Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/JCW68n0UPKZzTNycehy0nOKt_SQ.roa
File: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (raw, json)
Hash identifier: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=
Subject key identifier: 24:25:BA:F2:7D:14:3C:A6:73:4C:DC:9C:7A:1C:B4:9C:E2:AD:FD:24
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01942521E2EC7C8E2DCED4C69C7D3E62AAFD
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/JCW68n0UPKZzTNycehy0nOKt_SQ.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35699
IP address blocks: 45.130.132.0/22 maxlen: 24
45.133.138.0/23 maxlen: 24
45.137.240.0/22 maxlen: 24
45.145.244.0/22 maxlen: 24
45.151.224.0/22 maxlen: 24
45.230.12.0/22 maxlen: 24
62.56.192.0/20 maxlen: 24
64.190.114.0/23 maxlen: 24
70.34.224.0/20 maxlen: 24
74.126.176.0/20 maxlen: 24
86.111.60.0/22 maxlen: 24
87.236.180.0/22 maxlen: 24
91.126.16.0/20 maxlen: 24
91.126.32.0/19 maxlen: 24
91.126.64.0/19 maxlen: 24
91.126.96.0/19 maxlen: 24
91.126.128.0/19 maxlen: 24
91.126.160.0/19 maxlen: 24
91.126.192.0/19 maxlen: 24
91.126.224.0/19 maxlen: 24
91.126.232.0/21 maxlen: 24
98.96.184.0/21 maxlen: 24
103.202.232.0/22 maxlen: 24
110.93.8.0/22 maxlen: 24
135.129.224.0/20 maxlen: 24
143.131.192.0/18 maxlen: 24
147.136.252.0/23 maxlen: 24
147.161.64.0/18 maxlen: 24
173.243.32.0/20 maxlen: 24
185.203.208.0/22 maxlen: 24
185.239.36.0/22 maxlen: 24
212.97.88.0/21 maxlen: 24
216.147.96.0/20 maxlen: 24
2a00:1af0::/29 maxlen: 29
2a00:1af0::/32 maxlen: 32
2a00:1af1::/32 maxlen: 32
2a00:1af1::/36 maxlen: 36
2a00:1af2::/32 maxlen: 32
2a00:1af3::/32 maxlen: 32
2a00:1af4::/32 maxlen: 32
2a00:1af4:1000::/48 maxlen: 48
2a00:1af4:1003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e2:ec:7c:8e:2d:ce:d4:c6:9c:7d:3e:62:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2425baf27d143ca6734cdc9c7a1cb49ce2adfd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:b0:40:fc:3d:6a:63:32:61:09:27:70:34:
77:cc:4e:07:7a:a9:82:16:e4:0a:65:04:d7:74:91:
4d:61:64:ec:26:03:08:77:33:4c:fb:75:8e:6f:64:
26:ca:ec:3d:47:9a:67:f4:39:6e:8c:8b:5b:2f:93:
c6:68:34:4c:41:b0:bd:d8:e3:3d:76:64:5b:76:87:
11:54:d9:42:97:1e:b7:4d:53:10:21:1f:9f:b2:45:
cf:b8:f7:a8:f2:2e:89:0a:a4:be:7b:1f:04:7f:e1:
26:98:35:6d:9d:ef:b9:83:61:83:ae:7b:55:21:82:
2a:5a:62:ad:6c:49:4f:fc:33:cc:1d:86:63:7b:71:
30:17:ed:11:89:34:24:8c:8b:e4:35:38:5d:f8:ef:
99:2c:e0:1a:98:14:77:ad:33:81:a9:a2:55:4d:e3:
0e:33:f1:93:d2:a4:7b:4e:1d:55:d6:44:40:a5:ab:
15:e8:cf:0b:d0:fa:ef:10:19:39:5a:1c:9e:c6:6d:
23:ad:09:5b:cf:77:11:76:58:b7:0d:9b:7a:d8:dd:
c6:5f:68:dd:3b:7e:2f:cf:6d:b3:ec:57:1b:08:64:
a7:03:18:82:a0:5c:d7:a6:6c:ca:4a:ae:d2:c2:fd:
45:65:fe:c2:39:af:77:3d:4c:cd:f0:1e:ea:c0:7f:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:BA:F2:7D:14:3C:A6:73:4C:DC:9C:7A:1C:B4:9C:E2:AD:FD:24
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/JCW68n0UPKZzTNycehy0nOKt_SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.132.0/22
45.133.138.0/23
45.137.240.0/22
45.145.244.0/22
45.151.224.0/22
45.230.12.0/22
62.56.192.0/20
64.190.114.0/23
70.34.224.0/20
74.126.176.0/20
86.111.60.0/22
87.236.180.0/22
91.126.16.0-91.126.255.255
98.96.184.0/21
103.202.232.0/22
110.93.8.0/22
135.129.224.0/20
143.131.192.0/18
147.136.252.0/23
147.161.64.0/18
173.243.32.0/20
185.203.208.0/22
185.239.36.0/22
212.97.88.0/21
216.147.96.0/20
IPv6:
2a00:1af0::/29
Signature Algorithm: sha256WithRSAEncryption
79:33:52:84:89:7c:3b:35:99:ed:8f:b1:9c:0d:99:87:0e:74:
85:45:b2:24:04:b5:cf:77:df:af:45:bb:06:bc:7c:8a:b1:f0:
84:17:e9:51:c8:be:3d:08:e5:7b:49:47:1e:89:69:a7:b2:06:
37:b4:25:c6:b2:98:b6:e9:e8:b5:81:1b:eb:a7:00:44:b0:e6:
9a:87:10:8e:54:41:35:de:5c:ae:9a:1c:3c:6f:b6:55:9c:0a:
99:23:0f:7d:f5:48:05:68:0e:f7:99:9e:70:f4:e6:02:4d:fb:
90:a7:b7:b0:7f:38:11:ed:35:00:54:db:6d:86:8b:23:9a:b4:
bb:8e:8c:7d:29:92:cd:64:9a:35:d4:1f:63:73:9c:b0:a5:84:
8a:b6:c2:08:a0:61:52:00:79:9b:cd:5d:4d:70:98:d6:1e:32:
52:64:73:d7:9c:56:a4:98:65:52:8f:b1:1e:bf:f9:73:70:0a:
66:09:ca:10:1f:fe:f0:c3:59:90:2b:74:8a:ac:96:d2:de:ee:
58:0b:f9:50:9c:e1:b1:84:34:21:2f:66:57:3d:32:05:42:1e:
61:36:3f:96:ba:77:f2:fd:9c:a2:33:c2:e2:94:38:da:b7:62:
82:0b:5e:69:84:72:e8:48:70:52:16:c2:04:4b:7a:8c:d6:22:
6a:d5:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:25:06 2025 by rpki-client