Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/LsPOYMRIkwCviikK1SggYlQsE6c.roa
File: LsPOYMRIkwCviikK1SggYlQsE6c.roa (raw, json)
Hash identifier: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=
Subject key identifier: 2E:C3:CE:60:C4:48:93:00:AF:8A:29:0A:D5:28:20:62:54:2C:13:A7
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 01942369B0F6A338D31A671E5D9740217604
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/LsPOYMRIkwCviikK1SggYlQsE6c.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8393
IP address blocks: 91.203.20.0/24 maxlen: 24
91.203.21.0/24 maxlen: 24
91.203.22.0/24 maxlen: 24
149.154.190.0/23 maxlen: 23
185.217.16.0/24 maxlen: 24
185.217.17.0/24 maxlen: 24
185.217.18.0/24 maxlen: 24
185.217.19.0/24 maxlen: 24
193.193.224.0/24 maxlen: 24
193.193.225.0/24 maxlen: 24
193.193.226.0/24 maxlen: 24
193.193.227.0/24 maxlen: 24
193.193.228.0/24 maxlen: 24
193.193.229.0/24 maxlen: 24
193.193.230.0/24 maxlen: 24
193.193.231.0/24 maxlen: 24
193.193.232.0/24 maxlen: 24
193.193.233.0/24 maxlen: 24
193.193.234.0/24 maxlen: 24
193.193.235.0/24 maxlen: 24
193.193.236.0/24 maxlen: 24
193.193.237.0/24 maxlen: 24
193.193.238.0/24 maxlen: 24
193.193.239.0/24 maxlen: 24
193.193.240.0/24 maxlen: 24
193.193.241.0/24 maxlen: 24
193.193.242.0/24 maxlen: 24
193.193.243.0/24 maxlen: 24
193.193.244.0/24 maxlen: 24
193.193.245.0/24 maxlen: 24
193.193.246.0/24 maxlen: 24
193.193.247.0/24 maxlen: 24
193.193.248.0/24 maxlen: 24
193.193.249.0/24 maxlen: 24
193.193.250.0/24 maxlen: 24
193.193.251.0/24 maxlen: 24
193.193.252.0/23 maxlen: 23
193.193.254.0/24 maxlen: 24
193.193.255.0/24 maxlen: 24
213.157.32.0/24 maxlen: 24
213.157.33.0/24 maxlen: 24
213.157.34.0/24 maxlen: 24
213.157.35.0/24 maxlen: 24
213.157.36.0/24 maxlen: 24
213.157.37.0/24 maxlen: 24
213.157.38.0/24 maxlen: 24
213.157.39.0/24 maxlen: 24
213.157.40.0/24 maxlen: 24
213.157.41.0/24 maxlen: 24
213.157.42.0/24 maxlen: 24
213.157.43.0/24 maxlen: 24
213.157.44.0/24 maxlen: 24
213.157.45.0/24 maxlen: 24
213.157.46.0/24 maxlen: 24
213.157.47.0/24 maxlen: 24
213.157.48.0/24 maxlen: 24
213.157.49.0/24 maxlen: 24
213.157.50.0/24 maxlen: 24
213.157.51.0/24 maxlen: 24
213.157.52.0/24 maxlen: 24
213.157.53.0/24 maxlen: 24
213.157.54.0/23 maxlen: 23
213.157.56.0/24 maxlen: 24
213.157.57.0/24 maxlen: 24
213.157.58.0/23 maxlen: 23
213.157.60.0/24 maxlen: 24
213.157.61.0/24 maxlen: 24
213.157.62.0/24 maxlen: 24
213.157.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b0:f6:a3:38:d3:1a:67:1e:5d:97:40:21:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ec3ce60c4489300af8a290ad5282062542c13a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:a1:7c:52:26:5f:d0:bd:b1:d8:fe:f0:ca:
0d:d1:ee:a5:84:3e:18:75:31:2a:cc:df:f1:28:bb:
73:20:66:67:5f:b0:66:94:be:53:ad:43:6f:f5:19:
07:38:3e:ac:08:c0:0a:5a:02:4c:40:b5:59:9e:3b:
95:9b:33:7f:0b:d5:ee:da:63:7a:bc:64:88:65:13:
c1:20:d0:de:08:0a:c8:4c:2e:ca:a0:34:5d:20:a5:
08:d9:d4:44:2f:f5:57:a8:03:0d:e3:67:1c:26:4b:
d8:1d:06:2a:24:d5:29:11:26:da:3d:e6:68:fa:f0:
e7:54:68:4a:b8:37:de:16:66:f7:81:57:64:64:6f:
87:11:e1:d3:1d:10:72:9f:31:16:ef:7a:ab:6e:6e:
0a:3c:51:f5:d5:fb:8d:99:d2:e9:3a:15:fc:74:0b:
75:6b:6c:5f:d1:cb:4c:8b:0e:3a:ae:ed:da:da:18:
4d:f3:c5:07:12:d1:6c:44:30:1a:a4:b9:4e:2b:87:
0d:0b:1b:02:5e:ca:7d:2d:42:f8:56:90:6b:8c:f5:
80:e4:28:85:05:94:c7:53:5e:52:b3:b8:77:45:c9:
04:a6:68:4a:2b:ad:28:5d:48:00:a3:51:24:a5:4c:
10:90:19:47:aa:a5:c8:6a:04:77:2f:94:07:3c:50:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:CE:60:C4:48:93:00:AF:8A:29:0A:D5:28:20:62:54:2C:13:A7
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/LsPOYMRIkwCviikK1SggYlQsE6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.20.0-91.203.22.255
149.154.190.0/23
185.217.16.0/22
193.193.224.0/19
213.157.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:3f:65:9c:83:ae:a3:d2:9e:06:76:03:6c:5e:06:15:2f:4d:
81:92:9d:0e:83:b2:c7:6a:8a:bc:d6:fb:36:59:d0:2a:9e:e3:
e2:b6:03:d0:6a:48:66:18:00:b6:37:5a:6c:26:a0:67:ca:2d:
68:c1:42:ed:10:68:96:07:7e:1c:c3:31:39:dc:82:23:5c:4c:
d6:0c:a5:06:53:79:a6:b8:ce:7f:d7:36:fe:c8:7a:e5:5b:21:
b7:5d:8b:81:bd:f3:aa:3f:a1:a1:70:9a:a6:01:14:94:af:30:
cb:7d:f4:bf:38:85:e3:be:69:d8:51:11:5b:6f:1d:cf:f7:b7:
23:81:4f:a3:10:54:08:b2:2c:46:3e:4f:0e:4f:26:f4:f0:a8:
81:ba:96:a7:b0:5b:e8:01:be:3f:a4:9e:41:fc:09:84:cc:ad:
25:b5:8c:04:59:00:b4:90:aa:ef:48:3a:2a:4a:02:6a:0e:74:
86:f3:87:41:87:23:ea:1d:0a:1b:a7:bf:fe:32:b9:0f:26:6f:
81:4f:fe:7e:95:b5:e6:64:6f:b0:ed:4e:0d:63:a0:cd:22:cf:
21:13:0a:45:cb:b1:e8:64:78:30:af:aa:6d:78:b5:42:8e:ca:
40:fb:d0:ad:4a:35:47:45:13:6e:97:b5:6b:e4:57:ae:fc:f3:
e3:04:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:50 2025 by rpki-client