Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/D1QwE44XFrwtJEDC4K7Rqja2vn4.roa
File: D1QwE44XFrwtJEDC4K7Rqja2vn4.roa (raw, json)
Hash identifier: lRDaHZkAEIO/5mXZ1uUd0W0NLw4whXuLKEb9cFU2WIw=
Subject key identifier: 0F:54:30:13:8E:17:16:BC:2D:24:40:C2:E0:AE:D1:AA:36:B6:BE:7E
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 01941F8C68299EDBFAD247F1D920C2F3231F
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/D1QwE44XFrwtJEDC4K7Rqja2vn4.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/20 maxlen: 20
46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/20 maxlen: 20
46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/20 maxlen: 20
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/20 maxlen: 20
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/20 maxlen: 20
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/20 maxlen: 20
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/20 maxlen: 20
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/20 maxlen: 20
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/20 maxlen: 20
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/20 maxlen: 20
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/20 maxlen: 20
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/20 maxlen: 20
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/20 maxlen: 20
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/20 maxlen: 20
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/20 maxlen: 20
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/20 maxlen: 20
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/20 maxlen: 20
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/20 maxlen: 20
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:68:29:9e:db:fa:d2:47:f1:d9:20:c2:f3:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f5430138e1716bc2d2440c2e0aed1aa36b6be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:b7:36:ca:d7:67:d1:a3:db:83:76:48:4b:
e5:50:2c:e0:21:a4:fa:59:a9:ca:74:80:82:d2:69:
db:ba:0d:a4:6b:cc:f3:47:2b:d0:0e:bb:29:4e:8e:
be:35:ef:48:12:d7:fb:b9:6f:37:ad:00:ad:19:4f:
67:f9:c4:b0:21:3b:f0:34:d4:0e:b8:7b:42:e7:5d:
45:bf:14:82:7b:53:55:43:21:14:65:af:a2:8e:77:
2d:b6:b3:11:50:2a:25:80:00:04:0a:e6:52:e2:5f:
e9:9e:ac:1d:a8:27:44:91:32:22:3f:b0:bb:a7:63:
49:5d:fb:94:40:6d:91:ea:b6:63:ee:37:e1:f4:8f:
8e:df:76:25:3c:7b:28:ab:5a:45:ad:ef:ca:c4:ba:
c2:b5:bf:ef:96:1b:40:ce:f9:cc:f2:c1:ab:33:5a:
33:89:75:4f:43:cf:30:69:04:f9:bf:7e:45:af:01:
64:bc:06:5d:ac:c6:87:8d:2c:27:91:be:90:fb:f0:
3d:02:34:4d:40:84:ce:ca:78:95:13:6e:62:90:7c:
1c:9c:f2:88:fc:20:34:e1:c9:35:5a:98:70:e3:b1:
dd:66:43:15:19:b8:cc:ab:86:e8:e8:e2:a8:d2:12:
c9:b2:23:0f:4c:a8:5c:80:2f:1f:a6:ec:23:a1:c6:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:30:13:8E:17:16:BC:2D:24:40:C2:E0:AE:D1:AA:36:B6:BE:7E
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/D1QwE44XFrwtJEDC4K7Rqja2vn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
0a:cd:a6:3e:b6:f5:67:e9:b2:a4:e6:4e:86:de:9f:59:f4:fb:
f4:5f:a1:86:60:06:6b:7c:5a:66:3f:5c:23:52:ad:d1:9b:9e:
ca:12:36:51:8a:98:9c:dd:a6:1c:93:c7:28:fa:57:66:f8:bd:
c7:8f:d2:04:68:d0:fb:7f:18:0a:78:a8:a3:cd:60:83:2d:2e:
c9:a9:7e:a8:a4:00:1a:11:cf:8b:49:7d:02:28:5f:c7:1b:7a:
ac:25:e2:7f:40:68:d6:5d:0b:0a:55:87:07:70:76:c8:c9:ef:
44:4e:25:d5:df:63:bd:f2:06:d0:0f:af:3c:29:8e:4b:bc:1e:
fe:76:a4:72:dc:e1:f7:d9:7d:ad:f4:49:ae:99:be:c8:7f:42:
7d:db:88:e0:79:52:da:9a:d4:fe:2d:01:30:e6:4e:4b:76:99:
d2:4f:7e:95:ae:2a:4a:dd:98:d3:3e:6e:93:f6:19:b2:55:93:
90:a3:9e:d2:96:4e:6a:2b:cc:5b:be:78:5b:f6:7c:b3:61:9a:
25:40:5e:52:7f:e6:35:9b:97:80:9a:ed:7e:4f:5e:4d:4b:19:
2f:cf:a2:54:f6:34:02:c7:2d:2d:fb:b4:fb:e9:78:76:6d:49:
1d:bd:a4:83:82:62:87:68:59:6c:06:a1:16:44:63:fe:d1:34:
23:98:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:31 2025 by rpki-client