Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1RMEhGz3c6SyXLnt1WRwwxhV48Q.roa
File: 1RMEhGz3c6SyXLnt1WRwwxhV48Q.roa (raw, json)
Hash identifier: 8cdOZekm6CFvePCeVsFn0PxhLdfF1pXbh7BSLUJHv7E=
Subject key identifier: D5:13:04:84:6C:F7:73:A4:B2:5C:B9:ED:D5:64:70:C3:18:55:E3:C4
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193AF813D2C246C5381889C272B52867B9F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1RMEhGz3c6SyXLnt1WRwwxhV48Q.roa
Signing time: Tue 10 Dec 2024 07:38:22 +0000
ROA not before: Tue 10 Dec 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8888
IP address blocks: 45.11.44.0/22 maxlen: 24
45.14.68.0/22 maxlen: 24
45.14.104.0/22 maxlen: 24
45.14.105.0/24 maxlen: 32
45.14.107.0/24 maxlen: 32
45.87.92.0/22 maxlen: 32
45.87.92.0/24 maxlen: 32
45.87.93.0/24 maxlen: 32
45.87.95.0/24 maxlen: 32
45.89.216.0/22 maxlen: 24
45.89.232.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
45.128.208.0/22 maxlen: 24
45.129.8.0/22 maxlen: 24
45.130.20.0/22 maxlen: 24
45.131.152.0/22 maxlen: 24
45.134.168.0/22 maxlen: 24
45.135.40.0/22 maxlen: 32
45.136.176.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
45.139.192.0/24 maxlen: 32
45.139.195.0/24 maxlen: 32
45.143.128.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.153.244.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
92.118.188.0/24 maxlen: 32
94.124.116.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
141.98.196.0/22 maxlen: 24
149.62.44.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
185.194.54.0/24 maxlen: 32
185.200.64.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.248.87.0/24 maxlen: 32
193.111.30.0/23 maxlen: 24
193.177.220.0/24 maxlen: 32
193.177.221.0/24 maxlen: 32
194.36.24.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.169.54.0/23 maxlen: 24
194.169.54.0/24 maxlen: 24
195.245.219.0/24 maxlen: 32
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a09:0:15::/48 maxlen: 48
2a09:6::/48 maxlen: 48
2a09:6:1::/48 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:81:3d:2c:24:6c:53:81:88:9c:27:2b:52:86:7b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 10 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d51304846cf773a4b25cb9edd56470c31855e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:40:a6:f8:97:7f:d3:62:99:bc:75:a1:bd:
cb:de:62:7a:a8:97:99:ab:7e:0c:39:e8:9c:70:f9:
9e:68:7b:0c:cc:cd:00:33:f2:60:68:a9:5e:b4:1e:
1d:9a:a7:3a:3f:da:35:71:f7:7d:bd:45:b7:85:7f:
8d:4f:0e:44:c2:be:ea:d6:be:bb:b1:16:fd:db:db:
8b:ff:83:e4:45:b1:0b:0e:d2:58:20:3f:ee:09:10:
20:81:32:00:91:e6:b0:c7:a5:1c:f2:51:64:7a:06:
1d:f6:81:2d:0b:b2:3e:54:f7:f8:e9:db:e7:59:c7:
32:74:a6:1c:cc:f9:e8:b2:90:d7:05:19:cd:b3:b4:
07:e7:29:95:15:e8:6b:66:92:43:e9:47:45:9c:97:
a7:e8:b0:6e:d8:45:e5:a5:bf:97:bb:49:96:a9:37:
2e:29:9f:fd:75:24:79:81:a9:b1:fc:5c:0b:0a:34:
76:2a:ec:2b:7b:00:c9:68:19:e6:fa:5f:42:2f:bf:
9b:75:30:02:e1:3b:47:3a:b8:9b:cb:23:1d:01:06:
ae:2a:47:cb:55:b9:5c:2e:2f:e2:8a:5e:78:38:a0:
52:c0:8c:aa:a1:ad:c9:97:91:37:be:2e:4a:64:17:
b6:a3:9c:1d:7a:95:cf:19:c1:17:19:0c:0f:63:93:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:04:84:6C:F7:73:A4:B2:5C:B9:ED:D5:64:70:C3:18:55:E3:C4
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1RMEhGz3c6SyXLnt1WRwwxhV48Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.44.0/22
45.14.68.0/22
45.14.104.0/22
45.87.92.0/22
45.89.216.0/22
45.89.232.0/22
45.90.210.0/24
45.92.157.0/24
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.131.152.0/22
45.134.168.0/22
45.135.40.0/22
45.136.176.0/22
45.139.192.0/22
45.143.128.0/22
45.143.232.0/22
45.153.244.0/22
79.143.140.0/22
80.66.196.0/22
92.118.188.0/24
94.124.116.0/22
95.214.164.0/22
141.98.196.0/22
149.62.44.0/22
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
193.111.30.0/23
193.177.220.0/23
194.36.24.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09:0:15::/48
2a09:6::/47
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
77:f6:a0:9b:fe:19:26:b4:25:25:fa:ea:ba:68:d0:fc:18:c5:
5e:ad:d3:3e:7b:12:53:8d:21:31:1c:af:34:2f:12:c5:e3:35:
38:f8:a2:af:bc:45:72:89:9a:df:ab:c9:2f:37:11:2d:d9:ed:
da:4f:b2:1b:2d:35:87:e0:bb:8c:0a:78:cc:3d:4b:f5:8e:7f:
4f:e3:ed:e4:01:8c:ff:a5:a0:dd:2d:ac:99:2e:67:10:07:06:
86:17:82:09:e4:aa:be:48:ba:69:b5:a2:35:bf:a6:e8:e0:69:
73:ff:c0:ff:b5:70:ee:8b:c7:33:6c:6a:d8:bf:ef:a6:df:6f:
4b:ee:10:1c:5d:18:1a:88:c3:05:d5:96:86:67:3c:a6:37:d8:
38:41:37:52:ea:24:08:64:ce:37:92:03:ae:3e:19:39:e6:94:
77:9f:db:55:4b:06:52:65:ae:c1:dd:b6:b8:e8:b9:d6:ff:30:
ed:bd:a9:85:13:cd:24:a7:c5:2b:90:d6:90:57:ac:b5:90:df:
48:7a:f5:72:57:a4:f0:e1:63:25:05:74:24:2d:1c:3a:26:78:
08:c9:ad:ea:f7:87:de:01:f7:3f:c2:d5:61:67:39:bb:2e:2c:
f1:fc:eb:05:ed:da:fa:b9:f2:7c:aa:0b:70:4c:76:6b:13:88:
d1:4e:35:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:28:11 2025 by rpki-client