Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/x-Sdgu7wzJjiiURKJsY9SdFNHkk.roa
File: x-Sdgu7wzJjiiURKJsY9SdFNHkk.roa (raw, json)
Hash identifier: 35ggQTekAdcX5CLs1UtALHrY2fQf7hGCsqB1ssNNttc=
Subject key identifier: C7:E4:9D:82:EE:F0:CC:98:E2:89:44:4A:26:C6:3D:49:D1:4D:1E:49
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 019426AD4D0C26BAD2362ADB456109BBA918
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/x-Sdgu7wzJjiiURKJsY9SdFNHkk.roa
Signing time: Thu 02 Jan 2025 11:01:19 +0000
ROA not before: Thu 02 Jan 2025 11:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31042
IP address blocks: 5.22.160.0/19 maxlen: 24
5.22.190.0/24 maxlen: 24
24.135.0.0/16 maxlen: 17
46.17.144.0/21 maxlen: 21
46.240.128.0/17 maxlen: 17
80.93.224.0/19 maxlen: 19
82.117.192.0/19 maxlen: 24
82.117.195.0/24 maxlen: 24
87.116.128.0/18 maxlen: 24
87.116.128.0/19 maxlen: 19
87.116.140.0/24 maxlen: 24
87.116.141.0/24 maxlen: 24
87.116.160.0/19 maxlen: 19
89.216.0.0/16 maxlen: 24
91.143.208.0/20 maxlen: 20
94.127.0.0/21 maxlen: 24
94.189.128.0/17 maxlen: 18
94.230.176.0/20 maxlen: 20
95.180.0.0/17 maxlen: 17
176.109.136.0/21 maxlen: 21
178.148.0.0/15 maxlen: 16
185.13.8.0/22 maxlen: 22
185.18.12.0/22 maxlen: 22
188.2.0.0/16 maxlen: 17
188.246.32.0/19 maxlen: 19
213.244.208.0/20 maxlen: 24
213.244.224.0/22 maxlen: 24
217.26.208.0/21 maxlen: 24
2a00:1dd8::/29 maxlen: 29
2a00:1dd8::/32 maxlen: 32
2a03:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:ad:4d:0c:26:ba:d2:36:2a:db:45:61:09:bb:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Jan 2 11:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e49d82eef0cc98e289444a26c63d49d14d1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:6d:da:9d:75:8a:8b:d1:69:64:d1:9e:6e:
b1:f6:9f:23:cc:2b:ab:aa:7f:d6:f3:ba:a6:2f:aa:
6c:cf:f1:3e:18:b3:c3:65:1f:42:f7:f5:d0:d6:c1:
81:1a:7a:6f:44:cd:10:b4:85:ba:5b:1c:09:cc:ec:
5e:33:b6:6b:0a:c9:13:da:7e:b6:29:a7:a6:c2:c7:
62:80:a6:ea:b6:cb:af:dc:c6:99:df:f1:7c:24:3b:
7a:a3:da:de:e3:c9:cb:4e:fb:fa:54:80:65:1c:13:
c5:f7:98:52:be:61:f1:74:9e:9c:e1:5a:95:38:66:
60:60:5a:9a:97:27:5b:a6:32:97:2f:b8:e1:f8:95:
50:e9:f8:ec:80:9c:68:f3:bf:2f:9c:7f:1b:54:55:
47:a8:26:cd:b2:cb:86:23:c8:b8:4f:51:b6:61:d6:
29:a5:96:aa:ed:94:5e:50:bf:17:fb:ea:11:08:c3:
18:f3:22:1c:c7:4e:24:92:a7:ac:42:2a:57:da:53:
22:46:7f:e6:67:12:3c:dc:f1:15:f7:81:32:88:ab:
8d:2d:00:d4:46:c3:ef:e6:e6:26:d0:55:e1:3e:61:
9d:26:10:54:13:79:30:f8:f4:63:af:84:88:32:61:
a7:3c:91:a4:b5:0b:c1:07:81:c1:22:26:cf:5c:38:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:9D:82:EE:F0:CC:98:E2:89:44:4A:26:C6:3D:49:D1:4D:1E:49
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/x-Sdgu7wzJjiiURKJsY9SdFNHkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.160.0/19
24.135.0.0/16
46.17.144.0/21
46.240.128.0/17
80.93.224.0/19
82.117.192.0/19
87.116.128.0/18
89.216.0.0/16
91.143.208.0/20
94.127.0.0/21
94.189.128.0/17
94.230.176.0/20
95.180.0.0/17
176.109.136.0/21
178.148.0.0/15
185.13.8.0/22
185.18.12.0/22
188.2.0.0/16
188.246.32.0/19
213.244.208.0-213.244.227.255
217.26.208.0/21
IPv6:
2a00:1dd8::/29
2a03:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:a9:35:58:29:93:e1:3a:2e:21:e7:6c:0c:28:ed:4e:af:8c:
c0:cf:1c:49:26:40:a8:e9:0d:c5:96:f1:cd:7c:1c:aa:d9:2a:
c5:dc:dd:eb:5e:6a:bb:a6:53:69:6f:89:45:18:7b:86:86:74:
cf:45:52:1c:8b:de:ae:a5:27:6a:58:23:5f:ee:e8:8c:67:9c:
58:de:31:7f:2c:b6:bc:83:2b:64:dd:02:18:17:6a:ad:9f:6f:
48:42:af:41:29:05:09:55:e7:36:d5:c4:66:f7:67:1b:ba:36:
6b:0f:33:cf:fc:18:7c:e1:4d:b2:ea:9b:5e:72:e0:fc:a9:97:
0f:9c:13:02:96:c9:70:9e:59:92:be:ad:3c:5c:8b:b7:8c:89:
86:56:ee:d2:d4:6f:db:cb:fd:50:c0:ab:5e:95:ab:26:23:b1:
c2:37:05:4b:d3:69:fc:fe:8d:06:59:13:ea:4b:d8:8b:bc:39:
3e:15:9d:d5:57:8f:d9:b7:8b:2f:52:5a:3c:2c:b8:63:44:a6:
04:a7:80:a2:95:cd:f8:bf:1b:ae:85:32:a4:03:5f:90:2f:c4:
03:90:ac:2b:3e:5e:b7:ef:af:d6:32:25:5e:44:fd:8b:f2:d5:
8e:32:1a:1a:08:48:04:2c:be:7f:8f:d5:7b:0b:f1:e4:15:3e:
25:b0:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:44 2025 by rpki-client