Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/O-XYI5vp9ydafgfwFumH_bRkCjQ.roa
File: O-XYI5vp9ydafgfwFumH_bRkCjQ.roa (raw, json)
Hash identifier: ayANE+XwMLelekZTHjo1AVEv1JXQvENT2VyWw29aHvY=
Subject key identifier: 3B:E5:D8:23:9B:E9:F7:27:5A:7E:07:F0:16:E9:87:FD:B4:64:0A:34
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01956696E4E8562BC004D40A8F25E3D8DE6F
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/O-XYI5vp9ydafgfwFumH_bRkCjQ.roa
Signing time: Wed 05 Mar 2025 13:55:19 +0000
ROA not before: Wed 05 Mar 2025 13:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.178.0.0/15 maxlen: 15
31.178.0.0/16 maxlen: 16
31.179.0.0/16 maxlen: 16
31.186.192.0/19 maxlen: 19
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.16.0/20 maxlen: 20
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
81.18.200.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.208.0/21 maxlen: 21
81.18.216.0/21 maxlen: 21
83.144.64.0/18 maxlen: 18
83.144.64.0/19 maxlen: 19
83.144.96.0/19 maxlen: 19
84.10.0.0/16 maxlen: 16
84.10.0.0/17 maxlen: 17
84.10.128.0/17 maxlen: 17
85.222.0.0/17 maxlen: 17
85.222.0.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
87.206.0.0/15 maxlen: 15
87.206.0.0/16 maxlen: 16
87.207.0.0/16 maxlen: 16
89.64.0.0/12 maxlen: 12
89.64.0.0/13 maxlen: 13
89.72.0.0/13 maxlen: 13
91.150.192.0/19 maxlen: 19
91.150.192.0/20 maxlen: 20
91.150.208.0/20 maxlen: 20
92.244.32.0/19 maxlen: 19
92.244.32.0/20 maxlen: 20
92.244.48.0/20 maxlen: 20
94.75.64.0/18 maxlen: 18
94.75.64.0/19 maxlen: 19
94.75.96.0/19 maxlen: 19
94.172.0.0/16 maxlen: 16
94.172.0.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
95.158.64.0/18 maxlen: 18
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/23 maxlen: 23
193.47.160.0/24 maxlen: 24
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
212.76.32.0/20 maxlen: 20
212.76.48.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
213.134.160.0/20 maxlen: 20
213.134.176.0/20 maxlen: 20
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/27 maxlen: 27
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:96:e4:e8:56:2b:c0:04:d4:0a:8f:25:e3:d8:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Mar 5 13:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be5d8239be9f7275a7e07f016e987fdb4640a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:89:88:c6:b2:17:36:60:80:f3:d4:ac:c0:
6a:71:31:f5:3d:11:7c:0a:62:68:7c:79:26:aa:ef:
d4:91:d2:44:0d:d4:df:42:d6:a6:d4:e7:de:81:80:
4d:d7:3b:2c:2e:9b:37:10:06:eb:14:2f:75:6b:d7:
d7:59:bd:f4:de:07:b3:41:c6:08:51:1b:6e:54:11:
91:1f:f6:85:73:d2:b2:84:e1:97:2c:88:79:0d:54:
e9:b3:99:7e:fa:59:26:f8:96:51:8d:6a:f7:85:7b:
39:66:93:03:f2:ec:24:8e:1b:0e:95:02:04:ad:bc:
7e:25:85:f2:4b:7c:ea:53:e5:06:fb:61:d6:e7:7b:
f5:ef:ca:d9:73:99:2b:bb:ce:8d:21:21:a8:91:8d:
d9:3c:d3:38:04:43:ee:7c:a6:98:84:fd:ba:90:6d:
fc:00:60:6d:07:28:48:60:ea:5c:3a:3b:61:4f:a7:
3b:d2:db:a9:af:42:3b:ad:57:a5:33:00:44:a6:b3:
a8:62:d9:e0:31:c1:19:8c:b8:be:72:1e:96:f3:07:
35:a4:21:90:e5:67:30:49:45:e6:39:52:b0:84:21:
dc:fd:32:51:57:3c:df:de:b5:98:5f:35:46:1a:9b:
14:5c:20:fc:83:39:0a:2f:d7:c3:5f:a5:17:bf:58:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:D8:23:9B:E9:F7:27:5A:7E:07:F0:16:E9:87:FD:B4:64:0A:34
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/O-XYI5vp9ydafgfwFumH_bRkCjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
85:e8:90:29:82:e0:2c:89:a3:7b:b0:78:0b:49:c3:b9:dd:c9:
e4:63:0b:3f:a1:14:24:c6:f3:6b:5d:57:63:47:ad:eb:3e:d3:
97:ed:9f:93:9f:dc:a4:61:88:a0:11:97:d8:2f:5f:7e:58:16:
eb:a0:f2:f2:ed:74:b8:bf:93:00:f2:c5:a0:bb:a3:00:7a:ba:
36:8f:37:e0:cf:a7:21:f3:81:e2:a0:b3:df:c0:c8:cb:ca:8c:
14:dc:c8:a9:c1:69:88:13:cc:8d:6a:af:9f:fc:40:4b:75:67:
38:92:c8:45:fc:0f:28:c1:c9:61:ac:3d:0e:5d:70:f0:ce:6e:
60:40:db:73:03:69:56:e9:7e:09:df:1b:c3:96:7f:d2:e5:84:
d9:bc:bd:74:c0:78:eb:01:58:9f:7e:12:2a:90:a0:3a:36:18:
ec:30:2c:86:a2:42:5b:27:d1:e3:03:b2:9b:d5:e4:94:de:58:
d1:0c:6c:1a:39:b4:ab:b1:65:89:c4:7d:c0:b0:ab:ef:9a:d0:
6c:3f:17:31:6f:67:20:01:80:44:ba:89:74:51:37:85:41:6c:
5c:fc:e1:7f:c2:58:76:55:a8:34:4c:ea:5a:e5:c3:39:ca:e3:
69:22:b7:08:21:db:5a:5d:d2:36:4b:98:9a:d4:16:66:ee:0b:
83:54:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:02 2025 by rpki-client