Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/sDor7kw6kIEwUhmbIE-yDo1iYWA.roa
File: sDor7kw6kIEwUhmbIE-yDo1iYWA.roa (raw, json)
Hash identifier: AXxjgNfQWqjP+zB+S3HDQ7PFyUD1hfyTSxMLaxNrot4=
Subject key identifier: B0:3A:2B:EE:4C:3A:90:81:30:52:19:9B:20:4F:B2:0E:8D:62:61:60
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 123C84A4
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/sDor7kw6kIEwUhmbIE-yDo1iYWA.roa
Signing time: Sat 01 Jan 2022 04:01:47 +0000
ROA not before: Sat 01 Jan 2022 04:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9119
IP address blocks: 85.208.172.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
212.103.128.0/19 maxlen: 19
194.39.85.0/24 maxlen: 24
84.41.122.0/23 maxlen: 23
84.41.120.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
91.132.74.0/23 maxlen: 23
2.58.48.0/22 maxlen: 22
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.112.0/23 maxlen: 23
84.41.111.0/24 maxlen: 24
84.41.110.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.114.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
46.163.48.0/21 maxlen: 21
46.163.58.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
45.156.140.0/24 maxlen: 24
45.8.0.0/22 maxlen: 22
46.163.0.0/19 maxlen: 19
147.78.216.0/24 maxlen: 24
147.78.216.0/22 maxlen: 22
46.163.32.0/20 maxlen: 20
212.13.224.0/19 maxlen: 19
84.41.32.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.112.0/22 maxlen: 22
213.253.111.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
84.41.64.0/19 maxlen: 19
213.253.116.0/22 maxlen: 22
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
213.253.64.0/19 maxlen: 19
185.54.131.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.128.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
2a0b:c300::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a02:805::/33 maxlen: 33
2a0b:c306::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a0e:1e80::/29 maxlen: 29
2a02:800::/32 maxlen: 32
2a09:e140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305956004 (0x123c84a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 04:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b03a2bee4c3a90813052199b204fb20e8d626160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:91:b2:66:85:c6:4a:b0:7f:71:26:23:0e:
3d:9f:92:77:92:5c:fe:c8:40:9c:c5:71:80:cb:04:
74:e7:38:36:25:80:89:fd:24:ad:78:5a:ba:a8:21:
89:06:d9:cd:7f:f1:5d:e7:85:9b:d7:27:80:ad:89:
e5:d0:ce:46:62:6a:de:c1:8d:9c:19:46:cf:c5:63:
38:33:fd:0d:8c:65:02:ad:2d:d5:9e:4f:05:23:40:
06:f1:b7:08:7d:1d:06:b0:b8:3a:e5:72:89:18:b9:
6f:7d:3c:6f:fa:bf:dd:a5:2c:6f:fb:9c:63:9f:f8:
9e:49:e2:2c:68:91:2a:67:31:26:35:ec:14:33:39:
2c:6f:a7:91:7c:63:3e:50:f4:e2:c1:59:8b:ab:53:
02:39:7c:27:ed:0d:db:6e:b7:bb:5f:16:35:7b:e0:
87:7f:25:dc:74:95:ad:42:4d:88:85:6b:cf:8c:9d:
66:09:12:6d:b3:93:7b:25:22:2c:81:74:a6:5b:be:
40:e7:45:9c:96:9b:e0:9f:2f:a7:f6:54:71:97:13:
08:49:c5:51:ca:5f:ee:94:1b:73:74:b9:22:be:0b:
f8:55:b3:43:5a:b1:96:ad:ab:fa:f1:9c:0f:7c:02:
b9:c5:3d:bf:cf:bb:f2:53:85:b5:79:76:1c:69:f7:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:2B:EE:4C:3A:90:81:30:52:19:9B:20:4F:B2:0E:8D:62:61:60
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/sDor7kw6kIEwUhmbIE-yDo1iYWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/24
46.163.0.0/18
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
194.39.85.0/24
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
IPv6:
2a02:800::-2a02:801:7fff:ffff:ffff:ffff:ffff:ffff
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
99:71:11:b1:f5:73:45:9b:88:79:e4:74:27:ab:eb:2a:62:c0:
de:44:ee:51:ee:f9:e4:37:b6:c5:68:dc:5e:47:75:37:6e:9f:
de:1e:8c:3f:f1:a6:e9:68:8a:40:3b:50:f4:4f:74:12:39:09:
b0:0d:98:68:83:88:73:d4:5a:86:35:08:23:d9:4c:93:cf:98:
c1:19:da:6d:41:0e:81:94:7e:38:87:4d:4a:20:78:7b:57:fe:
f8:b0:3f:5a:29:70:c5:d1:7a:e5:33:3f:c8:3e:b3:9c:c7:8e:
b7:a5:19:7f:44:d1:66:7b:29:92:4d:1b:83:40:fe:9b:c2:34:
e4:30:60:39:47:28:a3:8f:ff:e4:57:c8:3f:16:72:0f:b8:bf:
09:33:06:9b:b4:8e:e7:5d:58:06:bc:b9:75:72:66:23:8a:82:
25:7c:f8:b3:05:7d:c4:e3:8a:46:35:54:c0:5c:64:29:35:0b:
ac:25:e7:8a:db:05:31:81:db:38:08:27:25:ae:67:f8:bc:51:
a2:5f:c9:b3:f1:eb:ba:27:eb:f3:35:2c:11:1e:e5:bb:f0:87:
e8:72:73:f7:5d:b9:fb:4f:29:da:e3:a8:57:b8:de:06:58:42:
0e:fc:27:6d:2d:9b:d7:26:45:97:72:8e:79:49:dd:36:ce:10:
e6:eb:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:10 2025 by rpki-client