Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Loccx1y4nE04r4WRU5oHlrK9m-A.roa
File: Loccx1y4nE04r4WRU5oHlrK9m-A.roa (raw, json)
Hash identifier: LJiB8yDsIW91kRzovXWFY2/U3xEWh/tAJrfnPiNwF00=
Subject key identifier: 2E:87:1C:C7:5C:B8:9C:4D:38:AF:85:91:53:9A:07:96:B2:BD:9B:E0
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 01944BED6F47DDEC5CACE4967A448A1BBC2D
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Loccx1y4nE04r4WRU5oHlrK9m-A.roa
Signing time: Thu 09 Jan 2025 16:37:19 +0000
ROA not before: Thu 09 Jan 2025 16:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 2.56.216.0/22 maxlen: 24
5.183.132.0/22 maxlen: 24
37.148.184.0/21 maxlen: 24
45.10.124.0/22 maxlen: 24
45.95.252.0/22 maxlen: 24
45.140.156.0/22 maxlen: 24
45.151.116.0/22 maxlen: 24
77.73.224.0/21 maxlen: 24
85.184.8.0/21 maxlen: 24
91.211.160.0/22 maxlen: 24
91.216.34.0/24 maxlen: 24
93.188.64.0/22 maxlen: 24
171.22.176.0/22 maxlen: 24
185.116.12.0/22 maxlen: 24
185.234.152.0/23 maxlen: 24
185.234.154.0/24 maxlen: 24
185.239.168.0/23 maxlen: 24
185.239.170.0/24 maxlen: 24
185.249.136.0/22 maxlen: 24
185.251.152.0/22 maxlen: 24
185.253.48.0/22 maxlen: 24
193.105.183.0/24 maxlen: 24
194.61.84.0/24 maxlen: 24
194.61.86.0/24 maxlen: 24
195.184.86.0/23 maxlen: 24
195.184.90.0/23 maxlen: 24
195.238.86.0/23 maxlen: 24
212.19.192.0/19 maxlen: 24
212.26.192.0/19 maxlen: 24
212.57.48.0/20 maxlen: 24
213.156.0.0/20 maxlen: 24
213.173.56.0/22 maxlen: 24
217.8.96.0/20 maxlen: 24
2001:6e0::/32 maxlen: 48
2a02:690::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:ed:6f:47:dd:ec:5c:ac:e4:96:7a:44:8a:1b:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Jan 9 16:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e871cc75cb89c4d38af8591539a0796b2bd9be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:13:c3:02:48:ec:12:d9:25:b6:19:c3:47:
79:84:8a:02:17:6b:08:39:27:67:e0:d2:74:d1:1a:
22:8f:7e:bb:14:28:f8:e4:1f:93:94:0d:a9:d3:e1:
b7:55:d2:03:ea:94:9f:b1:0a:35:d0:39:eb:6d:4f:
b6:21:a2:c8:4e:a8:31:bf:e4:d4:ca:46:08:b3:27:
45:5a:60:a9:49:a3:a8:4e:73:d6:6b:99:75:41:08:
93:bd:0e:ac:37:8e:3f:f0:e7:33:90:75:ea:7a:6c:
72:82:3b:00:67:8c:17:93:87:91:a7:78:29:a1:8c:
fd:34:fe:cb:35:02:24:c3:9f:ec:54:98:8b:a7:71:
f2:d5:70:56:fa:e2:3b:1e:fa:36:7a:b9:bc:1a:2d:
16:2a:23:43:52:14:10:6a:44:c9:9b:7a:3c:bf:f8:
86:be:a2:1f:85:36:83:1d:b5:2d:1e:c2:8f:e0:b1:
88:3f:1a:4b:68:ac:1a:34:ef:dd:94:fe:f0:d7:f1:
94:09:28:04:9b:5e:17:87:2f:7d:2d:67:dd:fa:47:
2a:d4:22:fd:f8:79:52:9f:97:03:b4:0e:e2:e3:1b:
5e:23:3b:14:2c:16:7a:f9:fc:8d:e4:43:f8:89:b5:
3d:2d:8d:96:f9:f1:c5:0c:f2:7b:a3:06:eb:93:ff:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:1C:C7:5C:B8:9C:4D:38:AF:85:91:53:9A:07:96:B2:BD:9B:E0
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Loccx1y4nE04r4WRU5oHlrK9m-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.216.0/22
5.183.132.0/22
37.148.184.0/21
45.10.124.0/22
45.95.252.0/22
45.140.156.0/22
45.151.116.0/22
77.73.224.0/21
85.184.8.0/21
91.211.160.0/22
91.216.34.0/24
93.188.64.0/22
171.22.176.0/22
185.116.12.0/22
185.234.152.0-185.234.154.255
185.239.168.0-185.239.170.255
185.249.136.0/22
185.251.152.0/22
185.253.48.0/22
193.105.183.0/24
194.61.84.0/24
194.61.86.0/24
195.184.86.0/23
195.184.90.0/23
195.238.86.0/23
212.19.192.0/19
212.26.192.0/19
212.57.48.0/20
213.156.0.0/20
213.173.56.0/22
217.8.96.0/20
IPv6:
2001:6e0::/32
2a02:690::/29
Signature Algorithm: sha256WithRSAEncryption
10:dd:85:2d:96:07:9f:46:d6:04:bc:06:af:7c:59:7c:30:2b:
4c:60:26:c1:94:c7:fa:44:61:d8:ad:10:ab:2a:ae:f6:53:1f:
da:3b:be:fe:58:8a:2e:70:f3:5b:d2:fe:ba:34:2f:c9:37:6d:
88:bf:85:e7:7b:87:69:d6:60:f3:66:f5:e9:22:30:09:5d:c5:
14:66:d1:47:61:14:90:ab:ec:f1:8e:22:d5:25:7e:16:fa:d0:
73:1b:7f:35:8c:fb:95:01:70:23:1f:1a:2b:63:d6:37:3d:44:
0e:46:16:96:a9:b4:c4:cb:80:c6:58:61:3c:6a:08:54:66:5e:
f7:b8:a2:6d:d2:fd:90:26:e5:8d:4d:43:f3:bf:db:b2:b5:f8:
e9:6b:e6:83:2e:f5:70:1f:72:c6:22:d8:aa:45:4a:50:c8:79:
2f:79:1a:52:a2:76:32:80:3e:ed:10:31:ad:58:5d:dd:02:4a:
e1:d3:36:db:ee:0d:f9:70:5b:e5:27:95:15:43:4b:f2:7a:f0:
45:76:79:b7:2e:05:ea:f9:36:7c:f7:9c:df:7e:76:d4:45:b8:
49:5e:5b:31:88:8d:6b:ab:f6:ca:f0:31:df:75:1b:0d:f3:24:
74:ad:22:b8:b6:81:c6:b9:50:22:5a:13:73:3b:80:50:d0:53:
4e:1c:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:17 2025 by rpki-client