Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/U0vj1TyhZrPabDq0AEJjNuvt8eg.roa
File: U0vj1TyhZrPabDq0AEJjNuvt8eg.roa (raw, json)
Hash identifier: hTguhLKVIg/tSDLq/xVKPzrcfzgpggBtEJnJy7BITyc=
Subject key identifier: 53:4B:E3:D5:3C:A1:66:B3:DA:6C:3A:B4:00:42:63:36:EB:ED:F1:E8
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018D7CDB2F1638444BC941145002E5D223FF
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/U0vj1TyhZrPabDq0AEJjNuvt8eg.roa
Signing time: Tue 06 Feb 2024 05:19:15 +0000
ROA not before: Tue 06 Feb 2024 05:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25003
IP address blocks: 80.74.96.0/19 maxlen: 19
80.74.96.0/22 maxlen: 22
80.74.96.0/23 maxlen: 23
80.74.96.0/24 maxlen: 24
80.74.97.0/24 maxlen: 24
80.74.99.0/24 maxlen: 24
80.74.100.0/22 maxlen: 22
80.74.100.0/23 maxlen: 23
80.74.100.0/24 maxlen: 24
80.74.101.0/24 maxlen: 24
80.74.102.0/23 maxlen: 23
80.74.102.0/24 maxlen: 24
80.74.103.0/24 maxlen: 24
80.74.104.0/22 maxlen: 22
80.74.104.0/23 maxlen: 23
80.74.104.0/24 maxlen: 24
80.74.105.0/24 maxlen: 24
80.74.106.0/23 maxlen: 23
80.74.106.0/24 maxlen: 24
80.74.107.0/24 maxlen: 24
80.74.108.0/22 maxlen: 22
80.74.108.0/23 maxlen: 23
80.74.108.0/24 maxlen: 24
80.74.109.0/24 maxlen: 24
80.74.110.0/23 maxlen: 23
80.74.110.0/24 maxlen: 24
80.74.111.0/24 maxlen: 24
80.74.112.0/20 maxlen: 20
80.74.112.0/21 maxlen: 21
80.74.112.0/22 maxlen: 22
80.74.112.0/23 maxlen: 23
80.74.112.0/24 maxlen: 24
80.74.113.0/24 maxlen: 24
80.74.114.0/24 maxlen: 24
80.74.115.0/24 maxlen: 24
80.74.116.0/22 maxlen: 22
80.74.116.0/23 maxlen: 23
80.74.116.0/24 maxlen: 24
80.74.117.0/24 maxlen: 24
80.74.118.0/23 maxlen: 23
80.74.118.0/24 maxlen: 24
80.74.119.0/24 maxlen: 24
80.74.120.0/22 maxlen: 22
80.74.120.0/24 maxlen: 24
80.74.121.0/24 maxlen: 24
80.74.122.0/23 maxlen: 23
80.74.122.0/24 maxlen: 24
80.74.123.0/24 maxlen: 24
80.74.124.0/22 maxlen: 22
91.143.224.0/20 maxlen: 20
91.143.224.0/22 maxlen: 22
91.143.224.0/23 maxlen: 23
91.143.224.0/24 maxlen: 24
91.143.226.0/23 maxlen: 23
91.143.226.0/24 maxlen: 24
91.143.227.0/24 maxlen: 24
91.143.228.0/24 maxlen: 24
91.143.232.0/22 maxlen: 22
91.143.232.0/23 maxlen: 23
91.143.232.0/24 maxlen: 24
91.143.233.0/24 maxlen: 24
92.61.224.0/20 maxlen: 20
92.61.226.0/24 maxlen: 24
92.61.234.0/23 maxlen: 23
92.61.234.0/24 maxlen: 24
92.61.235.0/24 maxlen: 24
92.61.239.0/24 maxlen: 24
94.188.128.0/17 maxlen: 17
94.188.128.0/22 maxlen: 22
94.188.129.0/24 maxlen: 24
94.188.130.0/23 maxlen: 23
94.188.130.0/24 maxlen: 24
94.188.131.0/24 maxlen: 24
94.188.133.0/24 maxlen: 24
94.188.136.0/24 maxlen: 24
94.188.138.0/23 maxlen: 23
94.188.138.0/24 maxlen: 24
94.188.139.0/24 maxlen: 24
94.188.140.0/24 maxlen: 24
94.188.141.0/24 maxlen: 24
94.188.144.0/22 maxlen: 22
94.188.151.0/24 maxlen: 24
94.188.152.0/22 maxlen: 22
94.188.153.0/24 maxlen: 24
94.188.155.0/24 maxlen: 24
94.188.157.0/24 maxlen: 24
94.188.158.0/24 maxlen: 24
94.188.160.0/24 maxlen: 24
94.188.161.0/24 maxlen: 24
94.188.162.0/24 maxlen: 24
94.188.163.0/24 maxlen: 24
94.188.164.0/24 maxlen: 24
94.188.165.0/24 maxlen: 24
94.188.166.0/24 maxlen: 24
94.188.167.0/24 maxlen: 24
94.188.169.0/24 maxlen: 24
94.188.171.0/24 maxlen: 24
94.188.172.0/24 maxlen: 24
94.188.173.0/24 maxlen: 24
94.188.175.0/24 maxlen: 24
94.188.176.0/23 maxlen: 23
94.188.178.0/23 maxlen: 23
94.188.178.0/24 maxlen: 24
94.188.179.0/24 maxlen: 24
94.188.184.0/24 maxlen: 24
94.188.186.0/23 maxlen: 23
94.188.188.0/23 maxlen: 23
94.188.190.0/24 maxlen: 24
94.188.191.0/24 maxlen: 24
94.188.192.0/24 maxlen: 24
94.188.197.0/24 maxlen: 24
94.188.199.0/24 maxlen: 24
94.188.200.0/24 maxlen: 24
94.188.213.0/24 maxlen: 24
94.188.217.0/24 maxlen: 24
94.188.219.0/24 maxlen: 24
94.188.220.0/24 maxlen: 24
94.188.221.0/24 maxlen: 24
94.188.242.0/24 maxlen: 24
94.188.243.0/24 maxlen: 24
94.188.244.0/23 maxlen: 23
94.188.246.0/23 maxlen: 23
94.188.247.0/24 maxlen: 24
94.188.248.0/22 maxlen: 22
94.188.248.0/23 maxlen: 23
94.188.248.0/24 maxlen: 24
94.188.251.0/24 maxlen: 24
94.188.252.0/23 maxlen: 23
94.188.254.0/23 maxlen: 23
2a02:23b8::/32 maxlen: 32
2a02:23b8:2::/52 maxlen: 52
2a02:23b8:1a00::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:db:2f:16:38:44:4b:c9:41:14:50:02:e5:d2:23:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 6 05:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=534be3d53ca166b3da6c3ab400426336ebedf1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:6c:1d:e3:61:9e:d4:a8:29:fd:09:16:84:
f0:1f:7d:a4:c4:f9:06:97:97:7e:31:cd:5e:ae:50:
8e:ac:6e:f3:c6:55:ca:aa:be:86:bb:91:d7:64:e3:
d7:e4:16:82:8c:eb:bc:ba:85:40:9c:2f:7b:7a:22:
85:7e:af:73:bf:71:f6:cf:d4:8a:cc:d1:18:e5:53:
9d:6b:98:e5:57:94:93:5c:a2:8c:fd:dc:60:6b:8b:
62:cc:55:26:50:d4:ae:aa:c5:70:0a:66:08:b9:1a:
09:76:03:d0:60:a5:f4:47:36:37:5e:0c:5c:d4:31:
dc:fb:ca:92:dd:de:17:ee:45:f6:ac:da:66:35:18:
eb:0a:ca:f7:bc:c9:e8:7e:ee:b3:a8:e2:2d:fe:e1:
b5:3d:27:95:ed:32:6e:fb:63:e8:4f:55:ab:e9:47:
fe:09:ca:5d:9b:c9:36:ab:95:cf:25:04:08:59:76:
e7:36:0f:f7:58:89:db:27:29:1f:b2:04:a0:d4:71:
5f:e4:08:76:00:9b:d6:1a:ce:4c:2e:49:e8:b7:a5:
55:1a:20:9d:a5:9a:15:0d:24:c5:80:95:1e:40:29:
fa:03:47:a7:f9:31:8a:91:d9:52:90:ca:6a:9a:05:
bb:52:14:67:aa:eb:0b:20:3e:fe:6f:70:5c:70:14:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:E3:D5:3C:A1:66:B3:DA:6C:3A:B4:00:42:63:36:EB:ED:F1:E8
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/U0vj1TyhZrPabDq0AEJjNuvt8eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.96.0/19
91.143.224.0/20
92.61.224.0/20
94.188.128.0/17
IPv6:
2a02:23b8::/32
Signature Algorithm: sha256WithRSAEncryption
1e:e7:47:85:f0:3e:48:f8:5e:42:78:94:1e:a2:90:ba:65:62:
4a:eb:a1:77:99:bd:bc:09:09:d8:07:99:20:b4:5a:64:a4:67:
3c:44:f2:ff:18:db:a9:4c:93:c2:b5:18:4b:d7:cc:0e:eb:ef:
ff:f2:e6:40:32:12:45:f4:c8:1c:af:94:20:c7:27:e6:46:9e:
0b:f8:b8:75:17:d2:50:56:4b:87:bb:92:32:03:3b:18:f7:6f:
3a:23:f6:5a:07:2b:4a:8d:34:a0:4b:15:98:ac:ae:72:60:00:
03:47:c3:3a:94:eb:47:b8:7a:2e:61:8c:da:44:b2:f6:98:33:
1d:f9:d2:94:93:96:af:21:80:a7:ee:4b:75:8f:01:d4:47:ff:
4e:f6:ff:9d:4f:b0:7a:05:e0:a7:5b:7a:50:05:97:da:9a:f8:
22:fc:e3:65:2e:ea:32:9d:e2:21:8a:ea:79:5e:17:20:99:47:
19:08:38:d1:21:bf:42:24:56:a0:d3:71:e2:21:d1:d0:46:df:
a3:41:30:03:56:40:78:27:a9:7e:1c:aa:f7:70:9a:c7:4a:a3:
6f:a6:a8:e6:61:2a:2c:2c:bd:90:0a:bd:05:ec:51:ff:d4:cc:
17:d8:5a:80:29:3a:36:b4:1c:25:f1:e1:ef:8e:85:16:85:74:
0f:8c:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:19 2025 by rpki-client