Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/3-eWwo5D8xPMh-vszPdbUJkOEkk.roa
File: 3-eWwo5D8xPMh-vszPdbUJkOEkk.roa (raw, json)
Hash identifier: CeICltpUGzzLAY7xHX6zk4OVJMmASgIKe1L4J/Xr788=
Subject key identifier: DF:E7:96:C2:8E:43:F3:13:CC:87:EB:EC:CC:F7:5B:50:99:0E:12:49
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018DD6C14B4F5AC045BBB2A1B633FDABD384
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/3-eWwo5D8xPMh-vszPdbUJkOEkk.roa
Signing time: Fri 23 Feb 2024 16:16:48 +0000
ROA not before: Fri 23 Feb 2024 16:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.156.143.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
147.78.219.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:c1:4b:4f:5a:c0:45:bb:b2:a1:b6:33:fd:ab:d3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Feb 23 16:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe796c28e43f313cc87ebecccf75b50990e1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:20:fb:8b:b7:2e:1c:89:c4:5e:76:d3:91:
de:01:b6:e8:60:a2:02:8e:ca:3c:01:6e:3f:17:f1:
53:cc:fe:73:b0:de:0d:e2:26:cf:94:e0:82:da:5d:
7e:84:9b:4c:1e:90:d8:d0:96:d3:57:fa:0d:c0:fe:
46:b3:a0:41:1c:01:8c:6a:ae:0f:97:64:d9:c3:bd:
cd:5c:c3:21:d9:30:df:f1:0d:a1:d4:ed:da:b4:2f:
96:92:ee:02:3a:d5:16:49:76:2c:36:d8:f0:c4:13:
34:04:d8:d7:3a:8a:0f:0c:4a:d4:1e:e8:0b:37:7a:
47:3c:08:17:88:34:7c:3d:ca:bd:52:fd:dd:7b:bb:
71:ee:68:ff:91:af:49:5b:4f:a0:22:9a:d0:cd:33:
c6:fe:35:ca:30:b9:87:c1:cf:4c:db:42:cb:55:c6:
d2:30:03:09:bd:2b:14:59:fa:78:0d:00:97:30:6d:
c6:f2:1b:19:33:87:ae:a9:24:d5:89:68:24:d2:50:
91:65:8e:ad:8f:c5:9c:a3:b3:de:b0:62:59:61:59:
2b:81:24:e3:f9:6c:7e:5a:36:f6:fb:c2:0d:90:58:
d3:3d:bc:78:e4:6c:b5:76:87:b1:5f:27:34:f2:4a:
15:2f:40:8e:4f:f4:fc:05:9a:9e:8e:35:dd:38:95:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:96:C2:8E:43:F3:13:CC:87:EB:EC:CC:F7:5B:50:99:0E:12:49
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/3-eWwo5D8xPMh-vszPdbUJkOEkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
45.156.143.0/24
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
83:18:31:e7:ac:f2:d7:29:b1:3d:fe:b2:5d:71:4d:9a:f3:45:
63:f9:9c:b2:c9:40:d6:3f:f5:9f:db:57:46:f5:36:a0:ac:e9:
65:ef:5a:33:5d:04:9a:55:af:c5:13:35:20:15:17:a3:25:f5:
ec:a8:6b:29:7f:fb:19:44:a4:ed:1b:56:be:cf:d4:1e:39:6d:
e4:de:a9:9d:af:c6:3a:ff:98:0a:97:4d:9c:52:53:56:f2:c9:
9d:5e:4e:c4:37:bc:bb:8b:d3:b8:6f:6a:25:7f:3d:c3:fb:fb:
3d:39:d6:74:23:4f:4f:ea:96:c6:38:48:30:34:d4:b9:5a:6c:
85:af:ff:a1:df:15:35:06:c6:ec:30:8c:6f:58:8a:49:6c:23:
08:56:84:85:4e:e1:10:97:1e:33:22:b2:70:f3:a2:10:68:c7:
37:f3:1f:34:0b:f5:43:37:85:24:90:75:c4:66:6a:6a:52:8b:
34:2b:6a:15:10:0e:8a:c0:ec:ce:9b:66:94:ed:c2:04:2f:ee:
78:73:6f:e3:c9:6e:e6:d5:5c:4f:0b:cc:d3:36:14:2f:a2:e5:
56:f1:bc:f2:47:ed:52:28:ca:0c:dd:d8:be:02:57:7c:f8:ec:
e4:20:89:47:15:2e:e6:d7:62:8e:7a:89:fa:44:91:95:f8:61:
e0:27:91:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:15 2025 by rpki-client