Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/pjBzn2Sy238yqyUOKntcgX57jHI.roa
File: pjBzn2Sy238yqyUOKntcgX57jHI.roa (raw, json)
Hash identifier: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=
Subject key identifier: A6:30:73:9F:64:B2:DB:7F:32:AB:25:0E:2A:7B:5C:81:7E:7B:8C:72
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01942444B8DF654B2D592ED3F4FBDA6FC20A
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/pjBzn2Sy238yqyUOKntcgX57jHI.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5603
IP address blocks: 86.61.0.0/17 maxlen: 17
86.61.0.0/18 maxlen: 18
86.61.64.0/18 maxlen: 18
89.142.0.0/16 maxlen: 16
89.142.0.0/18 maxlen: 18
89.142.64.0/18 maxlen: 18
89.142.128.0/18 maxlen: 18
89.142.192.0/18 maxlen: 18
89.143.0.0/16 maxlen: 16
89.143.0.0/18 maxlen: 18
89.143.64.0/18 maxlen: 18
89.143.128.0/18 maxlen: 18
89.143.192.0/18 maxlen: 18
91.195.146.0/23 maxlen: 23
95.159.192.0/18 maxlen: 18
95.159.192.0/20 maxlen: 20
95.176.128.0/17 maxlen: 17
95.176.128.0/18 maxlen: 18
95.176.192.0/18 maxlen: 18
109.182.0.0/16 maxlen: 16
109.182.0.0/17 maxlen: 17
109.182.128.0/17 maxlen: 17
149.126.128.0/19 maxlen: 19
149.126.128.0/20 maxlen: 20
149.126.144.0/20 maxlen: 20
178.58.0.0/16 maxlen: 16
178.58.0.0/17 maxlen: 17
178.58.128.0/17 maxlen: 17
185.57.226.0/23 maxlen: 23
185.59.24.0/22 maxlen: 22
185.59.24.0/23 maxlen: 23
185.59.26.0/23 maxlen: 23
188.196.0.0/14 maxlen: 14
188.196.0.0/15 maxlen: 15
188.196.0.0/16 maxlen: 16
188.197.0.0/16 maxlen: 16
188.198.0.0/15 maxlen: 15
188.198.0.0/16 maxlen: 16
188.199.0.0/16 maxlen: 16
193.77.0.0/16 maxlen: 16
193.77.0.0/18 maxlen: 18
193.77.64.0/18 maxlen: 18
193.77.128.0/18 maxlen: 18
193.77.192.0/18 maxlen: 18
193.95.192.0/18 maxlen: 18
193.95.192.0/19 maxlen: 19
193.95.224.0/19 maxlen: 19
193.138.9.0/24 maxlen: 24
193.189.160.0/19 maxlen: 19
193.189.160.0/20 maxlen: 20
193.189.176.0/20 maxlen: 20
194.165.96.0/19 maxlen: 19
194.165.96.0/20 maxlen: 20
195.88.82.0/23 maxlen: 23
195.210.192.0/18 maxlen: 18
195.210.192.0/20 maxlen: 20
195.250.192.0/20 maxlen: 20
195.250.192.0/21 maxlen: 21
195.250.200.0/21 maxlen: 21
195.250.208.0/21 maxlen: 21
195.250.212.0/22 maxlen: 22
212.30.64.0/19 maxlen: 19
212.30.64.0/20 maxlen: 20
212.30.80.0/20 maxlen: 20
213.229.192.0/18 maxlen: 18
213.229.192.0/19 maxlen: 19
213.229.192.0/20 maxlen: 20
213.229.224.0/19 maxlen: 19
213.250.0.0/18 maxlen: 18
213.250.0.0/19 maxlen: 19
213.250.32.0/19 maxlen: 19
2a00:ee0::/29 maxlen: 29
2a00:ee0::/32 maxlen: 32
2a00:ee1::/32 maxlen: 32
2a00:ee2::/32 maxlen: 32
2a00:ee3::/32 maxlen: 32
2a00:ee4::/32 maxlen: 32
2a00:ee5::/32 maxlen: 32
2a00:ee6::/32 maxlen: 32
2a00:ee7::/32 maxlen: 32
2a02:e20::/29 maxlen: 29
2a02:e20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b8:df:65:4b:2d:59:2e:d3:f4:fb:da:6f:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a630739f64b2db7f32ab250e2a7b5c817e7b8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:0b:c1:13:46:83:21:a0:00:ba:03:2e:e9:
71:43:7a:49:5c:42:7e:50:5e:25:ca:c5:ac:00:1a:
3a:10:08:95:18:93:53:fd:4a:c6:c8:7a:af:05:a9:
af:6a:53:82:4f:d2:c6:73:36:aa:4e:b2:e7:12:40:
f2:87:1e:af:81:34:03:6b:d8:2f:60:6f:b5:a3:46:
aa:31:59:fd:97:42:3c:ab:41:f2:60:bf:61:be:92:
68:24:1b:a9:72:40:8a:0f:19:a1:73:15:87:48:40:
b4:f5:b4:05:cf:6f:a9:ca:06:46:49:fb:ca:54:6e:
59:a1:98:50:4e:a4:63:3b:73:6d:37:0b:28:c6:17:
40:ba:b6:5a:2e:09:e1:e4:93:65:4c:3d:bf:fb:1a:
15:c8:29:83:4d:aa:01:ef:99:61:8c:39:60:fc:44:
71:a6:ad:89:33:f4:d0:14:52:aa:67:6d:48:28:c0:
82:91:fa:97:ae:19:0c:92:66:43:c2:c7:7a:27:80:
11:df:ba:fb:e1:28:34:12:d6:5d:be:27:c2:47:b0:
c2:d4:d8:42:59:c3:f2:ad:81:dd:57:9e:9d:99:88:
22:e4:61:0f:a1:09:e1:ae:c2:b0:9b:b4:df:20:02:
ca:97:14:9e:09:c6:9e:31:2b:b4:1d:77:36:be:b6:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:73:9F:64:B2:DB:7F:32:AB:25:0E:2A:7B:5C:81:7E:7B:8C:72
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/pjBzn2Sy238yqyUOKntcgX57jHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.61.0.0/17
89.142.0.0/15
91.195.146.0/23
95.159.192.0/18
95.176.128.0/17
109.182.0.0/16
149.126.128.0/19
178.58.0.0/16
185.57.226.0/23
185.59.24.0/22
188.196.0.0/14
193.77.0.0/16
193.95.192.0/18
193.138.9.0/24
193.189.160.0/19
194.165.96.0/19
195.88.82.0/23
195.210.192.0/18
195.250.192.0-195.250.215.255
212.30.64.0/19
213.229.192.0/18
213.250.0.0/18
IPv6:
2a00:ee0::/29
2a02:e20::/29
Signature Algorithm: sha256WithRSAEncryption
66:b1:4f:5d:53:c5:30:18:17:a2:0c:49:7f:b2:eb:c3:f3:56:
f5:5c:84:8b:b7:9e:ec:f3:e8:d1:35:28:e6:89:7e:6e:fa:eb:
c4:76:5a:94:a3:65:53:25:78:d8:e3:f3:8d:ff:c4:b6:4c:45:
bd:37:7b:dd:69:b1:76:55:4f:3a:25:f1:1b:81:e3:29:6d:14:
6c:66:21:13:f2:30:17:80:64:4d:7b:25:f6:c3:6c:6a:85:b5:
d3:a9:aa:a8:a0:72:87:cb:5f:68:c5:f1:cd:d8:78:4b:39:29:
34:ec:60:bd:77:2b:90:d7:df:8f:25:2a:f3:09:15:57:3f:03:
ee:28:f6:f9:eb:e0:3a:c4:68:11:a9:1e:e0:d2:02:91:d5:0c:
7f:05:74:24:9d:54:43:8a:a2:f0:b3:4a:91:1d:74:62:41:dc:
c7:59:a4:f1:c3:db:07:1a:86:49:65:85:08:d2:c8:26:d5:89:
b2:89:a9:ac:e0:57:fb:a7:a7:8d:66:fc:77:42:7e:f4:2d:a1:
dd:38:39:2c:5e:06:02:a8:59:ae:c2:e0:d0:54:e7:39:4f:cd:
26:89:c6:71:25:7b:70:15:ee:76:5e:54:62:b6:94:b5:d6:1b:
d2:77:44:ba:80:48:6a:b9:7f:c0:f1:2b:f9:20:eb:56:f6:74:
27:eb:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:51 2025 by rpki-client