Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1PmO2l2QnbsY0sfx4D9IF3shm4k.roa
File: 1PmO2l2QnbsY0sfx4D9IF3shm4k.roa (raw, json)
Hash identifier: ldfbm0KJZ8ZZGhQybJxg/Xg1lmMF4VlV0XCKr8D/D2s=
Subject key identifier: D4:F9:8E:DA:5D:90:9D:BB:18:D2:C7:F1:E0:3F:48:17:7B:21:9B:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195D7DDC622EA13E71AEA71CCD769D2840E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1PmO2l2QnbsY0sfx4D9IF3shm4k.roa
Signing time: Thu 27 Mar 2025 13:49:50 +0000
ROA not before: Thu 27 Mar 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:dd:c6:22:ea:13:e7:1a:ea:71:cc:d7:69:d2:84:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 27 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4f98eda5d909dbb18d2c7f1e03f48177b219b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:28:5a:06:47:1e:05:fb:1f:e5:88:59:89:
94:5c:3d:3a:76:6b:5c:43:2b:5a:6c:8f:bb:48:88:
60:f3:b6:4e:9c:db:ef:f4:6b:7f:f0:be:99:1c:16:
8c:da:03:75:32:22:5b:32:54:1b:dd:ce:40:b1:64:
79:d6:90:5a:e8:5c:44:95:4f:27:2c:64:68:cb:d0:
83:3e:69:23:21:5d:a1:40:14:27:fa:f4:d7:b0:b0:
cb:4d:f2:a7:84:4b:bd:75:a2:09:db:3d:f2:09:23:
ef:70:d1:9a:23:97:aa:d0:00:43:c2:18:c2:6d:aa:
72:bf:ae:21:87:90:25:85:dd:e0:5b:31:23:44:5e:
7d:54:10:cc:3c:bc:13:f5:76:c1:43:d5:75:43:49:
74:d0:a1:66:e7:c8:a5:1d:a9:f5:fe:cb:f1:66:da:
5c:d8:fc:8b:e9:28:7b:2c:84:92:75:69:89:28:77:
9e:bf:70:b4:51:0e:fc:24:8c:1b:c7:85:48:7f:26:
93:24:79:ec:08:b2:27:ce:3f:f8:65:fc:8a:43:04:
c2:a0:8c:de:e4:06:50:b7:08:ac:44:57:04:e9:98:
a5:6a:da:79:87:95:d0:b0:3e:da:6a:e9:cd:04:eb:
af:a9:8b:cb:c1:8d:6e:04:0e:d8:95:eb:0b:a0:3f:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:8E:DA:5D:90:9D:BB:18:D2:C7:F1:E0:3F:48:17:7B:21:9B:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1PmO2l2QnbsY0sfx4D9IF3shm4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d8:65:1e:00:07:ee:aa:c8:26:78:45:85:e3:68:db:80:d8:
67:55:ea:9d:5f:a5:e6:74:cf:07:43:dc:2a:95:7e:e8:ca:b3:
f3:cf:05:54:42:d2:ab:59:ff:df:5e:7c:96:8c:99:03:f2:4a:
90:d1:22:af:2f:a4:a0:34:8d:ef:a9:5f:50:09:12:80:31:3c:
ef:8d:e5:ed:d5:17:d2:a6:65:ca:41:9a:8e:54:3e:e1:6b:25:
91:bc:36:06:5e:b4:b2:33:26:ff:0d:a2:d7:f1:2e:a3:eb:73:
95:6b:4d:7a:4c:85:19:6e:23:78:a3:fb:bc:83:cb:cc:4c:ae:
4e:4f:b2:73:d2:f7:ff:89:f8:be:06:af:bb:e4:b0:aa:9a:64:
e4:8a:65:ea:8a:25:63:78:5e:5a:82:58:fb:3c:19:79:a7:8a:
5b:c0:20:ee:46:1b:58:1c:d7:a4:f6:c8:d5:00:c0:2d:fc:4f:
b0:57:b3:6f:d1:be:ca:0a:4c:c0:75:4c:70:77:0b:53:5e:9a:
af:d4:13:41:45:68:a9:f8:b0:0e:06:a8:9c:d1:f8:13:cf:e0:
da:5e:56:c3:04:22:de:67:0d:30:5a:88:ad:3c:96:69:0d:d4:
cf:d2:e3:59:f1:74:08:a1:e1:fb:2f:a8:8f:c4:26:57:0c:80:
37:f7:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:39 2025 by rpki-client