Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa
File: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (raw, json)
Hash identifier: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=
Subject key identifier: 56:00:92:5F:16:F0:CD:E8:67:D9:CB:52:7C:15:F2:68:A0:D0:D1:09
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019426D9611A854D406369AD08437CD26CD4
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.128.0/17 maxlen: 24
91.140.128.0/22 maxlen: 24
91.140.132.0/22 maxlen: 24
91.140.140.0/22 maxlen: 24
91.140.148.0/22 maxlen: 24
91.140.152.0/22 maxlen: 24
91.140.160.0/22 maxlen: 24
91.140.164.0/22 maxlen: 24
91.140.172.0/22 maxlen: 24
91.140.180.0/22 maxlen: 24
91.140.188.0/22 maxlen: 24
91.140.192.0/22 maxlen: 24
91.140.196.0/22 maxlen: 24
91.140.200.0/22 maxlen: 24
91.140.201.0/24 maxlen: 24
91.140.202.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
91.140.204.0/22 maxlen: 24
91.140.207.0/24 maxlen: 24
91.140.208.0/22 maxlen: 24
91.140.212.0/22 maxlen: 24
91.140.216.0/22 maxlen: 24
91.140.220.0/24 maxlen: 24
91.140.221.0/24 maxlen: 24
91.140.222.0/24 maxlen: 24
91.140.223.0/24 maxlen: 24
91.140.224.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.226.0/24 maxlen: 24
91.140.228.0/22 maxlen: 24
91.140.232.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.234.0/24 maxlen: 24
91.140.235.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.240.0/24 maxlen: 24
91.140.241.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 24
91.140.246.0/24 maxlen: 24
91.140.248.0/22 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.250.0/24 maxlen: 24
91.140.251.0/24 maxlen: 24
91.140.252.0/22 maxlen: 24
91.140.252.0/24 maxlen: 24
91.140.253.0/24 maxlen: 24
91.140.254.0/24 maxlen: 24
91.140.255.0/24 maxlen: 24
94.187.224.0/19 maxlen: 24
94.187.228.0/22 maxlen: 24
94.187.232.0/22 maxlen: 24
94.187.236.0/22 maxlen: 24
94.187.240.0/22 maxlen: 24
94.187.244.0/22 maxlen: 24
94.187.248.0/22 maxlen: 24
94.187.252.0/22 maxlen: 24
185.16.4.0/22 maxlen: 24
194.54.192.0/18 maxlen: 24
194.54.192.0/19 maxlen: 24
194.54.194.0/23 maxlen: 24
194.54.196.0/22 maxlen: 24
194.54.200.0/22 maxlen: 24
194.54.202.0/24 maxlen: 24
194.54.204.0/22 maxlen: 24
194.54.208.0/22 maxlen: 24
194.54.208.0/24 maxlen: 24
194.54.209.0/24 maxlen: 24
194.54.212.0/22 maxlen: 24
194.54.216.0/22 maxlen: 24
194.54.220.0/22 maxlen: 24
194.54.220.0/24 maxlen: 24
194.54.224.0/19 maxlen: 24
194.54.224.0/22 maxlen: 24
194.54.228.0/22 maxlen: 24
194.54.232.0/22 maxlen: 24
194.54.234.0/24 maxlen: 24
194.54.236.0/22 maxlen: 24
194.54.240.0/22 maxlen: 24
194.54.241.0/24 maxlen: 24
194.54.243.0/24 maxlen: 24
194.54.244.0/22 maxlen: 24
194.54.248.0/22 maxlen: 24
194.54.252.0/22 maxlen: 24
2a01:7780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:1a:85:4d:40:63:69:ad:08:43:7c:d2:6c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5600925f16f0cde867d9cb527c15f268a0d0d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:67:61:e6:14:e9:06:97:6c:21:cb:c2:69:
1e:60:aa:eb:47:d8:46:20:ab:93:4e:75:31:55:36:
ce:e4:8f:ae:d6:d9:41:83:09:58:7f:53:da:fd:0a:
7f:e5:f4:f7:07:8b:ef:63:c2:ee:f7:ec:8a:91:28:
ae:8b:1b:d7:34:00:14:d1:12:85:0f:d7:7a:8c:2a:
a0:3b:54:d2:cf:45:ac:f3:44:3d:9d:fb:1d:6e:1e:
ec:b1:99:34:52:2a:01:1b:b0:ec:67:9c:4c:09:3a:
16:1b:8b:9b:43:4e:04:ca:34:49:61:da:73:a9:10:
16:29:25:48:b3:75:bf:d2:70:3c:50:63:68:1f:74:
19:40:fe:0e:5d:bc:7a:81:13:34:49:ab:4a:70:2f:
27:3a:dd:08:76:15:24:17:9a:56:3d:02:73:96:3c:
ed:68:99:6c:5b:f9:4b:35:76:f2:4e:3c:b3:be:2b:
95:46:32:1f:26:0d:17:fd:9b:c3:fb:1c:7a:ad:a8:
06:77:80:02:33:9a:16:4c:0f:c8:6d:66:d6:27:76:
83:be:9f:9c:e7:6a:ce:45:b4:74:81:c1:46:1f:b9:
e0:07:0b:b7:0e:71:3a:0c:03:ef:9b:7c:c8:d4:1e:
c1:12:fc:da:6e:71:25:99:a4:27:63:a6:50:73:cd:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:92:5F:16:F0:CD:E8:67:D9:CB:52:7C:15:F2:68:A0:D0:D1:09
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/18
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
2b:66:b2:d1:18:66:59:42:99:37:4b:91:bd:d1:f3:82:f3:46:
cd:be:f4:b6:d8:16:41:fb:81:1f:3f:a6:ed:da:14:f8:e0:d7:
78:cb:72:fa:7c:25:8b:86:15:92:73:d9:2e:4e:4e:0f:38:25:
0c:23:17:78:d4:74:c4:8e:3f:3f:c2:22:9c:e1:b5:ff:ed:8f:
a5:e0:bd:c4:fc:7b:59:f7:fa:f6:61:46:77:60:4d:6d:70:a8:
00:9b:81:56:01:85:72:41:02:40:81:a9:f6:a2:0a:0b:a9:c3:
e3:1e:1b:50:d1:a5:4c:b6:3f:f7:68:9c:4d:4f:08:2c:78:de:
7a:31:3f:2f:28:ff:a0:95:68:04:a1:52:d7:5b:e4:d1:f8:fc:
76:03:bd:43:f3:80:14:3e:39:c8:24:cb:7a:b0:13:15:b8:de:
89:df:89:10:56:12:0a:4a:2a:c7:81:5c:b3:3e:a0:0e:7e:38:
23:cb:ef:05:66:40:8b:39:91:f5:c5:de:5c:dc:d4:5c:80:49:
45:0f:f3:d7:2e:9b:49:3a:dc:54:85:db:e6:7d:77:87:15:38:
61:00:4b:f0:0a:ce:14:b2:94:6e:96:4b:2d:61:d1:d1:2f:04:
f6:81:cf:27:ac:5c:34:d3:df:15:fd:c0:0a:bf:e9:7a:6f:13:
74:31:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:18 2025 by rpki-client