Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MVUIjvldFGZm-gGmebvsOKXNzEc.roa
File: MVUIjvldFGZm-gGmebvsOKXNzEc.roa (raw, json)
Hash identifier: +4/rRyIr4ccUmy6os+rMixRxTprdWRukvF6pnLzDSr0=
Subject key identifier: 31:55:08:8E:F9:5D:14:66:66:FA:01:A6:79:BB:EC:38:A5:CD:CC:47
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B6801B55B1C46A3378DAFEC0D7DB0B
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MVUIjvldFGZm-gGmebvsOKXNzEc.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 2.17.108.0/22 maxlen: 22
2.17.120.0/22 maxlen: 22
2.17.192.0/22 maxlen: 22
2.17.192.0/24 maxlen: 24
2.17.193.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.18.212.0/22 maxlen: 22
2.19.4.0/22 maxlen: 22
2.21.112.0/24 maxlen: 24
2.21.113.0/24 maxlen: 24
2.21.114.0/24 maxlen: 24
2.21.115.0/24 maxlen: 24
2.21.116.0/24 maxlen: 24
2.21.117.0/24 maxlen: 24
2.21.118.0/24 maxlen: 24
2.21.119.0/24 maxlen: 24
2.21.120.0/24 maxlen: 24
2.21.121.0/24 maxlen: 24
2.21.122.0/24 maxlen: 24
2.21.123.0/24 maxlen: 24
2.21.124.0/24 maxlen: 24
2.21.125.0/24 maxlen: 24
2.21.126.0/24 maxlen: 24
2.21.127.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
2.23.128.0/23 maxlen: 23
2.23.130.0/23 maxlen: 23
2.23.132.0/23 maxlen: 23
92.122.184.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
93.191.170.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
95.100.157.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.204.0/22 maxlen: 22
2a02:2370:1::/48 maxlen: 48
2a02:2370:2::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:202::/48 maxlen: 48
2a02:2370:203::/48 maxlen: 48
2a02:2370:204::/48 maxlen: 48
2a02:2370:205::/48 maxlen: 48
2a02:2370:206::/48 maxlen: 48
2a02:2370:207::/48 maxlen: 48
2a02:2370:208::/48 maxlen: 48
2a02:2370:209::/48 maxlen: 48
2a02:2370:20a::/48 maxlen: 48
2a02:2370:20b::/48 maxlen: 48
2a02:2370:20c::/48 maxlen: 48
2a02:2370:4000::/48 maxlen: 48
2a02:2370:8000::/48 maxlen: 48
2a02:2370:c000::/48 maxlen: 48
2a02:2370:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:80:1b:55:b1:c4:6a:33:78:da:fe:c0:d7:db:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3155088ef95d146666fa01a679bbec38a5cdcc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:95:63:9c:48:68:7d:6d:5f:77:19:49:c8:
b3:ae:89:70:a9:e1:2d:15:3f:7f:42:5b:eb:7d:aa:
9f:25:b5:d4:fa:23:75:4e:9e:69:24:3f:04:63:dc:
af:79:10:6a:45:37:73:0f:0b:33:35:e4:84:7a:d3:
4f:de:cb:01:3e:45:85:47:9a:78:78:de:ee:21:97:
2a:4c:ef:8d:bd:0d:ed:83:49:46:5b:3e:8d:fd:4a:
94:f4:37:ce:90:36:7c:01:d3:24:9a:31:42:e3:a4:
c8:f8:90:f3:d8:94:24:db:ec:d6:ab:c2:43:be:b4:
28:4a:1c:19:38:81:14:6b:77:69:0d:e4:77:5a:78:
c4:7c:d7:bc:73:7c:72:8c:98:15:6e:dd:f4:23:0a:
46:6b:58:da:05:7d:8d:fa:e6:0a:60:e4:22:bf:4e:
5d:6f:c2:75:4b:68:08:3b:f1:6c:60:27:7c:48:f3:
a5:85:ee:b2:ab:bf:d0:40:5d:9d:3f:55:6b:01:de:
e9:b8:db:16:a2:9f:95:8d:19:45:d0:73:4f:39:a7:
24:2f:8f:44:40:7d:16:95:72:1a:11:be:c4:3c:5f:
58:60:40:7d:0d:86:38:91:94:23:86:e9:57:5c:e2:
a8:7a:6d:e4:ea:30:f0:1a:0d:25:48:40:d9:99:91:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:08:8E:F9:5D:14:66:66:FA:01:A6:79:BB:EC:38:A5:CD:CC:47
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MVUIjvldFGZm-gGmebvsOKXNzEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.108.0/22
2.17.120.0/22
2.17.192.0/22
2.18.212.0/22
2.19.4.0/22
2.21.112.0/20
2.21.175.0/24
2.23.128.0-2.23.133.255
92.122.184.0/23
92.122.207.0/24
93.191.168.0-93.191.170.255
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
95.101.204.0/22
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::-2a02:2370:20c:ffff:ffff:ffff:ffff:ffff
2a02:2370:4000::/48
2a02:2370:8000::/48
2a02:2370:c000::/48
2a02:2370:f000::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b2:78:5b:29:1b:cf:eb:24:54:0c:6c:0d:6e:d8:1f:3b:1b:
e4:2d:79:ce:1f:f9:b3:df:f0:f8:a7:3b:aa:f0:b6:41:17:b4:
1f:9e:c0:37:02:da:cd:95:bf:e3:0d:fb:d6:76:aa:ca:51:0b:
f2:d9:c4:b6:63:13:63:b8:aa:55:9c:27:d1:bf:30:44:71:74:
22:bc:86:87:0f:c5:11:f5:66:39:75:9f:84:2e:ff:e8:d9:09:
d9:14:86:c8:bc:cc:ad:2d:78:21:09:65:fb:2d:40:a5:f6:ec:
65:18:c2:78:0f:cd:03:42:b2:aa:b4:e3:ae:ae:c0:97:50:fc:
c7:14:c1:f4:b8:3e:8f:3a:3b:52:b9:89:e6:06:1f:e6:9e:5c:
53:71:a1:20:7a:db:d0:8e:9c:5d:78:cb:17:4e:9f:f5:c3:bd:
ee:e0:cb:00:0f:dd:c5:02:8f:47:5f:50:9c:bb:0d:a7:6e:d3:
d5:7e:a6:35:fa:48:73:36:df:68:73:b4:34:1a:7e:4b:7c:8f:
79:f6:da:3f:03:8f:2a:69:96:0b:d9:4b:99:2f:a7:00:44:10:
71:f7:bd:69:12:5a:99:c8:f1:ee:b5:67:53:35:5e:7b:00:2b:
8e:1d:e1:9d:3a:f7:64:94:d8:57:72:b5:6e:e2:b2:58:86:36:
3d:e8:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:46 2025 by rpki-client