Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/arOa3J-t3owf_XtRMu8AqiVl46Q.roa
File: arOa3J-t3owf_XtRMu8AqiVl46Q.roa (raw, json)
Hash identifier: 3tCgvBi5UeLybNUMkcrXxfx0FTK7y0ZHXKYbN1KOkog=
Subject key identifier: 6A:B3:9A:DC:9F:AD:DE:8C:1F:FD:7B:51:32:EF:00:AA:25:65:E3:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195E0FE32D211E45882495D295C2D0968DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/arOa3J-t3owf_XtRMu8AqiVl46Q.roa
Signing time: Sat 29 Mar 2025 08:21:50 +0000
ROA not before: Sat 29 Mar 2025 08:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.157.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.18.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.92.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:fe:32:d2:11:e4:58:82:49:5d:29:5c:2d:09:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 29 08:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab39adc9fadde8c1ffd7b5132ef00aa2565e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:d1:d7:b2:f2:71:01:f1:0a:d3:da:4f:14:
4b:ad:c9:72:51:b0:eb:b9:57:85:af:80:d0:62:df:
4c:1c:e3:f8:ca:90:08:b7:2f:a2:aa:cc:1d:bd:a0:
89:13:77:9b:bf:b9:3c:6f:55:f8:8c:01:83:46:a9:
8a:72:0d:4f:b3:5c:72:88:73:0a:5e:09:08:f2:43:
d1:2d:16:49:22:08:69:bf:ba:be:d0:94:14:3c:fc:
2f:7e:61:f6:b9:24:a5:07:42:36:25:24:bf:33:79:
14:ab:8d:fc:69:0e:87:93:16:81:fa:fd:61:10:34:
83:cf:a9:7c:3b:24:d8:eb:9b:40:2b:3a:ab:1c:ee:
9a:e8:0a:82:f5:0f:32:cb:c3:bf:fb:8c:a8:52:43:
ec:97:1f:a9:88:9b:be:38:cb:c5:fe:86:e9:f8:66:
a8:72:5b:86:18:dc:fd:f9:5d:cb:33:40:f0:56:68:
be:a4:0f:45:b4:9b:22:6c:53:9c:08:bc:f9:14:f7:
5a:b0:69:b2:3d:b7:b6:e7:67:d2:a4:33:ad:73:7b:
96:ab:2d:17:58:35:6e:0c:d8:b9:92:4f:1b:a9:8f:
00:61:78:92:23:ce:8d:96:3e:e0:11:c6:e3:6c:73:
2f:f9:68:cb:a0:eb:bc:88:e7:d0:f7:b0:5f:11:6f:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:9A:DC:9F:AD:DE:8C:1F:FD:7B:51:32:EF:00:AA:25:65:E3:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/arOa3J-t3owf_XtRMu8AqiVl46Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.157.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.128.96.0/24
45.139.106.0/24
45.141.158.0/24
45.151.90.0/23
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0/24
87.120.166.0/24
87.121.18.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.70.0/24
91.92.240.0/20
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.92.0/24
94.156.113.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:78:a0:5a:e2:dc:83:43:59:d2:2f:97:e4:5f:e6:16:67:1d:
7f:42:33:25:eb:76:a7:84:ee:a3:73:99:6b:c1:23:81:22:06:
fb:ac:a5:e8:c6:1d:1b:29:cf:2b:a4:7c:87:be:b8:1f:c3:48:
39:61:db:11:a6:9c:df:b3:12:42:91:0a:a9:c3:5f:02:13:e2:
71:60:01:22:ff:55:3c:b1:aa:f4:65:c9:6d:02:05:c4:94:d4:
a9:4f:16:29:90:65:96:ee:0a:99:c2:fd:ba:7f:f2:97:e7:84:
91:2d:b5:ac:a9:86:3b:61:b1:af:6c:3d:71:17:ae:80:37:03:
40:cf:d8:06:56:23:31:0d:27:9d:bf:57:5e:aa:cb:bb:9f:70:
be:eb:08:e5:f4:97:fb:30:c1:b5:c4:ed:df:87:d1:86:5d:c1:
d5:f9:6a:03:a8:eb:6a:6d:bd:c4:ef:c9:aa:9e:bc:b4:ea:2e:
82:95:e7:b1:11:9f:85:82:b2:79:f7:7f:66:5d:a8:1d:ef:19:
d9:35:65:91:cc:2b:e2:cc:fd:7a:70:bc:cc:53:9d:f7:78:d7:
d8:f1:fa:09:68:40:49:f2:b2:39:e6:b5:f5:b2:b2:33:24:5e:
ce:6b:9d:ac:73:04:ac:53:4a:1c:aa:11:8c:b6:ed:3f:2b:39:
cb:eb:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:03 2025 by rpki-client