Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/nXs3yxeeCgVxuWTWTSWAnwzFC-E.roa
File: nXs3yxeeCgVxuWTWTSWAnwzFC-E.roa (raw, json)
Hash identifier: 9tVkUFln1w0rIpJUrWGk9KNhTI776sRMNPuFvltJhJc=
Subject key identifier: 9D:7B:37:CB:17:9E:0A:05:71:B9:64:D6:4D:25:80:9F:0C:C5:0B:E1
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 0192708CDA6C2DA03AD73E104B3D1CBE9384
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/nXs3yxeeCgVxuWTWTSWAnwzFC-E.roa
Signing time: Wed 09 Oct 2024 09:12:12 +0000
ROA not before: Wed 09 Oct 2024 09:12:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.156.143.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
85.208.175.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:8c:da:6c:2d:a0:3a:d7:3e:10:4b:3d:1c:be:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Oct 9 09:12:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d7b37cb179e0a0571b964d64d25809f0cc50be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:14:75:cd:65:fa:7c:f2:46:6d:6e:6f:73:
1b:fc:cd:cb:10:ae:1f:26:13:2b:27:a0:2e:94:17:
2e:96:ac:a0:27:8d:85:e5:68:d8:2a:e4:8f:ce:c7:
42:ca:4a:a5:f1:e3:81:23:b7:8f:14:d0:f5:30:ba:
42:03:d3:fd:49:d6:00:ee:53:0b:a2:2e:c8:fe:7f:
df:0e:1f:ba:0d:a9:bb:39:44:b6:ea:85:d1:65:07:
7e:b9:63:28:ab:08:e5:d8:f5:f0:05:15:fa:0b:7c:
46:85:5e:36:bc:e7:79:fc:be:9b:9c:db:29:e3:41:
1a:42:8c:82:0c:b1:55:b2:e3:86:45:a0:f3:e7:c7:
3a:5d:b9:11:69:49:0f:f6:c6:f5:fb:1a:52:2c:fa:
66:eb:73:e2:23:77:09:4d:8a:e6:82:8a:9d:10:e6:
22:d6:bb:1a:1c:e6:07:fc:a1:54:79:47:11:e4:8a:
9f:c9:24:2c:3b:75:02:17:7f:77:85:b4:80:e9:c0:
84:d9:a6:08:f4:76:fd:6e:f9:71:8f:1b:ae:2d:f7:
e3:72:9c:9e:f1:e9:a9:61:c8:c7:8a:3d:8e:a0:cb:
1f:bd:40:a9:0e:5a:82:2c:1a:d9:6e:cf:ef:f7:63:
69:0e:c2:98:87:17:f0:52:1b:0c:76:7d:c9:34:52:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:37:CB:17:9E:0A:05:71:B9:64:D6:4D:25:80:9F:0C:C5:0B:E1
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/nXs3yxeeCgVxuWTWTSWAnwzFC-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
45.156.143.0/24
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
85.208.175.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
9b:9e:ef:10:81:3d:f2:33:19:91:f8:9c:e2:2d:fa:5b:52:37:
32:69:41:f2:bd:ac:c1:24:bb:f3:96:94:23:39:a4:32:d8:af:
fd:21:28:a4:60:1f:90:31:00:ca:1e:d5:00:79:bf:f8:bd:08:
de:a6:cf:17:06:9b:26:01:48:6e:c3:5d:d4:1b:4d:b8:ae:34:
11:33:48:5e:03:07:ff:f8:55:cc:72:e7:ab:8c:93:b0:0f:f5:
f1:6c:22:3a:d3:3d:fe:87:77:ac:87:9f:84:ec:31:fa:b4:65:
57:fa:70:c3:7b:b9:ae:6e:22:48:c6:36:8e:20:df:82:46:5e:
91:b3:83:41:8c:65:48:98:43:e6:6f:0e:15:4d:c9:87:cf:c9:
61:7f:19:31:a4:0d:df:83:d1:4e:b6:df:0e:4e:24:3b:e1:af:
4d:13:ce:3e:85:eb:86:69:97:e6:93:ad:87:de:0a:d7:4b:e9:
09:6f:47:67:72:fd:3f:6e:cc:50:99:14:60:d0:c6:3c:27:ef:
08:59:d2:5e:1a:eb:54:ab:67:31:ea:45:52:9c:89:df:cb:73:
a0:a7:48:98:c9:bb:61:80:31:44:d0:51:c4:ea:fd:25:2d:d1:
43:8a:37:5f:a7:2b:39:c9:a0:fb:3e:42:b9:90:eb:53:0e:10:
56:9e:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:30 2025 by rpki-client