Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/ryeSGOcjU54KHPWPvZEsUlNwpso.roa
File: ryeSGOcjU54KHPWPvZEsUlNwpso.roa (raw, json)
Hash identifier: dkRIwPgxbJxJKcqjF+GnNqVUjOFmdbfLO7GK9MaQfBg=
Subject key identifier: AF:27:92:18:E7:23:53:9E:0A:1C:F5:8F:BD:91:2C:52:53:70:A6:CA
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01936195892F6C5B0514F73CB5BF4D945479
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/ryeSGOcjU54KHPWPvZEsUlNwpso.roa
Signing time: Mon 25 Nov 2024 04:30:10 +0000
ROA not before: Mon 25 Nov 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 37.46.128.0/23 maxlen: 23
37.46.130.0/23 maxlen: 23
37.46.132.0/23 maxlen: 23
37.46.134.0/23 maxlen: 23
62.109.0.0/20 maxlen: 20
62.109.0.0/21 maxlen: 21
62.109.8.0/21 maxlen: 21
62.109.16.0/21 maxlen: 21
62.109.24.0/22 maxlen: 22
62.109.28.0/22 maxlen: 22
77.246.156.0/22 maxlen: 22
77.246.156.0/23 maxlen: 23
77.246.158.0/23 maxlen: 23
80.87.192.0/23 maxlen: 23
80.87.194.0/23 maxlen: 23
80.87.196.0/23 maxlen: 23
80.87.198.0/23 maxlen: 23
80.87.200.0/23 maxlen: 23
80.87.202.0/24 maxlen: 24
80.87.203.0/24 maxlen: 24
82.146.32.0/21 maxlen: 21
82.146.32.0/23 maxlen: 23
82.146.34.0/23 maxlen: 23
82.146.36.0/23 maxlen: 23
82.146.38.0/23 maxlen: 23
82.146.40.0/21 maxlen: 21
82.146.48.0/23 maxlen: 23
82.146.50.0/23 maxlen: 23
82.146.52.0/23 maxlen: 23
82.146.54.0/23 maxlen: 23
82.146.56.0/21 maxlen: 21
82.202.160.0/23 maxlen: 23
82.202.162.0/23 maxlen: 23
82.202.165.0/24 maxlen: 24
82.202.166.0/23 maxlen: 23
82.202.168.0/23 maxlen: 23
82.202.170.0/23 maxlen: 23
82.202.172.0/23 maxlen: 23
82.202.174.0/23 maxlen: 23
83.220.168.0/23 maxlen: 23
83.220.170.0/23 maxlen: 23
83.220.172.0/23 maxlen: 23
83.220.174.0/23 maxlen: 23
85.198.72.0/23 maxlen: 23
85.198.74.0/23 maxlen: 23
85.198.116.0/23 maxlen: 23
85.198.118.0/23 maxlen: 23
89.169.40.0/23 maxlen: 23
89.169.42.0/23 maxlen: 23
91.240.84.0/23 maxlen: 23
91.240.86.0/23 maxlen: 23
92.63.96.0/21 maxlen: 21
92.63.104.0/22 maxlen: 22
92.63.108.0/22 maxlen: 22
92.63.108.0/24 maxlen: 24
92.63.109.0/24 maxlen: 24
92.63.110.0/23 maxlen: 23
185.43.4.0/23 maxlen: 23
185.43.6.0/23 maxlen: 23
185.63.188.0/22 maxlen: 22
185.146.156.0/23 maxlen: 23
185.146.158.0/23 maxlen: 23
185.246.64.0/23 maxlen: 23
185.246.66.0/23 maxlen: 23
185.253.32.0/23 maxlen: 23
185.253.34.0/23 maxlen: 23
195.140.144.0/23 maxlen: 23
195.140.146.0/23 maxlen: 23
212.109.192.0/22 maxlen: 22
212.109.196.0/23 maxlen: 23
212.109.198.0/23 maxlen: 23
212.109.216.0/23 maxlen: 23
212.109.218.0/23 maxlen: 23
212.109.220.0/23 maxlen: 23
212.109.222.0/24 maxlen: 24
212.109.223.0/24 maxlen: 24
213.159.208.0/23 maxlen: 23
213.159.210.0/23 maxlen: 23
213.159.212.0/23 maxlen: 23
213.159.214.0/23 maxlen: 23
2a09:f900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:95:89:2f:6c:5b:05:14:f7:3c:b5:bf:4d:94:54:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Nov 25 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af279218e723539e0a1cf58fbd912c525370a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:3c:bb:da:a4:10:ec:51:82:c2:af:3e:d5:
70:e6:0a:45:66:08:f8:54:95:2d:93:13:6a:89:e7:
b0:ae:3c:6e:87:ec:78:33:a0:a2:e1:2c:ed:6a:f3:
85:d8:f5:75:38:12:32:74:07:e8:a8:06:29:8b:f7:
ad:15:25:75:20:ce:f3:0d:60:88:56:2b:24:ee:70:
fe:5c:a3:5e:7f:ef:7e:79:b3:3b:ca:8d:74:44:2f:
2a:81:a0:81:3b:f2:65:50:d3:06:8a:ed:9d:65:97:
c7:7d:b6:e4:8f:bc:25:c7:22:6f:48:44:d0:c4:cf:
17:e2:2f:40:bd:9c:81:1f:df:9a:e5:d6:35:94:ae:
03:87:1c:1d:c3:fa:0a:ea:43:a0:ca:ec:76:96:32:
bd:d7:c3:9a:15:19:a1:26:05:68:57:c5:75:08:23:
e8:b3:4a:04:5e:bc:3b:2c:83:ad:ff:68:ee:ba:2f:
f6:2b:1f:34:a4:ad:d1:f9:e8:52:df:ae:af:bd:05:
cd:a7:cc:97:20:e8:33:db:47:8f:fb:eb:78:44:b4:
5b:9f:a1:8e:78:00:67:71:62:a9:ad:c1:17:ff:d6:
24:6e:20:37:97:2f:c4:8e:53:ad:60:98:86:78:5b:
38:c5:dd:19:b2:7e:5e:27:e4:3f:e2:e8:4e:4f:a6:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:92:18:E7:23:53:9E:0A:1C:F5:8F:BD:91:2C:52:53:70:A6:CA
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/ryeSGOcjU54KHPWPvZEsUlNwpso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.128.0/21
62.109.0.0/19
77.246.156.0/22
80.87.192.0-80.87.203.255
82.146.32.0/19
82.202.160.0/22
82.202.165.0-82.202.175.255
83.220.168.0/21
85.198.72.0/22
85.198.116.0/22
89.169.40.0/22
91.240.84.0/22
92.63.96.0/20
185.43.4.0/22
185.63.188.0/22
185.146.156.0/22
185.246.64.0/22
185.253.32.0/22
195.140.144.0/22
212.109.192.0/21
212.109.216.0/21
213.159.208.0/21
IPv6:
2a09:f900::/48
Signature Algorithm: sha256WithRSAEncryption
95:ec:51:c2:61:7e:26:02:fb:32:e0:ab:7f:73:2c:52:22:6d:
d7:0e:bc:5a:26:0a:da:f4:cd:ea:0a:85:c9:2b:1e:cd:cf:e4:
75:e0:e9:83:e3:11:1b:22:fc:1f:79:7c:94:f1:c4:e0:82:1c:
c0:e4:1d:dc:d4:52:76:76:2f:fc:99:9a:a3:c8:83:60:70:8d:
cc:03:3c:97:29:af:b7:11:4e:4e:2e:27:72:24:38:26:1e:50:
2a:43:33:fc:26:ac:a9:35:d8:1e:c7:26:56:32:4c:29:b8:ad:
c9:90:12:c7:73:25:65:a2:05:9e:65:f9:30:14:5f:bb:c5:81:
c3:96:9f:2f:04:b1:1c:5d:1e:fc:e8:c4:f3:3b:b6:fd:4e:8e:
ff:a6:10:e6:55:3c:5b:92:80:93:a2:9a:f4:a3:19:c9:48:5c:
62:b1:2c:0a:81:ff:2e:3b:ed:29:c4:21:19:bf:31:c0:da:77:
f8:f3:8c:1d:8c:b5:44:04:76:75:5c:83:aa:41:37:5e:6a:64:
2a:12:a2:fc:7a:88:c1:44:6c:5e:b7:ca:1d:ac:27:7f:9d:df:
25:29:a4:da:85:69:ea:a8:03:17:6f:bf:13:0a:33:bf:07:b0:
89:4c:9b:1e:8f:b2:12:89:6c:d3:45:07:6f:31:26:92:e0:55:
68:ee:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:03 2025 by rpki-client