Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8ETebd5aJrUdISKkSE2nQJmn9s.roa
File: F8ETebd5aJrUdISKkSE2nQJmn9s.roa (raw, json)
Hash identifier: Ffx35TE68tpyng3vd4qIz+aJdmEFUBFqTs2Ayk+B3jw=
Subject key identifier: 17:C1:13:79:B7:79:68:9A:D4:74:84:8A:91:21:36:9D:02:66:9F:DB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019537F8BF11D47AF65A8385E768A93148FB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8ETebd5aJrUdISKkSE2nQJmn9s.roa
Signing time: Mon 24 Feb 2025 12:40:03 +0000
ROA not before: Mon 24 Feb 2025 12:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2.58.148.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.135.184.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.143.53.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
84.247.25.0/24 maxlen: 24
84.247.26.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.43.199.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
93.115.254.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
94.103.249.0/24 maxlen: 24
94.103.250.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/24 maxlen: 24
185.121.123.0/24 maxlen: 24
185.184.134.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
193.239.164.0/23 maxlen: 24
194.169.169.0/24 maxlen: 24
212.119.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:f8:bf:11:d4:7a:f6:5a:83:85:e7:68:a9:31:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 24 12:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c11379b779689ad474848a9121369d02669fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:f8:33:1c:2d:a6:74:c9:4e:2b:93:1d:d3:
bb:5d:b3:22:80:ba:1b:d8:0a:67:a2:b9:92:10:94:
15:38:05:a7:7a:47:d0:76:7e:0e:c0:8e:aa:7c:93:
df:dd:c3:62:ee:9f:1d:81:b0:8e:c4:23:5d:33:16:
8c:b6:b2:02:03:c4:83:54:7d:6d:4b:59:df:93:7f:
a9:90:30:62:5c:d9:ce:8e:ab:39:31:ef:24:f3:84:
57:e0:68:3a:17:fa:0e:6e:43:b4:ca:c5:35:c9:09:
11:7c:57:e9:c5:4a:33:6f:a7:85:7a:38:00:21:f0:
e8:0e:e0:7b:b0:9c:b0:ee:7f:02:90:af:b9:27:f1:
e2:10:fb:7b:91:7d:d3:bb:5a:e5:b7:4e:ef:43:55:
f0:47:da:ea:65:68:03:da:bf:62:d3:0f:e9:b3:3c:
51:f5:27:77:58:52:12:a3:b2:e3:47:e5:e8:20:2c:
84:87:c2:37:64:be:a3:ef:7e:12:39:3a:3c:2b:9a:
46:41:12:ff:21:15:7d:e6:43:47:77:8d:21:b9:e4:
3e:c7:de:f4:bc:9d:9f:9b:e6:6e:31:ad:f7:36:84:
b2:c4:c1:e5:4f:b7:4c:af:e3:ab:57:4e:46:29:30:
7e:0c:10:cc:e2:2d:e5:f2:8a:eb:6d:c3:31:32:0f:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:13:79:B7:79:68:9A:D4:74:84:8A:91:21:36:9D:02:66:9F:DB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8ETebd5aJrUdISKkSE2nQJmn9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
45.91.149.0/24
45.135.184.0/24
45.135.187.0/24
45.143.53.0/24
45.145.44.0/23
45.145.47.0/24
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0-62.197.152.255
62.197.159.0/24
84.247.25.0-84.247.26.255
89.33.84.0/24
89.36.22.0/24
89.37.62.0/23
89.43.199.0/24
92.62.121.0/24
93.115.254.0/23
94.103.249.0-94.103.250.255
185.121.121.0-185.121.123.255
185.184.134.0/24
185.205.190.0/24
185.239.241.0/24
185.239.243.0/24
185.244.137.0/24
185.245.5.0/24
188.212.132.0/24
188.240.68.0/24
188.240.74.0/24
193.19.108.0/24
193.218.32.0/24
193.239.164.0/23
194.169.169.0/24
212.119.34.0/24
Signature Algorithm: sha256WithRSAEncryption
56:53:36:14:5e:3b:1d:e0:7e:4c:4f:8e:a3:29:92:ce:07:b8:
3b:3b:18:0d:f2:bb:b4:1f:8e:1a:de:12:f9:ec:d0:5c:c5:01:
d7:af:3d:18:18:ab:bb:24:2a:82:a0:32:0c:48:d1:29:19:ff:
89:1e:92:cc:53:bb:28:92:52:57:c1:f9:99:20:a6:bb:53:65:
d5:4d:8f:c3:ce:67:65:86:9c:15:a4:d1:1e:9a:9f:41:85:34:
e6:7a:9e:f0:61:2d:e7:35:6c:22:90:cb:4f:cb:78:21:b8:5a:
a0:b3:c7:bc:14:b6:dd:8d:4f:1f:61:bb:41:0e:31:9e:02:ad:
54:51:0c:5c:c1:dc:5d:50:ba:d0:56:47:a8:d8:32:3e:df:9d:
fa:43:67:3e:ee:ec:e1:15:84:db:03:13:1b:66:a1:c3:20:78:
f5:9a:10:24:ef:3e:a2:7b:2a:a5:93:03:4e:66:38:23:98:3a:
fb:82:81:8d:c3:e7:29:40:71:e3:0d:9d:e5:21:04:f0:ba:89:
4a:f5:0e:1b:0e:04:6d:a7:26:28:c0:cf:b0:ac:2a:97:39:4c:
98:63:b6:3b:de:13:11:ed:3b:00:a7:8b:bd:94:bb:6f:21:4a:
9e:84:76:0a:34:32:b5:77:7f:88:03:5a:1f:29:e0:2a:6e:e8:
e6:70:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:46:52 2025 by rpki-client