Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ASEYXVlqtHD1EDLmtq-yC9BOeCA.roa
File: ASEYXVlqtHD1EDLmtq-yC9BOeCA.roa (raw, json)
Hash identifier: EjwRPmD+rHr0f+puV91C0/j6pDS/D+ErmmFfBSXrNls=
Subject key identifier: 01:21:18:5D:59:6A:B4:70:F5:10:32:E6:B6:AF:B2:0B:D0:4E:78:20
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0194258F8CF746F5FD27A9E76981B01830DD
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ASEYXVlqtHD1EDLmtq-yC9BOeCA.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.88.0/21 maxlen: 21
87.192.96.0/19 maxlen: 19
87.192.128.0/18 maxlen: 18
87.192.192.0/20 maxlen: 20
87.192.208.0/21 maxlen: 21
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.192.224.0/19 maxlen: 19
87.232.0.0/19 maxlen: 19
87.232.144.0/20 maxlen: 20
87.232.160.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.200.0/21 maxlen: 21
87.232.208.0/20 maxlen: 20
87.232.225.0/24 maxlen: 24
87.232.226.0/23 maxlen: 23
87.232.228.0/22 maxlen: 22
87.232.232.0/21 maxlen: 21
87.232.240.0/21 maxlen: 21
87.232.248.0/23 maxlen: 23
89.124.0.0/17 maxlen: 17
89.124.128.0/18 maxlen: 18
89.124.192.0/19 maxlen: 19
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.124.246.0/23 maxlen: 23
89.124.248.0/21 maxlen: 21
89.125.0.0/16 maxlen: 16
89.126.0.0/16 maxlen: 16
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
89.126.28.0/22 maxlen: 22
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.192.0/19 maxlen: 19
89.127.224.0/20 maxlen: 20
89.127.240.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:f7:46:f5:fd:27:a9:e7:69:81:b0:18:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0121185d596ab470f51032e6b6afb20bd04e7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:97:44:9f:5d:5c:c7:27:45:71:8e:13:b4:
52:d9:c7:74:08:aa:ae:fb:4d:30:66:f3:e5:0c:6a:
c6:d7:8b:c8:b9:ef:34:8b:a0:72:eb:ad:36:8d:1f:
0c:0e:df:62:fd:e6:90:2d:9f:e8:23:a6:e4:07:da:
b9:08:f5:bb:1e:f6:ba:be:39:16:d1:14:82:6b:cb:
6b:0f:23:21:27:b4:91:a9:38:c6:0e:8d:4e:5d:5b:
5e:0e:3e:be:37:d6:28:db:f9:f5:85:13:8b:eb:81:
f4:16:d9:f7:0b:46:34:05:aa:3d:78:f8:04:eb:7e:
bd:d3:b6:59:9a:44:15:49:96:7e:41:fc:cc:f1:c7:
6f:75:98:7b:e7:e9:00:82:a0:76:0b:92:d1:e8:ef:
ed:54:05:dc:3f:03:0e:70:59:28:c4:c3:54:69:89:
0b:f2:71:a4:4c:20:f1:67:02:3d:45:f6:8a:67:af:
0d:f5:07:b6:40:e1:c0:78:a1:0d:72:b7:7a:69:9b:
fe:c9:95:06:99:46:bb:f2:61:42:da:ae:a0:7f:b9:
0a:1c:3d:c9:89:a6:34:8d:fe:73:da:ee:ed:40:2f:
da:7d:69:9e:bd:fb:e8:12:ff:2e:e6:ac:88:ce:d3:
89:84:9b:4e:ed:d7:5c:39:f6:db:ca:c9:52:03:1e:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:18:5D:59:6A:B4:70:F5:10:32:E6:B6:AF:B2:0B:D0:4E:78:20
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ASEYXVlqtHD1EDLmtq-yC9BOeCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.219.255
87.192.222.0-87.192.255.255
87.232.0.0/19
87.232.144.0-87.232.192.255
87.232.194.0-87.232.223.255
87.232.225.0-87.232.249.255
89.124.0.0-89.124.239.255
89.124.245.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
8d:ed:cd:85:3c:04:e4:f7:6b:05:bd:fe:74:4e:ea:94:2e:63:
60:49:6e:91:bc:b5:90:63:cb:30:47:b1:3a:fc:b4:d8:99:ad:
b0:cb:d7:b7:1a:91:cb:04:3a:c0:35:bc:de:76:a1:72:ba:9f:
72:c5:92:15:eb:8a:5e:67:14:51:f4:2b:f8:9f:da:05:b5:bc:
bf:16:85:04:76:86:34:76:a8:ee:7b:48:8e:76:09:fa:cb:68:
48:91:a2:7c:4a:9b:32:6c:08:fd:11:9f:8c:4f:67:22:40:5d:
7a:91:d1:46:95:30:27:e7:3d:c3:b7:f5:0a:d7:a0:63:24:a1:
0e:6f:16:7d:7c:90:eb:5d:ef:31:f1:16:fa:5d:4f:15:42:62:
98:04:44:dc:68:50:3e:6a:d0:1c:74:9e:fb:2b:67:ab:3b:fb:
7b:b1:94:42:4c:01:fd:a4:b5:24:df:3d:4a:aa:a0:b7:74:8f:
54:3c:49:26:54:30:17:1a:5b:95:30:54:fd:01:b6:36:13:be:
4d:ba:d2:b6:6a:72:a8:40:99:12:2e:45:bd:f5:d0:6b:e2:1c:
a4:b2:6a:5a:96:97:7d:f2:c0:4f:cb:ec:0d:b6:c2:4a:22:61:
ca:69:34:00:53:8e:41:49:ca:fd:50:27:ef:db:60:2c:4b:cc:
96:3a:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:59 2025 by rpki-client