Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Ere2qliMwsAC5KlCxwkcYGwt5bg.roa
File: Ere2qliMwsAC5KlCxwkcYGwt5bg.roa (raw, json)
Hash identifier: uxdOngJ08K0JSktJRzPCcc2dPJBM0mtYJ7R3h3Dejrk=
Subject key identifier: 12:B7:B6:AA:58:8C:C2:C0:02:E4:A9:42:C7:09:1C:60:6C:2D:E5:B8
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019489009EC3F03C4714A9DAC7C33BCFCE19
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Ere2qliMwsAC5KlCxwkcYGwt5bg.roa
Signing time: Tue 21 Jan 2025 13:15:06 +0000
ROA not before: Tue 21 Jan 2025 13:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.69.32.0/24 maxlen: 24
103.69.33.0/24 maxlen: 24
103.69.34.0/24 maxlen: 24
103.69.35.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.93.43.0/24 maxlen: 24
103.111.0.0/24 maxlen: 24
103.111.1.0/24 maxlen: 24
103.111.2.0/24 maxlen: 24
103.111.3.0/24 maxlen: 24
103.204.120.0/24 maxlen: 24
103.204.121.0/24 maxlen: 24
103.204.122.0/24 maxlen: 24
103.204.123.0/24 maxlen: 24
103.254.240.0/24 maxlen: 24
103.254.241.0/24 maxlen: 24
103.254.242.0/24 maxlen: 24
103.254.243.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.153.124.0/22 maxlen: 24
185.153.124.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:00:9e:c3:f0:3c:47:14:a9:da:c7:c3:3b:cf:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 21 13:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12b7b6aa588cc2c002e4a942c7091c606c2de5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:e8:b1:a0:70:25:5c:da:e0:80:b6:03:45:
2f:af:dd:b6:47:67:91:90:71:97:0c:9d:04:de:10:
ac:6d:a9:53:b5:7e:15:5d:d4:d5:62:54:a4:5b:00:
50:74:cf:5c:98:4f:d0:9f:39:ba:4d:62:59:91:5e:
c1:13:75:51:28:a6:b3:f5:c4:c2:3c:aa:ff:40:2a:
2f:31:19:a1:1a:08:25:26:f6:53:47:b9:32:69:bb:
a9:f6:ab:ea:2f:1b:f0:a7:bf:93:2d:74:b8:86:3b:
df:bc:50:e8:bb:ec:b5:2a:18:e4:a2:26:cd:c0:d3:
80:3b:f6:66:0c:18:ee:9d:06:d4:43:62:30:fb:43:
e9:e2:eb:d6:b5:38:f9:38:11:7c:f7:ac:84:5c:ac:
7f:1c:3a:0f:76:b6:d2:ec:7a:92:4f:f8:7d:c9:b1:
dd:cf:46:44:70:1a:5b:95:38:0d:ea:e6:ce:82:97:
88:43:30:4d:c5:03:b5:c6:d7:64:0a:3c:b9:fa:e8:
79:99:da:41:89:3a:c9:03:58:5c:a7:4d:13:0e:33:
1f:d5:b6:27:9e:06:ae:16:8d:e3:10:44:56:d5:90:
55:e6:b7:fc:fb:30:9f:8e:3d:a6:b1:57:b6:d5:ed:
62:f4:56:73:9c:74:9c:a2:08:7d:59:7c:71:8f:ac:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:B6:AA:58:8C:C2:C0:02:E4:A9:42:C7:09:1C:60:6C:2D:E5:B8
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Ere2qliMwsAC5KlCxwkcYGwt5bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.25.0-45.142.27.255
103.69.32.0/22
103.93.40.0/22
103.111.0.0/22
103.204.120.0/22
103.254.240.0/22
109.104.132.0/24
109.104.135.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/22
185.153.124.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
6e:27:ee:ff:92:2f:c1:5d:20:93:7d:75:5d:f3:83:20:7b:23:
b2:9b:4e:1d:ea:c2:c8:81:e4:58:2f:05:37:a4:59:99:01:b4:
89:b4:eb:ca:a7:94:17:30:25:20:b7:cf:03:d7:bf:1b:51:ef:
f8:01:c0:df:c1:d1:75:dd:00:52:2b:30:1c:32:81:23:c8:61:
c5:f1:12:e9:57:33:3a:bd:fe:e1:60:f2:77:f6:9f:f9:0d:65:
2f:c9:83:e9:25:8b:22:36:1e:c9:e4:05:d1:d2:a5:b5:37:31:
39:6f:df:13:50:4a:b1:ea:2c:90:cd:71:fd:0e:d5:66:f4:21:
ae:af:de:da:bc:93:44:55:6f:8f:9b:8a:b9:36:ac:c6:92:60:
59:4a:23:95:92:33:ff:55:8b:6f:29:b5:1f:91:16:b5:63:7c:
30:7e:30:d8:86:60:39:f9:52:3a:61:a8:4f:3b:51:b0:1a:18:
41:63:63:9c:0b:95:33:3e:3d:9f:66:cd:5e:e1:2d:18:2e:d1:
ce:c4:ef:a2:29:95:46:4e:b1:fb:2d:03:7f:8e:f6:10:20:39:
a3:5a:7f:3f:f7:b9:7c:d1:0c:17:31:ab:c9:6f:5f:5a:e3:b7:
9e:04:32:ae:52:ec:f2:e6:50:e7:fd:da:4b:f9:04:2d:b7:09:
1a:b3:d9:b1
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAZSJAJ7D8DxHFKnax8M7z84ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjUwMTIxMTMxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmI3YjZhYTU4OGNjMmMwMDJlNGE5NDJjNzA5MWM2MDZjMmRlNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYTosaBwJVza4IC2A0Uvr922R2eR
kHGXDJ0E3hCsbalTtX4VXdTVYlSkWwBQdM9cmE/Qnzm6TWJZkV7BE3VRKKaz9cTC
PKr/QCovMRmhGgglJvZTR7kyabup9qvqLxvwp7+TLXS4hjvfvFDou+y1KhjkoibN
wNOAO/ZmDBjunQbUQ2Iw+0Pp4uvWtTj5OBF896yEXKx/HDoPdrbS7HqST/h9ybHd
z0ZEcBpblTgN6ubOgpeIQzBNxQO1xtdkCjy5+uh5mdpBiTrJA1hcp00TDjMf1bYn
ngauFo3jEERW1ZBV5rf8+zCfjj2msVe21e1i9FZznHScogh9WXxxj6wpOQIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFBK3tqpYjMLAAuSpQscJHGBsLeW4MB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvRXJlMnFsaU13c0FDNUtsQ3h3a2NZR3d0NWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzBkBAIAATBeAwQDH6uY
MAwDBAAtjhkDBAItjhgDBAJnRSADBAJnXSgDBAJnbwADBAJnzHgDBAJn/vADBABt
aIQwDAMEAG1ohwMEBG1ogAMEAm1onAMEApAwNAMEArk1ZAMEArmZfDBTBAIAAjBN
AwUDKgQnwAMFAyoJbkADBQMqCW7AAwUDKg0nwAMFAyoNQsADBQMqDUpAAwUDKg4/
AAMFAyoOTwADBQMqDtTAAwUDKg9CwAMFAyoPqIAwDQYJKoZIhvcNAQELBQADggEB
AG4n7v+SL8FdIJN9dV3zgyB7I7KbTh3qwsiB5FgvBTekWZkBtIm068qnlBcwJSC3
zwPXvxtR7/gBwN/B0XXdAFIrMBwygSPIYcXxEulXMzq9/uFg8nf2n/kNZS/Jg+kl
iyI2HsnkBdHSpbU3MTlv3xNQSrHqLJDNcf0O1Wb0Ia6v3tq8k0RVb4+birk2rMaS
YFlKI5WSM/9Vi28ptR+RFrVjfDB+MNiGYDn5UjphqE87UbAaGEFjY5wLlTM+PZ9m
zV7hLRgu0c7E76IplUZOsfstA3+O9hAgOaNafz/3uXzRDBcxq8lvX1rjt54EMq5S
7PLmUOf92kv5BC23CRqz2bE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:57 2025 by rpki-client