Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/2580DhDO7oRxSgRoTYqJtzmDRZ8.roa
File: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (raw, json)
Hash identifier: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=
Subject key identifier: DB:9F:34:0E:10:CE:EE:84:71:4A:04:68:4D:8A:89:B7:39:83:45:9F
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 0194282443AF04F778F26AFF3849F36E5CCE
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/2580DhDO7oRxSgRoTYqJtzmDRZ8.roa
Signing time: Thu 02 Jan 2025 17:50:52 +0000
ROA not before: Thu 02 Jan 2025 17:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39824
IP address blocks: 46.36.128.0/23 maxlen: 24
46.36.130.0/23 maxlen: 24
46.36.132.0/22 maxlen: 24
46.36.136.0/22 maxlen: 24
46.36.140.0/22 maxlen: 24
46.36.144.0/23 maxlen: 24
46.36.146.0/23 maxlen: 24
46.36.148.0/22 maxlen: 24
46.36.152.0/22 maxlen: 24
46.36.156.0/23 maxlen: 24
46.36.158.0/24 maxlen: 24
46.36.159.0/24 maxlen: 24
62.84.32.0/22 maxlen: 24
62.84.36.0/22 maxlen: 24
62.84.40.0/23 maxlen: 24
62.84.42.0/23 maxlen: 24
62.84.44.0/23 maxlen: 24
62.84.46.0/23 maxlen: 24
62.84.48.0/20 maxlen: 24
79.134.32.0/22 maxlen: 24
79.134.36.0/24 maxlen: 24
79.134.37.0/24 maxlen: 24
79.134.38.0/23 maxlen: 24
79.134.40.0/24 maxlen: 24
79.134.41.0/24 maxlen: 24
79.134.42.0/23 maxlen: 24
79.134.44.0/22 maxlen: 24
80.249.137.0/24 maxlen: 24
80.249.138.0/23 maxlen: 24
80.249.140.0/23 maxlen: 24
80.249.142.0/23 maxlen: 24
80.249.152.0/21 maxlen: 24
81.88.144.0/21 maxlen: 24
81.88.152.0/22 maxlen: 24
81.88.156.0/22 maxlen: 24
109.239.32.0/21 maxlen: 24
109.239.40.0/22 maxlen: 24
109.239.44.0/22 maxlen: 24
185.98.76.0/22 maxlen: 24
185.98.88.0/22 maxlen: 24
185.100.224.0/22 maxlen: 24
185.102.116.0/24 maxlen: 24
185.102.117.0/24 maxlen: 24
185.102.118.0/24 maxlen: 24
185.102.119.0/24 maxlen: 24
185.102.128.0/22 maxlen: 24
185.103.168.0/23 maxlen: 24
185.103.170.0/23 maxlen: 24
185.103.176.0/24 maxlen: 24
185.103.177.0/24 maxlen: 24
185.103.178.0/24 maxlen: 24
185.103.179.0/24 maxlen: 24
185.103.184.0/23 maxlen: 24
185.103.186.0/23 maxlen: 24
185.106.156.0/23 maxlen: 24
185.106.158.0/23 maxlen: 24
212.45.80.0/23 maxlen: 24
212.45.82.0/23 maxlen: 24
212.45.84.0/24 maxlen: 24
212.45.85.0/24 maxlen: 24
212.45.86.0/23 maxlen: 24
212.45.88.0/22 maxlen: 24
212.45.92.0/23 maxlen: 24
212.45.94.0/23 maxlen: 24
213.232.196.0/23 maxlen: 24
213.232.201.0/24 maxlen: 24
213.232.218.0/23 maxlen: 24
213.232.220.0/22 maxlen: 24
213.232.224.0/24 maxlen: 24
213.232.230.0/23 maxlen: 24
213.232.242.0/23 maxlen: 24
213.232.244.0/24 maxlen: 24
213.232.246.0/23 maxlen: 24
2a06:1a00::/29 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:43:af:04:f7:78:f2:6a:ff:38:49:f3:6e:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Jan 2 17:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db9f340e10ceee84714a04684d8a89b73983459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:bf:82:21:12:2a:d3:6e:d5:7c:4e:98:7e:
e2:2b:79:be:29:df:14:5d:49:52:43:17:ab:55:a3:
a7:79:a5:b1:ba:44:23:26:50:d2:67:99:18:cb:b0:
ec:0b:71:e7:96:a3:f0:af:fc:32:ff:bb:6f:ed:20:
5e:e3:fd:32:9f:22:8a:e0:c6:04:6b:0e:04:8a:9c:
b8:65:00:1e:fc:4a:cc:3a:5f:5e:69:d3:51:04:78:
05:2e:52:85:92:c6:31:4c:c0:58:ff:7b:5c:6c:0d:
06:ca:5a:90:54:fc:2b:7c:a9:57:30:93:e2:4d:af:
a8:1a:dd:71:8c:8c:1d:e7:4e:9d:93:01:9c:06:6d:
c1:3c:66:1b:ac:fb:e1:de:26:4d:f1:b2:d4:d2:c5:
50:62:43:a9:5d:e5:6e:70:27:ed:32:62:55:15:ac:
31:d7:2c:90:b8:3a:2d:16:4a:ff:ab:7a:44:94:8f:
a6:72:09:b6:6c:e3:8f:0f:9f:58:e5:cf:13:93:51:
cc:4b:bf:fb:f9:c1:f5:e6:54:f4:63:2e:71:fb:e3:
60:0f:8c:3d:b0:e2:4b:8d:47:89:bc:8f:d1:75:6d:
e3:37:f4:fa:f1:cd:e6:f9:a8:c1:7b:2f:90:d6:fd:
a7:28:bb:5a:74:0e:ba:13:1f:34:e6:63:81:a7:de:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:34:0E:10:CE:EE:84:71:4A:04:68:4D:8A:89:B7:39:83:45:9F
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/2580DhDO7oRxSgRoTYqJtzmDRZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/19
62.84.32.0/19
79.134.32.0/20
80.249.137.0-80.249.143.255
80.249.152.0/21
81.88.144.0/20
109.239.32.0/20
185.98.76.0/22
185.98.88.0/22
185.100.224.0/22
185.102.116.0/22
185.102.128.0/22
185.103.168.0/22
185.103.176.0/22
185.103.184.0/22
185.106.156.0/22
212.45.80.0/20
213.232.196.0/23
213.232.201.0/24
213.232.218.0-213.232.224.255
213.232.230.0/23
213.232.242.0-213.232.244.255
213.232.246.0/23
IPv6:
2a06:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
a8:fc:1b:f5:ab:79:93:3e:c9:03:1d:43:56:14:19:00:a6:16:
a8:1e:60:35:d7:a6:41:45:c5:5e:03:68:2c:3c:45:c5:69:7a:
11:e4:c8:20:7e:80:8c:88:c6:5f:c2:cc:d6:23:1b:7d:b1:2f:
bf:55:ba:23:d0:8b:51:d6:48:85:59:c0:41:f0:21:ff:80:49:
46:f2:5e:91:87:c4:26:09:e4:5b:c0:6c:e9:37:20:d6:e9:17:
4d:a6:45:1e:95:de:e4:f9:b5:18:fc:9a:0f:89:23:40:1f:16:
68:70:99:27:13:9a:ae:81:c8:cc:7a:ae:6b:cd:b9:1b:06:32:
c1:85:9b:ae:65:99:3a:da:7b:cf:2b:b9:1b:e4:6a:35:74:60:
e5:5b:6c:33:46:b7:d8:91:f2:77:ca:6a:c7:78:ec:f6:08:e3:
6e:69:21:2f:8a:04:66:4a:49:60:f6:f0:b6:d9:41:30:b7:38:
71:c7:a7:a3:b1:f1:7f:7d:b9:c2:cf:f0:64:cf:3c:4e:f6:af:
a3:cd:87:21:f8:2b:d5:c0:ee:88:27:98:62:43:4b:ea:f3:8f:
59:58:34:25:1d:30:97:b7:c3:a7:da:00:6a:15:25:4d:c2:46:
97:d9:a2:c3:bf:eb:f7:e6:50:08:4b:df:8c:37:ab:18:ff:1f:
f7:62:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:18 2025 by rpki-client