Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iJhote5hlTzr7iZBs3RH4sIBmI4.roa
File: iJhote5hlTzr7iZBs3RH4sIBmI4.roa (raw, json)
Hash identifier: 9KGuToq7A3Qh7DWu4j0QWU9MKBt1MROra5DyTey9X2s=
Subject key identifier: 88:98:68:B5:EE:61:95:3C:EB:EE:26:41:B3:74:47:E2:C2:01:98:8E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01948E0E79B788FAD05E9D145AA075360938
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iJhote5hlTzr7iZBs3RH4sIBmI4.roa
Signing time: Wed 22 Jan 2025 12:48:20 +0000
ROA not before: Wed 22 Jan 2025 12:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:342::/32 maxlen: 32
2a09:346::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:0e:79:b7:88:fa:d0:5e:9d:14:5a:a0:75:36:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 22 12:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=889868b5ee61953cebee2641b37447e2c201988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:9e:41:9f:9f:39:52:f6:a2:03:13:1c:b5:
e4:14:4c:b9:b5:d6:16:46:02:39:49:76:2e:1d:bf:
ba:c7:80:5f:ff:c8:4b:7a:d9:25:d4:8b:22:34:cd:
91:07:67:ab:80:95:c4:96:14:d1:c5:b6:de:0d:a7:
9c:9c:a0:b0:cd:a3:48:d3:84:07:a7:55:8a:3e:28:
c6:98:4d:df:94:f4:bd:02:5f:20:bf:64:ef:88:b9:
c5:6d:23:f6:2b:ce:f0:77:17:b2:31:31:26:1c:ca:
0f:a5:5c:a6:6d:46:35:36:ec:e9:e4:fa:3b:2a:b2:
39:ae:f5:0b:5b:ad:b6:3a:a0:96:4f:5b:01:b3:38:
d0:3e:e3:9a:0b:64:fd:48:dc:12:a1:c4:65:36:f7:
77:8f:dc:fb:92:03:1d:23:28:68:ca:46:82:7e:c6:
66:e8:5d:f1:26:31:51:bc:90:45:3b:21:64:e1:4a:
e0:01:2a:ee:eb:e0:49:9f:2b:a1:9b:3e:df:e9:9b:
dd:65:af:0f:7f:e5:7c:66:a8:86:f6:7e:03:15:c6:
dc:2c:bb:43:1d:8f:78:3a:e9:e9:c1:f5:3d:b6:8f:
92:1d:6b:87:75:aa:62:97:7d:ad:b9:f5:f6:d4:58:
18:de:e5:0f:31:00:de:11:46:ff:06:8a:cd:81:e7:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:68:B5:EE:61:95:3C:EB:EE:26:41:B3:74:47:E2:C2:01:98:8E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iJhote5hlTzr7iZBs3RH4sIBmI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.88.136.0/24
45.94.171.0/24
45.132.180.0/24
45.132.182.0/23
45.151.3.0/24
77.83.37.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:342::/32
2a09:346::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
17:35:16:20:78:a7:d7:cb:88:70:4a:ae:64:14:d4:12:51:36:
a9:57:f5:1a:ac:16:9e:ab:78:83:83:b2:ab:c6:70:ac:9f:86:
a6:8d:f0:b2:56:b7:4f:ea:4c:89:e5:04:e7:e3:19:08:9d:b2:
8a:59:f9:b2:8f:12:42:88:17:c1:59:35:c0:8a:9d:2d:14:86:
85:47:2a:40:7a:3d:4e:80:fe:9e:db:d9:0c:2d:0d:03:d3:17:
9b:9c:0a:68:f5:0f:cd:e1:87:a3:ec:7e:71:0f:ef:23:21:5b:
d4:89:c7:39:e6:04:d5:d1:f4:c5:55:76:1b:46:f4:0d:7a:63:
53:7e:80:a0:4c:2d:c4:de:52:48:ff:41:48:c4:02:25:ed:81:
f4:bb:52:83:f5:6c:88:11:16:c8:ea:cf:d7:87:3b:c8:6e:74:
1a:d3:ee:c8:81:55:13:26:cb:85:ee:4a:29:2b:39:b6:5c:ae:
ab:a1:3f:a3:4f:40:ad:d7:68:ba:84:6d:9f:6f:12:6b:69:b6:
7e:2b:93:7d:f1:e5:8e:96:71:77:2e:97:c8:76:e0:0f:60:83:
7d:99:6e:83:e1:f3:7a:83:c8:14:90:c1:8a:46:d8:2a:cf:3d:
4a:6c:3b:34:f9:50:c3:e6:96:01:db:cf:36:ce:e5:63:49:97:
39:7d:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:03 2025 by rpki-client