Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HARnUvjlt2Ihiye5L31M1Ihsszo.roa
File: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (raw, json)
Hash identifier: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=
Subject key identifier: 1C:04:67:52:F8:E5:B7:62:21:8B:27:B9:2F:7D:4C:D4:88:6C:B3:3A
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019420D5FA408BDBFB055D1354A9D94097C9
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HARnUvjlt2Ihiye5L31M1Ihsszo.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41897
IP address blocks: 45.158.16.0/22 maxlen: 22
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.4.0/24 maxlen: 24
46.40.6.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.8.0/24 maxlen: 24
46.40.9.0/24 maxlen: 24
46.40.10.0/24 maxlen: 24
46.40.11.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
46.40.14.0/24 maxlen: 24
46.40.15.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
46.40.16.0/24 maxlen: 24
46.40.17.0/24 maxlen: 24
46.40.18.0/24 maxlen: 24
46.40.19.0/24 maxlen: 24
46.40.20.0/24 maxlen: 24
46.40.21.0/24 maxlen: 24
46.40.22.0/24 maxlen: 24
46.40.23.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.29.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.30.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.40.0/21 maxlen: 21
46.40.40.0/24 maxlen: 24
46.40.41.0/24 maxlen: 24
46.40.42.0/24 maxlen: 24
46.40.43.0/24 maxlen: 24
46.40.44.0/23 maxlen: 23
46.40.46.0/23 maxlen: 23
46.40.48.0/21 maxlen: 21
46.40.48.0/24 maxlen: 24
46.40.49.0/24 maxlen: 24
46.40.50.0/24 maxlen: 24
46.40.51.0/24 maxlen: 24
46.40.52.0/24 maxlen: 24
46.40.53.0/24 maxlen: 24
46.40.54.0/24 maxlen: 24
46.40.55.0/24 maxlen: 24
46.40.56.0/22 maxlen: 22
46.40.56.0/24 maxlen: 24
46.40.57.0/24 maxlen: 24
46.40.58.0/24 maxlen: 24
46.40.59.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.63.0/24 maxlen: 24
46.251.8.0/22 maxlen: 22
80.245.96.0/22 maxlen: 22
81.24.240.0/21 maxlen: 21
81.24.247.0/24 maxlen: 24
85.222.176.0/20 maxlen: 20
85.222.176.0/21 maxlen: 21
85.222.176.0/24 maxlen: 24
85.222.177.0/24 maxlen: 24
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
89.147.80.0/20 maxlen: 20
89.147.80.0/22 maxlen: 22
89.147.80.0/24 maxlen: 24
89.147.81.0/24 maxlen: 24
89.147.82.0/24 maxlen: 24
89.147.83.0/24 maxlen: 24
89.147.84.0/22 maxlen: 22
89.147.88.0/24 maxlen: 24
89.147.89.0/24 maxlen: 24
89.147.92.0/24 maxlen: 24
89.147.93.0/24 maxlen: 24
89.147.94.0/24 maxlen: 24
89.147.95.0/24 maxlen: 24
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
91.147.240.0/21 maxlen: 21
91.147.244.0/22 maxlen: 22
94.248.184.0/21 maxlen: 21
94.248.232.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
94.248.232.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
95.85.128.0/18 maxlen: 18
95.85.128.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.136.0/22 maxlen: 22
95.85.144.0/21 maxlen: 21
95.85.152.0/23 maxlen: 23
95.85.152.0/24 maxlen: 24
95.85.153.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.154.0/24 maxlen: 24
95.85.155.0/24 maxlen: 24
95.85.156.0/22 maxlen: 22
95.85.172.0/24 maxlen: 24
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
178.20.200.0/24 maxlen: 24
178.20.201.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
185.6.188.0/22 maxlen: 22
185.6.188.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
185.37.169.0/24 maxlen: 24
185.37.170.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.156.152.0/22 maxlen: 22
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
185.169.249.0/24 maxlen: 24
185.169.250.0/23 maxlen: 23
185.231.128.0/22 maxlen: 22
195.192.244.0/22 maxlen: 22
217.17.96.0/20 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.98.0/24 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.107.0/24 maxlen: 24
217.17.108.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
2a00:ad00::/29 maxlen: 29
2a00:ad00:2010::/44 maxlen: 44
2a00:ad03::/32 maxlen: 32
2a00:ad07:3000::/36 maxlen: 36
2a04:f040::/29 maxlen: 29
2a0c:6300::/30 maxlen: 30
2a0f:7bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fa:40:8b:db:fb:05:5d:13:54:a9:d9:40:97:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c046752f8e5b762218b27b92f7d4cd4886cb33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:96:6e:fe:ca:a8:96:53:54:c9:96:6a:23:
e7:88:7d:34:cc:e5:c5:c5:c6:eb:93:e4:a9:6f:24:
f4:57:6b:f1:9c:c4:0f:b0:3b:eb:3b:f3:7c:3b:86:
7b:68:f5:b0:ce:fc:8d:ce:2d:4c:89:e9:f7:4b:fb:
a6:66:3f:49:14:54:4d:81:a3:36:bc:9f:cd:9e:18:
c8:76:50:d1:1b:5a:25:52:1e:b5:bb:b0:92:6b:2b:
d3:27:b0:cb:d2:0d:18:6c:22:72:af:41:83:05:68:
ef:27:62:08:e9:fb:c9:82:a1:e0:b4:a6:01:c9:f9:
e3:f6:10:11:8e:6a:6a:aa:bd:f8:83:69:61:5b:ff:
99:3d:54:66:6b:c3:39:ac:d2:66:73:8f:e4:91:86:
d5:19:c0:7a:92:1d:84:d5:61:a4:ab:89:62:b3:42:
7b:61:f0:59:e9:6e:8e:0f:79:f3:bd:02:8a:ac:6e:
3f:c9:11:72:a1:8b:f1:e0:2e:85:a1:60:49:24:01:
f5:29:c6:60:ff:e3:1f:fd:f2:c8:9f:4d:14:8b:af:
7b:04:45:aa:6d:0a:38:35:24:da:f2:3d:da:6a:fa:
18:32:82:1c:f7:9c:03:71:a4:23:7c:40:ae:5f:cd:
00:b7:d1:68:43:98:b3:37:97:f4:86:0e:c4:3a:21:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:67:52:F8:E5:B7:62:21:8B:27:B9:2F:7D:4C:D4:88:6C:B3:3A
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HARnUvjlt2Ihiye5L31M1Ihsszo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
89.147.80.0/20
91.102.224.0/21
91.147.240.0/21
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.156.152.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
2a04:f040::/29
2a0c:6300::/30
2a0f:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:3d:7e:cf:06:c1:1e:56:11:53:57:74:1c:57:8c:2b:11:6e:
90:99:19:92:c8:51:24:d4:61:78:57:61:06:8b:6f:f0:25:0f:
31:df:b2:35:30:42:ef:aa:7f:6a:59:76:3b:af:bd:84:5d:85:
08:1d:8c:af:04:e2:61:c7:69:79:52:0e:f2:c6:04:9f:71:a8:
ed:10:e8:71:84:a4:ae:ff:ec:44:cd:19:73:36:e5:a5:77:91:
b5:a1:75:d3:a0:f5:21:c5:71:50:07:0d:64:53:1b:ed:d5:22:
96:0b:f2:00:78:5f:33:7f:c8:50:dd:63:e9:60:9f:2e:a7:dc:
81:4b:06:77:3c:93:5f:31:ee:b0:bc:8f:86:0d:af:e5:9c:99:
ed:66:a9:6a:c0:8f:ff:ab:a4:83:34:b5:b0:3f:d1:b9:f1:47:
f8:72:d3:0d:63:fe:47:ba:8b:19:0e:0c:39:ad:60:a5:41:55:
4c:2c:43:e0:5e:40:79:f8:eb:9b:12:4c:12:75:0d:c3:fa:05:
65:c3:aa:15:33:05:5d:c1:8a:1b:6e:44:8c:cb:16:43:ff:ad:
69:e8:c2:c1:19:b9:91:8c:0e:71:3d:b9:3f:95:4d:4d:a6:bb:
3f:b5:70:f3:fd:98:7c:c8:6a:cb:9c:df:4e:34:10:48:bc:85:
7d:c3:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:06 2025 by rpki-client