Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/uuDHR9HmkHLAk2mPixMGSC4VhiQ.roa
File: uuDHR9HmkHLAk2mPixMGSC4VhiQ.roa (raw, json)
Hash identifier: phZUXmZc8tYjh0YGllYM78ERPz6TnNhIvYtuZZy777A=
Subject key identifier: BA:E0:C7:47:D1:E6:90:72:C0:93:69:8F:8B:13:06:48:2E:15:86:24
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0194266C02B420B4F4E9D7EA4074F95BD1FB
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/uuDHR9HmkHLAk2mPixMGSC4VhiQ.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31148
IP address blocks: 46.219.0.0/16 maxlen: 24
78.159.32.0/19 maxlen: 24
81.95.176.0/20 maxlen: 24
89.252.0.0/18 maxlen: 24
89.252.35.101/32 maxlen: 32
89.252.35.102/32 maxlen: 32
89.252.40.97/32 maxlen: 32
89.252.40.98/32 maxlen: 32
89.252.40.101/32 maxlen: 32
89.252.40.102/32 maxlen: 32
94.76.64.0/18 maxlen: 24
94.76.104.33/32 maxlen: 32
94.76.104.34/32 maxlen: 32
94.76.104.37/32 maxlen: 32
94.76.104.38/32 maxlen: 32
94.76.104.52/32 maxlen: 32
94.76.104.53/32 maxlen: 32
94.76.104.56/32 maxlen: 32
94.76.104.57/32 maxlen: 32
94.76.104.117/32 maxlen: 32
94.76.104.118/32 maxlen: 32
94.76.104.121/32 maxlen: 32
94.76.104.122/32 maxlen: 32
94.76.104.185/32 maxlen: 32
94.76.104.186/32 maxlen: 32
94.76.104.193/32 maxlen: 32
94.76.104.194/32 maxlen: 32
94.76.104.197/32 maxlen: 32
94.76.104.198/32 maxlen: 32
94.76.104.209/32 maxlen: 32
94.76.104.210/32 maxlen: 32
94.76.104.245/32 maxlen: 32
94.76.104.246/32 maxlen: 32
94.76.105.5/32 maxlen: 32
94.76.105.6/32 maxlen: 32
94.76.105.13/32 maxlen: 32
94.76.105.14/32 maxlen: 32
94.76.105.25/32 maxlen: 32
94.76.105.26/32 maxlen: 32
94.76.105.73/32 maxlen: 32
94.76.105.74/32 maxlen: 32
94.76.105.77/32 maxlen: 32
94.76.105.78/32 maxlen: 32
94.76.105.105/32 maxlen: 32
94.76.105.106/32 maxlen: 32
94.76.105.109/32 maxlen: 32
94.76.105.110/32 maxlen: 32
94.76.105.217/32 maxlen: 32
94.76.105.218/32 maxlen: 32
94.76.106.41/32 maxlen: 32
94.76.106.42/32 maxlen: 32
94.76.106.113/32 maxlen: 32
94.76.106.114/32 maxlen: 32
94.76.106.117/32 maxlen: 32
94.76.106.118/32 maxlen: 32
109.251.0.0/16 maxlen: 24
109.251.252.65/32 maxlen: 32
109.251.252.66/32 maxlen: 32
109.251.252.141/32 maxlen: 32
109.251.252.142/32 maxlen: 32
109.251.252.145/32 maxlen: 32
109.251.252.146/32 maxlen: 32
109.251.252.149/32 maxlen: 32
109.251.252.150/32 maxlen: 32
109.251.255.1/32 maxlen: 32
109.251.255.2/32 maxlen: 32
109.251.255.5/32 maxlen: 32
109.251.255.6/32 maxlen: 32
109.251.255.9/32 maxlen: 32
109.251.255.10/32 maxlen: 32
109.251.255.13/32 maxlen: 32
109.251.255.14/32 maxlen: 32
109.251.255.17/32 maxlen: 32
109.251.255.18/32 maxlen: 32
109.251.255.29/32 maxlen: 32
109.251.255.30/32 maxlen: 32
109.251.255.33/32 maxlen: 32
109.251.255.34/32 maxlen: 32
109.251.255.37/32 maxlen: 32
109.251.255.38/32 maxlen: 32
109.251.255.41/32 maxlen: 32
109.251.255.42/32 maxlen: 32
109.251.255.73/32 maxlen: 32
109.251.255.74/32 maxlen: 32
109.251.255.81/32 maxlen: 32
109.251.255.82/32 maxlen: 32
109.251.255.85/32 maxlen: 32
109.251.255.86/32 maxlen: 32
109.251.255.113/32 maxlen: 32
109.251.255.114/32 maxlen: 32
109.251.255.117/32 maxlen: 32
109.251.255.118/32 maxlen: 32
109.251.255.125/32 maxlen: 32
109.251.255.126/32 maxlen: 32
109.251.255.133/32 maxlen: 32
109.251.255.134/32 maxlen: 32
109.251.255.137/32 maxlen: 32
109.251.255.138/32 maxlen: 32
109.251.255.153/32 maxlen: 32
109.251.255.154/32 maxlen: 32
109.251.255.173/32 maxlen: 32
109.251.255.174/32 maxlen: 32
109.251.255.177/32 maxlen: 32
109.251.255.178/32 maxlen: 32
109.251.255.181/32 maxlen: 32
109.251.255.182/32 maxlen: 32
109.251.255.185/32 maxlen: 32
109.251.255.186/32 maxlen: 32
185.124.168.0/22 maxlen: 24
188.231.128.0/17 maxlen: 24
193.24.25.0/24 maxlen: 24
193.24.25.14/32 maxlen: 32
193.24.25.73/32 maxlen: 32
193.24.25.85/32 maxlen: 32
193.24.25.86/32 maxlen: 32
193.24.25.93/32 maxlen: 32
193.24.25.129/32 maxlen: 32
193.24.25.201/32 maxlen: 32
193.24.25.202/32 maxlen: 32
193.24.25.205/32 maxlen: 32
193.24.25.206/32 maxlen: 32
193.24.25.209/32 maxlen: 32
212.22.192.0/19 maxlen: 24
2a00:1228::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:02:b4:20:b4:f4:e9:d7:ea:40:74:f9:5b:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bae0c747d1e69072c093698f8b1306482e158624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:50:61:51:d0:fe:10:ec:e7:ab:5b:63:e3:
e4:bf:3a:7e:64:fe:37:a2:78:2a:a1:37:d2:ca:fd:
96:e5:b9:4f:fc:74:bc:fa:37:4c:db:28:f7:2d:50:
95:13:e7:e5:a2:8f:bd:65:21:a2:23:7c:da:14:63:
2f:0f:65:cb:4d:a7:55:0a:3a:75:83:9c:83:a0:27:
e4:59:3d:57:a3:d5:fe:04:59:61:f0:13:e3:eb:43:
cb:5f:22:0e:6c:26:71:73:ca:58:72:fe:66:4f:49:
8e:8c:7b:b2:16:22:d6:13:d7:d6:bb:73:87:5d:e6:
43:45:ce:d0:f8:f9:32:5f:72:c7:6a:3e:5f:9d:33:
d3:21:11:96:93:14:57:26:a0:13:19:03:aa:6a:4b:
1e:52:7f:2b:8b:a7:af:fd:76:7b:ab:b9:85:7d:fb:
c3:87:53:3b:28:4a:a5:c5:f4:2e:8e:d5:05:62:ff:
54:be:57:00:d3:a4:cb:db:95:85:27:a3:aa:29:78:
06:b1:29:e5:dc:75:e0:7f:bf:f9:8f:dc:0b:69:28:
50:50:80:39:46:30:20:87:e9:7d:bd:65:87:15:da:
3e:b4:d9:c6:b7:00:38:d0:b8:3c:37:c5:25:10:d7:
8d:da:f6:25:4b:9f:8f:03:d5:e2:68:2f:9a:6c:11:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:C7:47:D1:E6:90:72:C0:93:69:8F:8B:13:06:48:2E:15:86:24
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/uuDHR9HmkHLAk2mPixMGSC4VhiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.219.0.0/16
78.159.32.0/19
81.95.176.0/20
89.252.0.0/18
94.76.64.0/18
109.251.0.0/16
185.124.168.0/22
188.231.128.0/17
193.24.25.0/24
212.22.192.0/19
IPv6:
2a00:1228::/32
Signature Algorithm: sha256WithRSAEncryption
5e:67:ee:dc:9a:3e:3f:04:04:a2:4c:cb:c1:c0:15:d6:2d:bd:
7a:d4:0b:1e:f9:5e:a1:33:11:72:82:57:6a:6f:a1:38:a3:3c:
7b:bb:24:ea:11:0a:70:24:91:3d:e0:ab:6d:fe:dc:23:48:37:
36:f9:5b:81:51:30:ef:1b:4d:85:cc:07:82:7e:5b:b9:20:37:
e4:f1:18:27:cd:07:32:8c:fe:a6:36:b7:c9:3f:10:69:5a:39:
63:09:e3:e2:90:86:b0:47:e9:e5:8d:98:84:c9:d4:6f:a0:31:
93:9b:20:46:73:0e:ae:57:1b:39:a9:53:d8:29:74:62:71:16:
7b:29:76:e0:3e:41:c7:2f:52:f6:d0:20:86:b0:0f:96:11:60:
44:b9:17:4d:30:3e:71:d1:81:0f:02:89:01:3f:c0:4d:3a:d3:
ae:0c:68:ae:c5:dd:32:16:65:1d:54:7c:83:86:e9:31:9a:38:
0a:0b:ad:42:48:94:de:f4:0e:ed:c2:85:a5:9a:47:ff:c1:9c:
d1:27:56:ad:e4:2e:dc:65:21:d8:10:28:22:31:b8:9a:36:ff:
46:12:92:d2:cb:d6:e1:51:6f:9d:ba:df:1c:91:02:88:c1:62:
ed:b7:a6:4c:0f:04:32:c7:31:7d:85:a4:d2:9e:7e:b0:ad:8e:
f5:33:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:05:31 2025 by rpki-client