Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa
File: tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa (raw, json)
Hash identifier: Eq8qKDr4X5oijarNEC8B7aqyt4IhqQ1MlTcTqvRwOtk=
Subject key identifier: B4:B4:B8:C5:4F:AF:B5:76:69:5F:7E:EC:8D:6E:D2:CA:A4:2A:43:43
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01955C2A2243F8142D92DDCE5A36B6AABD80
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa
Signing time: Mon 03 Mar 2025 13:20:19 +0000
ROA not before: Mon 03 Mar 2025 13:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 5.180.216.0/23 maxlen: 23
5.180.218.0/23 maxlen: 23
5.200.0.0/19 maxlen: 24
31.204.128.0/19 maxlen: 24
31.204.132.0/22 maxlen: 22
31.204.136.0/23 maxlen: 23
31.204.144.0/24 maxlen: 24
89.104.168.0/23 maxlen: 23
89.104.170.0/23 maxlen: 23
91.195.234.0/23 maxlen: 23
91.198.152.0/24 maxlen: 24
91.216.207.0/24 maxlen: 24
104.153.84.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
138.128.136.0/22 maxlen: 22
138.128.140.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
162.245.204.0/22 maxlen: 22
185.41.140.0/22 maxlen: 22
185.50.104.0/22 maxlen: 22
185.52.12.0/22 maxlen: 24
185.179.200.0/23 maxlen: 24
185.179.202.0/23 maxlen: 24
185.197.24.0/22 maxlen: 23
188.122.64.0/19 maxlen: 24
193.43.218.0/23 maxlen: 23
212.19.224.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
213.179.204.0/22 maxlen: 22
213.179.209.0/24 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/23 maxlen: 23
2a00:1630::/29 maxlen: 32
2a00:1630::/32 maxlen: 48
2a00:1631::/32 maxlen: 32
2a00:1632::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
2a00:1d20::/34 maxlen: 34
2a00:1d20:4000::/34 maxlen: 34
2a00:1d26::/32 maxlen: 34
2a01:9580::/32 maxlen: 34
2a01:9580:c000::/34 maxlen: 34
2a04:c600::/29 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:2a:22:43:f8:14:2d:92:dd:ce:5a:36:b6:aa:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Mar 3 13:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b4b8c54fafb576695f7eec8d6ed2caa42a4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:12:22:36:19:8a:09:fa:67:e6:8d:84:f3:
f5:64:1a:9b:4d:49:2f:1e:8b:98:26:8d:41:da:8c:
ee:6f:96:97:b4:af:bf:f0:03:78:fe:8c:d8:72:83:
49:11:98:2e:ff:62:6b:8d:17:1f:eb:44:b8:35:c5:
24:38:23:b7:56:32:1f:67:9d:20:6e:11:f3:0f:f2:
66:c6:61:25:37:1a:f9:79:5a:6a:68:10:d7:f0:67:
40:f5:76:fb:7b:21:cb:1b:29:fb:f4:11:39:50:a7:
a7:d4:53:e9:ac:5d:1d:32:41:e1:b3:88:4f:6c:8d:
ea:93:cf:8f:91:d7:3c:de:43:1b:be:86:19:97:e9:
e8:04:fe:65:4f:fe:7e:89:d2:3b:a1:26:f8:22:8b:
99:f9:cd:ab:44:5b:29:a3:08:1d:42:0d:94:09:37:
8d:fe:91:46:46:a3:43:fb:fd:3d:30:21:51:f9:63:
4a:f9:0f:05:19:6e:41:4d:1d:df:a1:02:d1:c0:90:
47:76:69:2e:9d:84:29:4b:06:c0:af:67:3a:84:57:
ff:da:d2:64:95:47:60:12:c9:e2:57:fc:e4:4c:0a:
89:cc:f5:c7:80:1e:92:a7:fb:52:3f:fb:75:73:0f:
7d:9c:30:d4:75:cd:7a:4a:f7:67:c8:03:cd:d9:02:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:B8:C5:4F:AF:B5:76:69:5F:7E:EC:8D:6E:D2:CA:A4:2A:43:43
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.216.0/22
5.200.0.0/19
31.204.128.0/19
89.104.168.0/22
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0/22
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
41:de:77:6e:1a:a9:4f:64:8f:05:bb:f4:00:4b:bd:fb:85:e7:
2f:09:5b:a3:c8:02:9d:33:b5:dd:5a:06:2e:92:fe:67:fa:e1:
58:d2:0c:ac:70:dd:1e:72:1a:33:7b:c5:69:ab:9a:b3:e0:2f:
fc:35:19:aa:a1:a5:46:c4:60:45:a3:ef:c7:fb:f6:04:73:7a:
84:51:a9:a7:5f:f0:81:85:3e:a7:26:88:68:38:31:6c:04:81:
38:be:24:64:cd:e8:10:9b:46:35:59:2a:70:09:dc:91:4f:84:
c2:1c:6f:45:07:fb:cf:99:05:f1:bf:e6:94:f6:7a:aa:78:7a:
ff:52:87:ff:4e:7a:a1:1a:87:9a:08:92:90:cc:38:95:01:27:
26:fc:10:00:c0:d4:6d:ab:f4:fe:39:80:29:05:36:5d:61:43:
c3:96:4f:9b:88:2f:54:3a:da:99:23:b2:40:e9:36:fb:f8:61:
cb:8a:4b:41:c7:c4:c1:2a:a5:2e:4e:f8:ac:08:ce:4b:9e:45:
2e:25:a0:9e:3f:68:85:a0:7f:f0:fe:85:99:23:8a:a5:1d:41:
73:f9:f3:b8:6d:db:e9:e2:9a:8d:59:6f:a6:37:7d:e8:ce:92:
12:01:a0:c4:49:31:8b:7d:d0:a2:91:f6:7f:75:46:4c:12:95:
bf:e4:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:39 2025 by rpki-client