Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/e6kxZc3tMbNySUMLqvTyDRY3md0.roa
File: e6kxZc3tMbNySUMLqvTyDRY3md0.roa (raw, json)
Hash identifier: 4/lORB//NyzuEK/cf4sev0Y5y259VR670QDT/nMa2VM=
Subject key identifier: 7B:A9:31:65:CD:ED:31:B3:72:49:43:0B:AA:F4:F2:0D:16:37:99:DD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D727CB762E906295700EBB350A94AA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/e6kxZc3tMbNySUMLqvTyDRY3md0.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:cb:76:2e:90:62:95:70:0e:bb:35:0a:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba93165cded31b37249430baaf4f20d163799dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:c9:52:54:95:e0:01:c3:d2:49:95:82:98:
ae:d0:46:a2:a9:a5:ff:1e:9a:c3:df:2e:24:f2:e8:
93:cf:f3:07:7f:03:35:25:f1:d9:aa:f8:13:b6:08:
c2:3a:8a:30:6b:89:e5:ff:97:6a:1f:40:b0:ee:fd:
6b:5e:5d:34:e6:74:76:be:b7:4a:a4:03:da:3d:a8:
d4:d5:cc:1b:e1:84:92:a9:94:92:a4:85:1f:4c:66:
ad:67:4a:17:a5:a6:3f:bc:dc:5e:be:bd:a9:38:10:
5a:1c:7b:e3:18:40:da:df:4b:6b:10:36:f1:a9:f9:
8a:fc:52:eb:8a:2d:77:de:fe:f6:a9:69:78:b1:88:
47:42:08:ee:d3:0d:ef:71:9a:31:30:2c:aa:78:a0:
07:26:38:cc:4c:b0:17:49:0a:2a:1f:b8:cb:a6:16:
8d:62:78:4f:dc:cd:0d:2d:4e:bb:d5:41:05:38:0c:
93:76:88:f1:65:63:f9:59:e7:d1:b6:51:80:e1:2b:
44:2e:b7:e3:e5:bf:86:b4:10:73:9f:3b:59:04:5c:
dc:11:30:c7:b8:c2:a3:76:1a:df:f9:dc:d6:64:90:
a9:64:23:c6:f8:fd:c3:e7:be:b0:ba:43:ae:72:95:
11:05:e7:ab:88:fc:ee:dc:06:a2:1f:59:60:e2:10:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:31:65:CD:ED:31:B3:72:49:43:0B:AA:F4:F2:0D:16:37:99:DD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/e6kxZc3tMbNySUMLqvTyDRY3md0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.229.0/24
185.125.231.0/24
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
b4:99:d3:a2:ef:0b:e3:15:c2:3c:b3:3a:e7:a4:2f:69:83:bd:
8a:b3:e8:77:1d:45:cc:fb:0a:fd:68:b1:73:bc:1b:46:3a:cc:
4a:f8:2a:09:95:3e:8d:b0:78:7a:27:b6:68:6b:98:fc:81:0e:
fc:35:16:7e:4e:47:ab:5a:d2:c5:b5:71:9f:e7:49:d1:cd:4e:
a9:df:7a:49:3b:31:91:f4:2b:71:8f:98:4e:af:94:96:b8:db:
d6:f1:44:65:ad:16:72:86:bc:91:6f:2e:0a:46:76:2a:88:4f:
17:c7:90:3a:e3:40:6f:a6:63:59:41:7e:94:05:ca:b6:f6:cf:
28:c4:dd:05:89:4d:09:36:b4:ff:ce:01:8d:e6:8f:ac:1a:95:
5c:5e:3d:6e:35:a4:ee:d0:a2:c7:fb:be:d4:59:5b:41:b5:49:
bf:e3:c3:bb:6c:5a:9c:3e:6f:7b:7c:cb:ca:61:da:e7:7c:c8:
66:72:c6:98:75:3b:c0:75:5d:5a:37:e3:fc:de:3a:43:16:e0:
fa:a0:e7:c4:75:92:e9:85:78:1d:f4:9d:a4:99:46:3e:eb:1d:
ad:58:03:6f:d6:9c:6d:bd:16:7a:64:dd:b2:c1:40:48:77:d3:
6b:b1:a2:be:0d:9a:1b:a9:31:19:08:30:99:04:4c:a6:c9:fa:
4b:2b:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:42:56 2025 by rpki-client