Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/56Vpsd34am-XgZxuiIBx5ciZnvo.roa
File: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (raw, json)
Hash identifier: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=
Subject key identifier: E7:A5:69:B1:DD:F8:6A:6F:97:81:9C:6E:88:80:71:E5:C8:99:9E:FA
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019425FD69F90652D204CD81FDF93D9AB1B4
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/56Vpsd34am-XgZxuiIBx5ciZnvo.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.57.76.0/22 maxlen: 32
31.14.26.0/24 maxlen: 32
77.81.92.0/22 maxlen: 32
85.217.190.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
86.104.76.0/22 maxlen: 32
86.106.176.0/23 maxlen: 32
89.32.132.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
89.40.81.0/24 maxlen: 32
89.46.242.0/24 maxlen: 32
89.104.122.0/23 maxlen: 32
89.223.22.0/23 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
91.92.178.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
91.192.212.0/22 maxlen: 32
92.114.60.0/22 maxlen: 32
92.114.81.0/24 maxlen: 32
92.255.0.0/24 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
92.255.80.0/22 maxlen: 32
93.113.52.0/23 maxlen: 24
93.114.136.0/23 maxlen: 32
93.114.236.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
94.139.48.0/21 maxlen: 32
94.139.56.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
94.176.0.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
110.238.192.0/19 maxlen: 32
119.12.192.0/20 maxlen: 32
176.223.68.0/22 maxlen: 32
176.223.104.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
180.235.160.0/20 maxlen: 32
180.235.176.0/20 maxlen: 32
185.66.136.0/22 maxlen: 32
188.94.84.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
188.240.48.0/23 maxlen: 32
188.240.214.0/23 maxlen: 32
188.241.0.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
188.241.249.0/24 maxlen: 32
193.56.24.0/22 maxlen: 32
193.142.103.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.8.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:69:f9:06:52:d2:04:cd:81:fd:f9:3d:9a:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a569b1ddf86a6f97819c6e888071e5c8999efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:d5:29:60:5a:e8:6b:7e:40:9b:ed:bf:db:
73:fd:45:13:d8:91:84:41:e3:15:e4:bb:c1:64:82:
95:92:1f:19:68:23:42:aa:e1:da:63:5e:90:25:ac:
6c:0c:9c:b2:11:20:4c:e4:f6:1a:bd:d7:af:7f:e7:
2e:3e:61:96:f3:ed:0c:f3:30:e1:97:32:0c:d8:bc:
f6:41:8b:3f:cb:e9:81:9e:e0:40:5e:84:a3:19:32:
11:ee:c3:f6:c4:df:d9:a3:a8:8d:2f:1d:dc:c0:f9:
eb:c9:f4:63:7a:96:3c:5c:c5:80:bb:88:3d:5f:a4:
61:60:22:ce:4c:96:0c:4a:da:78:f1:c2:e0:38:8e:
36:b5:71:72:19:d2:fb:28:61:31:0f:34:2e:5d:2a:
53:27:cd:2b:4b:28:b8:6a:de:3c:d7:ae:bb:17:2e:
f7:61:6c:ab:09:e1:42:86:0a:16:ac:48:2c:e5:ba:
22:02:0c:7c:88:cb:15:8e:ba:fa:35:1d:ed:69:17:
ae:e9:d9:98:bc:b5:63:7e:f5:62:da:9b:33:0b:0a:
b0:57:9b:b4:d0:b1:e8:74:b7:20:1a:bb:f5:54:13:
32:2e:cc:a9:66:72:d7:17:5c:a9:7d:cd:b4:36:1d:
ab:4c:1c:37:af:fc:39:88:0d:b6:f7:91:c3:26:8f:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:69:B1:DD:F8:6A:6F:97:81:9C:6E:88:80:71:E5:C8:99:9E:FA
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/56Vpsd34am-XgZxuiIBx5ciZnvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.48.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.3.0/24
212.70.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:90:ab:b7:bd:3a:83:0a:8f:c1:d1:c2:56:58:4c:89:95:f1:
48:ad:21:05:0f:f0:9b:00:a6:48:36:00:46:1a:ca:de:e8:92:
b5:36:e0:bc:75:df:16:36:d6:2d:91:cc:65:51:a0:9b:dd:ab:
9f:5c:a9:67:be:26:89:78:c1:13:7c:ae:83:7b:14:c6:14:5f:
54:15:c3:35:ce:de:df:e7:0a:12:34:07:47:71:5e:ab:26:44:
c2:d2:62:e7:ff:71:01:85:7e:71:17:fc:87:b0:da:c7:4d:d6:
aa:cd:4d:fd:b8:97:51:ae:08:20:19:ed:0d:37:33:65:53:86:
08:de:b0:c7:72:1b:07:24:67:d0:c7:c7:5e:fc:b0:12:6e:45:
e5:ea:b0:ad:e0:e2:9a:01:05:cc:3a:c1:1d:d8:fc:c3:09:ee:
b2:14:f9:53:26:4c:b1:9f:e1:a7:93:07:73:e5:38:90:22:11:
e8:2b:b9:c9:89:2d:40:ff:5e:48:b7:43:45:88:6f:46:5b:7e:
5a:b9:49:ff:84:51:80:c8:0e:f3:2e:9d:e2:45:f7:e6:d3:27:
ea:e5:b4:c9:77:6d:bd:22:21:10:45:b6:f9:4b:24:a1:5d:17:
bb:32:a1:17:66:0c:35:ba:84:dd:cc:ca:13:da:4f:6b:5c:7d:
b5:ac:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:33 2025 by rpki-client