Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/kXAoycjFnk5ToJYqqTkBxzOraGU.roa
File: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (raw, json)
Hash identifier: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=
Subject key identifier: 91:70:28:C9:C8:C5:9E:4E:53:A0:96:2A:A9:39:01:C7:33:AB:68:65
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019421438CCA69ACA40B911E6B3892AA0446
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/kXAoycjFnk5ToJYqqTkBxzOraGU.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206206
IP address blocks: 37.156.104.0/22 maxlen: 24
37.156.104.0/24 maxlen: 24
37.156.105.0/24 maxlen: 24
37.156.106.0/24 maxlen: 24
37.156.107.0/24 maxlen: 24
185.24.60.0/22 maxlen: 24
185.24.60.0/23 maxlen: 24
185.24.60.0/24 maxlen: 24
185.24.61.0/24 maxlen: 24
185.24.62.0/23 maxlen: 24
185.24.62.0/24 maxlen: 24
185.24.63.0/24 maxlen: 24
185.106.28.0/23 maxlen: 24
185.106.30.0/23 maxlen: 24
185.136.148.0/23 maxlen: 24
185.136.148.0/24 maxlen: 24
185.136.149.0/24 maxlen: 24
185.136.150.0/23 maxlen: 24
185.136.150.0/24 maxlen: 24
185.136.151.0/24 maxlen: 24
185.187.76.0/22 maxlen: 24
185.187.76.0/24 maxlen: 24
185.187.77.0/24 maxlen: 24
185.187.78.0/24 maxlen: 24
185.187.79.0/24 maxlen: 24
185.244.152.0/22 maxlen: 24
185.244.152.0/23 maxlen: 24
185.244.152.0/24 maxlen: 24
185.244.153.0/24 maxlen: 24
185.244.154.0/23 maxlen: 24
185.244.154.0/24 maxlen: 24
185.244.155.0/24 maxlen: 24
212.237.112.0/21 maxlen: 24
212.237.112.0/23 maxlen: 24
212.237.112.0/24 maxlen: 24
212.237.113.0/24 maxlen: 24
212.237.114.0/23 maxlen: 24
212.237.114.0/24 maxlen: 24
212.237.115.0/24 maxlen: 24
212.237.116.0/23 maxlen: 24
212.237.116.0/24 maxlen: 24
212.237.117.0/24 maxlen: 24
212.237.118.0/23 maxlen: 24
212.237.118.0/24 maxlen: 24
212.237.119.0/24 maxlen: 24
212.237.120.0/22 maxlen: 24
212.237.120.0/23 maxlen: 24
212.237.120.0/24 maxlen: 24
212.237.121.0/24 maxlen: 24
212.237.122.0/23 maxlen: 24
212.237.122.0/24 maxlen: 24
212.237.123.0/24 maxlen: 24
212.237.124.0/22 maxlen: 24
212.237.124.0/24 maxlen: 24
212.237.125.0/24 maxlen: 24
212.237.126.0/24 maxlen: 24
212.237.127.0/24 maxlen: 24
213.32.252.0/23 maxlen: 24
213.32.254.0/23 maxlen: 24
2a06:fd80::/48 maxlen: 48
2a06:fd80::/64 maxlen: 64
2a06:fd80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8c:ca:69:ac:a4:0b:91:1e:6b:38:92:aa:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=917028c9c8c59e4e53a0962aa93901c733ab6865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:9c:dd:16:43:8c:84:ea:ac:49:dc:94:dc:
b9:5e:ca:cf:31:5e:14:ec:4b:55:eb:a4:ec:18:6a:
90:52:51:0f:2d:4a:ec:1f:4a:4d:62:ea:7b:76:ad:
d8:90:95:1a:ad:97:fe:04:1b:e1:d8:b4:2c:b6:46:
47:02:32:35:57:b8:1b:34:72:60:c9:42:0d:c1:39:
bd:13:aa:fd:8c:66:b8:73:4c:68:a5:e2:9b:c9:1e:
17:f7:3c:1e:f7:ba:53:d8:ad:32:da:6b:71:7c:83:
b2:e7:7f:d9:97:7f:ad:9e:7b:7f:5d:94:a4:67:10:
ee:4f:17:02:bc:e8:bb:46:c8:23:8e:85:34:bf:e9:
b3:18:49:3c:1a:a3:3d:d9:b5:40:19:27:89:3c:eb:
c6:61:30:16:63:73:48:12:f3:a5:e8:50:e7:7d:0b:
c0:8b:2c:9b:40:96:80:c2:c3:80:ce:7a:56:0a:01:
69:1e:f0:99:5a:34:63:d2:84:59:10:fa:e6:15:9d:
c0:26:35:39:36:1a:7e:14:3f:fb:61:a2:a9:1d:38:
6a:6b:d5:7d:35:74:8d:cc:e4:4b:a1:b0:72:be:fc:
5c:be:e0:2a:38:25:79:54:21:09:44:e3:f7:fc:25:
7d:2e:cc:7e:14:c1:3c:61:71:6c:74:3f:ed:85:57:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:28:C9:C8:C5:9E:4E:53:A0:96:2A:A9:39:01:C7:33:AB:68:65
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/kXAoycjFnk5ToJYqqTkBxzOraGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.104.0/22
185.24.60.0/22
185.106.28.0/22
185.136.148.0/22
185.187.76.0/22
185.244.152.0/22
212.237.112.0/20
213.32.252.0/22
IPv6:
2a06:fd80::/47
Signature Algorithm: sha256WithRSAEncryption
50:e9:8b:ea:72:be:bb:0b:ca:38:55:45:c6:e6:dd:5d:66:d8:
46:c3:a5:8b:45:c2:fd:b4:c5:46:ca:8e:5f:d9:a3:31:c6:86:
73:04:4e:4e:18:e6:0d:c0:4c:65:bd:be:d6:69:c1:84:1c:a5:
82:30:bf:41:26:17:55:bb:66:b8:dd:de:2e:66:d4:82:92:7a:
a3:34:c8:23:a0:63:6c:cc:de:02:5a:8e:c9:ed:d2:f1:cf:c5:
46:82:db:58:05:f1:cd:1e:e1:03:af:a5:29:33:cf:95:ff:39:
93:68:b2:6f:57:0d:4b:6a:17:91:ef:01:52:30:8a:c5:7d:8e:
0c:87:96:d1:99:d8:4b:9a:ac:ee:84:29:cb:53:46:8d:bc:b7:
85:0c:9d:b3:27:ec:d8:72:5e:31:cf:05:23:0b:30:77:0c:82:
0a:a6:51:a5:a4:4a:e4:43:e9:b8:a1:1e:82:f8:be:de:80:43:
5b:40:c6:e2:b7:9a:9b:3e:14:42:b1:69:5f:1c:81:37:99:d4:
03:9b:ba:34:79:ce:34:20:b6:ab:99:b8:db:fc:a8:f3:6b:c6:
b1:06:31:cc:01:f8:1f:c5:3b:a8:e4:31:9a:d1:c0:3f:c5:cb:
e3:49:1d:7d:c0:59:f4:a3:2d:6b:b5:8e:ec:dd:fc:00:92:0b:
e9:77:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:32 2025 by rpki-client