Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa
File: aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa (raw, json)
Hash identifier: hgfUPkMG26dk9GrdhtkfCBFdtiBPxmoVKLstEH5RqAo=
Subject key identifier: 68:94:49:99:CF:53:95:FD:C9:58:96:0A:5E:F8:74:BC:3C:5C:D4:B0
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019595E8B134691F342694AE21F5253BB607
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa
Signing time: Fri 14 Mar 2025 18:26:49 +0000
ROA not before: Fri 14 Mar 2025 18:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:441::/48 maxlen: 48
2a03:5000:442::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:95:e8:b1:34:69:1f:34:26:94:ae:21:f5:25:3b:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Mar 14 18:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68944999cf5395fdc958960a5ef874bc3c5cd4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:67:71:ca:85:65:54:2b:b6:d4:45:72:34:
62:89:af:d7:a1:40:62:30:e9:5a:ef:63:b5:d0:ff:
40:6a:08:e7:10:96:ba:dc:71:0d:00:c5:3d:cd:b4:
46:61:87:84:2a:89:85:85:15:32:98:e0:c1:91:b7:
40:aa:bd:5e:ee:fe:9c:cc:0c:09:5c:88:ff:b9:fd:
63:08:70:62:5a:28:0c:c4:48:6b:f1:a0:0a:34:85:
9b:9d:2b:ae:59:e1:95:a7:ae:a5:b9:cd:e6:a3:a7:
9a:4d:f4:a3:e8:d2:a7:2c:c8:b2:6d:90:b0:1e:e5:
aa:87:87:06:c6:78:46:a4:d1:38:f1:5e:36:33:86:
b1:4a:dd:b3:e3:29:40:29:a8:9a:3a:65:57:4b:b5:
98:b7:d4:71:50:98:93:e4:a4:42:bb:68:af:a4:50:
ca:77:0e:55:ee:a2:d4:a1:08:af:ae:36:5c:52:c9:
f6:98:ea:10:8b:ac:75:ff:23:ee:5a:c2:8e:4d:d1:
a9:15:66:d8:7e:4e:ca:df:a6:8d:fd:52:4a:84:0a:
33:d9:1c:27:37:47:c7:26:f7:1a:27:fb:68:83:f9:
da:84:f1:72:b2:a6:db:42:3e:27:7a:22:93:be:cc:
f0:f9:34:e1:75:f8:9b:a6:64:bd:8b:5e:4b:f3:ce:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:94:49:99:CF:53:95:FD:C9:58:96:0A:5E:F8:74:BC:3C:5C:D4:B0
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bb:f8:18:ac:75:17:eb:cb:9c:0b:7c:f4:9e:54:88:4d:bc:44:
01:3b:7d:4f:1a:ed:cc:7d:8e:fd:54:58:b7:1b:d7:46:14:cb:
6d:31:ea:ba:1b:f7:43:dd:3f:87:aa:63:b9:67:5d:76:55:a6:
00:8b:3d:cb:98:6c:d2:d8:5a:f2:1a:d7:18:0c:0c:17:0e:8f:
26:c6:70:b2:66:87:4a:b0:0a:85:1a:22:40:b0:68:ed:65:15:
d3:66:7b:18:f2:0a:cc:58:16:09:b2:09:3e:68:5d:ee:e2:45:
2e:72:c9:0a:14:d4:8a:67:3a:d9:72:1f:e6:67:56:4b:01:77:
7c:7c:f4:90:7b:d6:89:4b:8f:8a:4e:54:9c:f1:8c:ad:2a:c4:
dd:67:12:ac:43:57:46:d7:d3:b7:4b:b7:c3:8c:d2:8d:e9:33:
f3:71:8a:52:b7:c6:af:32:84:ea:f4:08:68:f3:04:18:43:00:
97:a5:e3:ec:01:35:e8:d8:a3:06:82:24:44:59:d6:e3:39:f4:
56:a0:b7:ad:0c:16:8a:92:6e:f6:e3:ee:f5:5f:77:61:58:cc:
01:3b:48:81:9d:eb:3c:d1:61:44:e3:ba:d9:6f:a4:58:ef:e1:
db:da:91:df:3c:d5:11:97:a3:b9:4a:9f:d2:01:ed:db:5a:c9:
be:01:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:39:14 2025 by rpki-client