Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UH1IUgklLnCiX41J1yC2fdKEJpc.roa
File: UH1IUgklLnCiX41J1yC2fdKEJpc.roa (raw, json)
Hash identifier: O+N0+PoBX5KtnetBACkNlmec1yRCbzMZg4UbgRckrbU=
Subject key identifier: 50:7D:48:52:09:25:2E:70:A2:5F:8D:49:D7:20:B6:7D:D2:84:26:97
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2CABA886D81A0B1414C7B99D3B3B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UH1IUgklLnCiX41J1yC2fdKEJpc.roa
Signing time: Thu 02 Jan 2025 07:48:56 +0000
ROA not before: Thu 02 Jan 2025 07:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.43.136.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.153.0/24 maxlen: 24
45.43.164.0/23 maxlen: 23
64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.222.190.0/24 maxlen: 24
104.233.0.0/21 maxlen: 21
104.233.31.0/24 maxlen: 24
104.233.32.0/20 maxlen: 20
104.233.57.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.238.0.0/22 maxlen: 22
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.250.192.0/21 maxlen: 21
104.250.208.0/20 maxlen: 20
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2c:ab:a8:86:d8:1a:0b:14:14:c7:b9:9d:3b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=507d485209252e70a25f8d49d720b67dd2842697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:62:f5:d6:0a:bd:14:69:cf:92:ec:a7:fe:
a9:8b:de:1e:ec:e8:8d:b4:bc:35:76:82:db:b2:a0:
89:a8:65:72:6b:82:13:75:67:6f:e4:8c:61:c4:ba:
35:f1:01:fc:46:c3:15:51:72:ac:16:98:7b:d6:4e:
ca:33:00:2c:00:60:db:d0:86:85:24:32:77:19:08:
4e:ee:25:d7:a3:51:72:8e:3d:16:03:aa:9a:1c:ec:
1d:5e:f4:55:46:75:95:f7:81:c0:07:13:30:ec:60:
c5:72:3c:51:34:35:4f:77:62:8d:00:38:29:de:18:
c8:1b:b1:06:28:c5:9e:1a:6b:ac:b8:51:21:f1:1e:
02:30:5d:2e:25:da:47:58:b9:bc:28:46:26:b6:9c:
19:6e:69:a5:56:1a:7f:39:44:8f:25:a6:59:ff:b4:
49:9d:df:65:78:ea:f0:18:a6:fc:1c:e2:82:90:f4:
5d:e5:36:aa:23:9a:2c:25:49:a1:45:c4:70:28:7d:
54:7e:74:c8:ef:93:91:f6:0c:c4:58:58:2d:4c:1c:
a0:ed:0d:d8:e9:67:dd:6c:17:fe:eb:74:6e:6f:58:
7c:d1:f4:52:c3:be:a7:7a:87:58:cb:f6:d2:0e:f2:
b8:d8:eb:c7:40:f7:c5:63:58:a7:94:da:59:2a:a4:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:48:52:09:25:2E:70:A2:5F:8D:49:D7:20:B6:7D:D2:84:26:97
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UH1IUgklLnCiX41J1yC2fdKEJpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/24
45.43.138.0/23
45.43.153.0/24
45.43.164.0/23
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.222.190.0/24
104.233.0.0/21
104.233.31.0-104.233.47.255
104.233.57.0/24
104.233.60.0-104.233.62.255
104.238.0.0/22
104.238.15.0-104.238.16.255
104.238.18.0/24
104.238.22.0/24
104.238.25.0/24
104.239.9.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.95.0/24
104.239.99.0/24
104.239.110.0/24
104.249.29.0/24
104.249.32.0-104.249.37.255
104.249.55.0/24
104.250.192.0/21
104.250.208.0/20
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ae:d3:29:57:fb:ad:b5:29:86:b0:6c:16:60:b4:9f:94:20:
c4:81:ed:62:2d:49:43:f8:20:27:79:9e:9b:9a:34:e5:5b:ce:
b6:86:1e:04:73:35:36:70:b9:0c:fe:03:ca:bd:7e:67:a9:a5:
fc:50:21:5f:27:f9:73:af:35:0b:39:dc:a0:3f:34:1f:57:bd:
17:d1:d9:bb:5a:3c:55:34:58:ef:86:aa:71:7b:df:f2:28:39:
cc:d5:f5:ca:d4:5a:37:bf:fb:76:4c:85:fd:b2:a4:c9:90:bb:
1c:cf:bf:b3:1d:ea:9e:32:43:44:36:73:01:ce:49:71:2d:74:
f5:e7:08:a9:91:25:02:9d:cd:29:c3:5e:76:96:d5:99:00:f6:
cc:92:a4:6b:b4:55:41:e4:20:99:21:e6:70:2c:cb:d0:d3:01:
c0:2e:0c:c3:62:bd:d7:68:93:48:2e:32:a2:36:dd:58:06:d1:
98:73:3f:0e:46:49:4c:13:e9:65:da:6e:9b:4a:7c:c3:3e:60:
3b:66:2f:3e:0a:57:d1:06:13:36:75:97:a3:6d:6d:29:9c:55:
de:b5:29:4d:02:e6:99:5e:ad:45:4f:1d:63:05:3d:4f:56:a0:
f8:42:46:49:2c:48:92:9c:b6:4e:bc:ff:8b:38:d8:eb:cd:46:
64:52:4f:96
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISAZQl/SyrqIbYGgsUFMe5nTs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDdkNDg1MjA5MjUyZTcwYTI1ZjhkNDlkNzIwYjY3ZGQyODQyNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Vi9dYKvRRpz5Lsp/6pi94e7OiN
tLw1doLbsqCJqGVya4ITdWdv5IxhxLo18QH8RsMVUXKsFph71k7KMwAsAGDb0IaF
JDJ3GQhO7iXXo1Fyjj0WA6qaHOwdXvRVRnWV94HABxMw7GDFcjxRNDVPd2KNADgp
3hjIG7EGKMWeGmusuFEh8R4CMF0uJdpHWLm8KEYmtpwZbmmlVhp/OUSPJaZZ/7RJ
nd9leOrwGKb8HOKCkPRd5TaqI5osJUmhRcRwKH1UfnTI75OR9gzEWFgtTByg7Q3Y
6WfdbBf+63Rub1h80fRSw76neodYy/bSDvK42OvHQPfFY1inlNpZKqSUWwIDAQAB
o4IDWTCCA1UwHQYDVR0OBBYEFFB9SFIJJS5wol+NSdcgtn3ShCaXMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvVUgxSVVna2xMbkNpWDQxSjF5QzJmZEtFSnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbQYIKwYBBQUHAQcBAf8EggFcMIIBWDCCAVQEAgABMIIB
TAMEAC0riAMEAS0rigMEAC0rmQMEAS0rpAMEAECJCAMEAUCJCgMEAUCJDgMEAUCJ
EgMEAUCJKgMEAUCJMDAMAwQBQIk6AwQGQIkAMAwDBABAiUkDBABAiUowDAMEAECJ
TQMEAECJTgMEAkCJUAMEAECJWTAMAwQCQIlcAwQBQIlkMAwDBANoj+gDBAJoj/AD
BANoj/gDBABo3r4DBANo6QAwDAMEAGjpHwMEBGjpIAMEAGjpOTAMAwQCaOk8AwQA
aOk+AwQCaO4AMAwDBABo7g8DBABo7hADBABo7hIDBABo7hYDBABo7hkDBABo7wkw
DAMEAGjvLQMEAGjvLgMEAGjvMAMEAGjvXwMEAGjvYwMEAGjvbgMEAGj5HTAMAwQF
aPkgAwQBaPkkAwQAaPk3AwQDaPrAAwQEaPrQAwQAioCXAwQAioCZAwQA2K1vMA0G
CSqGSIb3DQEBCwUAA4IBAQA4rtMpV/uttSmGsGwWYLSflCDEge1iLUlD+CAneZ6b
mjTlW862hh4EczU2cLkM/gPKvX5nqaX8UCFfJ/lzrzULOdygPzQfV70X0dm7WjxV
NFjvhqpxe9/yKDnM1fXK1Fo3v/t2TIX9sqTJkLscz7+zHeqeMkNENnMBzklxLXT1
5wipkSUCnc0pw152ltWZAPbMkqRrtFVB5CCZIeZwLMvQ0wHALgzDYr3XaJNILjKi
Nt1YBtGYcz8ORklME+ll2m6bSnzDPmA7Zi8+ClfRBhM2dZejbW0pnFXetSlNAuaZ
Xq1FTx1jBT1PVqD4QkZJLEiSnLZOvP+LONjrzUZkUk+W
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:48 2025 by rpki-client