c6:17:56:3e:cf:01:
91:8b:19:6e:6c:2b:8f:92:0f:2e:e7:20:b6:2f:9a:d6:38:83:
05:ef:15:07:2b:40:03:cf:68:4b:e9:5a:91:9e:73:cc:22:82:
fb:64:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:33:14 2025 by rpki-client