Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa
File: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (raw, json)
Hash identifier: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=
Subject key identifier: 21:ED:9E:D7:0B:7F:16:EB:E3:3E:1B:CF:66:62:7C:61:B7:C5:FD:3C
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421442B148B42134EB2482059F96FB9C1
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
85.208.175.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2b:14:8b:42:13:4e:b2:48:20:59:f9:6f:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ed9ed70b7f16ebe33e1bcf66627c61b7c5fd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:5c:9f:fc:9d:b4:6f:94:e8:6b:64:73:0b:
32:11:16:1c:c0:f7:d7:b6:94:10:67:ca:8d:b0:04:
21:8c:ef:c8:d6:6c:9f:a3:36:a4:d5:ac:67:a1:42:
2a:92:97:7c:99:9c:61:aa:f0:5e:c9:06:e0:83:99:
cc:22:09:8b:c1:40:ce:37:8e:3b:9f:d4:25:51:cc:
37:9e:89:02:b3:f1:8c:dc:e3:b2:25:7d:c7:59:14:
dc:6a:44:90:5c:77:c2:b7:f1:f1:3b:ac:77:7e:53:
90:07:2d:eb:a6:3c:f0:7a:7a:bf:f8:10:db:95:e6:
c3:91:50:96:a0:af:66:c2:50:28:28:70:db:fc:9b:
7c:05:ee:ce:23:99:2c:af:43:63:a9:93:fd:89:20:
dd:fa:e4:4d:8a:9c:b7:3d:81:79:ec:67:96:f6:0a:
dc:de:f4:2c:d8:11:e4:72:57:e6:3b:d5:55:38:90:
02:9f:cd:b7:af:05:d7:33:2f:10:a3:c1:93:2d:bf:
0a:87:8d:22:1b:87:0f:86:9a:7f:86:d7:f1:d2:b2:
67:71:4e:24:3e:d2:68:68:af:25:d5:ea:ed:8e:40:
1e:9b:68:fe:1f:1d:66:0e:ec:24:0c:07:fd:14:2a:
a7:04:0f:43:89:95:b5:76:be:ee:cf:53:8e:9b:95:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:9E:D7:0B:7F:16:EB:E3:3E:1B:CF:66:62:7C:61:B7:C5:FD:3C
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
85.208.175.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
ae:12:6f:4f:52:c7:1e:4e:43:ed:53:18:0e:47:2f:5c:a2:cd:
fc:12:6f:53:e4:91:1b:39:fa:e3:a5:17:7f:15:a1:90:b7:92:
53:f5:52:25:8c:00:bc:8b:cc:b7:af:b9:69:1f:46:ab:f6:44:
99:a5:17:01:0c:85:42:c9:79:e5:08:81:84:99:10:6a:cc:46:
d2:f0:8b:f5:c5:22:d3:97:fe:7b:94:39:be:82:7f:9d:ff:44:
5f:4a:b7:cb:b4:41:d8:39:36:a7:4c:6d:4b:ff:25:95:d1:0e:
80:2a:79:ba:fe:4f:d1:09:56:2c:b2:43:71:04:e3:03:2a:45:
12:02:3b:5d:dd:93:2f:3d:b5:19:6b:61:d1:9e:d5:47:75:7b:
bc:fe:f8:8a:12:35:e4:9e:63:0c:ad:aa:08:b8:52:d3:15:31:
28:b5:86:81:cc:87:1e:c9:16:e8:4d:f0:a4:31:59:9d:a4:36:
e0:66:65:d5:8d:ef:dc:3f:2c:51:4d:a7:dc:83:b5:98:50:bb:
d4:3a:4f:92:bd:97:54:1c:04:8e:dc:27:64:ac:f7:e3:97:b8:
a1:72:c0:cf:d1:4b:62:0c:a6:9d:b5:2f:b0:13:21:e8:7d:d6:
16:0c:46:08:d4:ec:a5:54:1c:c4:a3:01:59:90:6b:db:e8:5d:
6e:3b:d5:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:43 2025 by rpki-client