Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EGRlmsamo6MxsEApLQA6ZnQmKSs.roa
File: EGRlmsamo6MxsEApLQA6ZnQmKSs.roa (raw, json)
Hash identifier: JjqLfVJVB982l2lHKW6FhNOapvFQCmjo9k5CJu2duHQ=
Subject key identifier: 10:64:65:9A:C6:A6:A3:A3:31:B0:40:29:2D:00:3A:66:74:26:29:2B
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0185BEB5C5FB4C36BE4AC34907067DB21B61
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EGRlmsamo6MxsEApLQA6ZnQmKSs.roa
Signing time: Tue 17 Jan 2023 07:51:01 +0000
ROA not before: Tue 17 Jan 2023 07:51:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
188.241.146.0/24 maxlen: 32
45.116.168.0/22 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
93.180.192.0/20 maxlen: 32
185.125.192.0/22 maxlen: 32
77.95.116.0/22 maxlen: 32
176.119.8.0/21 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:b5:c5:fb:4c:36:be:4a:c3:49:07:06:7d:b2:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 17 07:51:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1064659ac6a6a3a331b040292d003a667426292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:77:05:39:bf:eb:a5:4d:83:db:75:18:24:
12:cb:47:8a:44:6f:b8:0b:0b:58:ab:24:07:d1:c4:
24:2b:a4:79:9b:3d:1e:e2:9f:c0:41:a8:b4:40:68:
87:b7:1a:2e:d4:75:78:4b:ab:70:67:33:61:3a:bd:
93:11:99:18:62:69:15:05:86:77:10:1f:29:8a:fe:
68:17:8d:3d:07:65:69:1c:b5:b6:15:c8:d0:63:fb:
77:a7:bb:02:22:24:68:96:0d:0f:35:30:ad:e8:35:
2a:01:b5:56:dc:a8:7a:df:59:f2:83:12:4b:06:65:
8c:df:7a:73:7c:28:e6:9f:4e:4f:70:fe:6c:d8:ac:
47:0f:f2:a2:86:37:9c:7c:9e:4c:b7:17:84:a3:63:
e9:cb:f4:1a:dd:fc:bb:bc:98:ed:b1:20:53:10:44:
7f:c4:6a:a4:54:85:77:ad:56:d3:45:45:15:a1:62:
18:cf:e4:48:1b:48:23:6c:82:3c:ac:e1:3d:0b:20:
7f:7d:57:52:e0:33:89:cc:48:a8:8c:f6:4e:1d:b8:
9b:8b:2f:d5:7e:1b:8f:66:b9:02:cf:6b:fb:f3:54:
97:d3:bb:74:1c:c3:44:c1:62:d3:68:d8:a8:14:2c:
0d:d1:5e:58:27:8b:63:d5:8d:66:bc:9b:72:d4:47:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:65:9A:C6:A6:A3:A3:31:B0:40:29:2D:00:3A:66:74:26:29:2B
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/EGRlmsamo6MxsEApLQA6ZnQmKSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
93.180.192.0/20
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.119.8.0/21
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
46:80:e7:50:7d:37:4d:dd:1b:36:49:c5:8b:12:03:17:19:df:
99:54:7c:4d:78:de:8e:61:39:8f:f6:8c:05:6d:8e:d9:7e:dd:
3f:9e:c2:fe:97:c8:ab:77:0d:0e:7c:76:21:4e:60:4a:2e:bf:
49:fc:da:7a:31:bc:87:6b:dc:44:65:a3:15:c9:74:d9:af:5f:
d2:e2:79:6c:c9:da:8c:a1:a8:3a:8b:cd:a5:67:50:3a:2c:40:
7a:60:46:c8:d6:c5:5f:d9:27:e4:9f:f5:9a:df:d9:af:e2:ad:
26:3b:6b:e8:47:dd:04:10:63:85:03:41:5d:e8:69:29:52:8b:
11:d0:ec:82:5b:34:b7:79:a4:e6:0a:06:d3:72:ed:f4:2b:20:
ac:3a:8c:96:74:16:92:42:cf:44:91:2e:ac:db:e9:80:e4:14:
af:14:8f:c8:8d:0e:91:8f:9a:05:40:cc:99:34:e9:30:28:de:
7c:6e:c5:b3:8f:53:56:bd:90:c1:55:bb:4e:81:45:80:d3:a0:
4e:41:27:d6:02:6c:d2:95:33:95:25:8f:64:45:69:b9:42:53:
1d:48:e8:81:86:c2:dc:b3:eb:2d:6a:79:67:dc:ca:03:89:4f:
32:72:40:bb:16:f9:a2:32:c7:3a:87:ff:a1:b3:59:06:4d:1c:
87:08:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:50 2025 by rpki-client