Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GeRSJFEr5jybdQRCy3ikmHQpeQg.roa
File: GeRSJFEr5jybdQRCy3ikmHQpeQg.roa (raw, json)
Hash identifier: jebCtyJPNWkj35Q5tWRfcst9ItH/SD7+BCH/9AOzXrQ=
Subject key identifier: 19:E4:52:24:51:2B:E6:3C:9B:75:04:42:CB:78:A4:98:74:29:79:08
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0195B28E1163245FF621C021BBFB7C259F9A
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GeRSJFEr5jybdQRCy3ikmHQpeQg.roa
Signing time: Thu 20 Mar 2025 07:56:49 +0000
ROA not before: Thu 20 Mar 2025 07:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:8e:11:63:24:5f:f6:21:c0:21:bb:fb:7c:25:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 20 07:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e45224512be63c9b750442cb78a49874297908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:46:6c:57:38:9e:cb:4a:05:af:86:94:d3:
b6:71:02:fb:ab:a0:87:3a:85:aa:20:eb:e3:95:32:
ca:17:64:12:a9:31:1f:5a:b2:dd:2f:6a:9c:f7:04:
4d:96:c0:de:62:e9:63:4c:dd:fb:d5:0a:55:09:b6:
6f:17:9e:b1:f4:19:a2:66:f0:26:61:2f:50:17:0d:
c7:aa:eb:c9:bb:21:6c:62:ac:52:d5:dc:4f:b1:29:
22:86:4a:8a:ea:6f:bc:46:81:f9:17:7b:14:ab:fd:
6a:c5:c4:84:5e:cc:73:06:97:c0:13:2e:33:78:2e:
ae:f3:92:21:da:ad:e8:8c:e4:c3:26:57:a9:83:d3:
c8:78:c0:20:49:85:10:78:23:8f:13:b4:40:ad:7f:
ae:12:d0:8f:84:ec:db:e1:38:44:69:5e:c5:a9:8a:
2f:59:0d:00:a6:f7:65:32:a5:6a:89:bc:63:23:ae:
89:f1:13:d6:e3:48:39:c0:e9:ef:c2:a5:07:f4:a9:
68:55:54:fd:e3:3e:bf:d1:dd:7d:6d:fb:ba:09:b5:
ed:f1:be:d3:93:d2:8e:e2:91:39:ac:34:34:a5:78:
17:ed:6e:54:80:69:8f:6d:c4:34:5d:7a:7b:5a:bf:
30:51:c6:b9:ee:c8:5b:f4:a8:74:02:74:86:8d:f2:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:52:24:51:2B:E6:3C:9B:75:04:42:CB:78:A4:98:74:29:79:08
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GeRSJFEr5jybdQRCy3ikmHQpeQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.216.255
93.152.218.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:af:9c:b6:80:bc:bb:ef:7a:df:24:1c:23:b1:7b:e9:6d:9d:
0e:52:b7:3a:b2:59:59:a2:21:c7:3c:de:59:0b:ac:73:51:fa:
1d:68:eb:a5:d4:b3:bf:99:8d:d1:31:22:b8:cc:84:7c:be:2a:
5d:44:3d:7b:04:d1:f6:37:48:42:8d:0b:6c:1e:a0:93:ed:23:
ae:47:c6:3e:11:06:19:99:d4:a0:90:dd:40:60:37:1f:00:22:
15:99:6d:69:4b:ab:e0:a9:4a:b4:8c:df:c6:5f:83:3f:d9:7a:
eb:5e:66:5d:25:a8:3e:0e:d9:0f:34:a0:e4:13:c9:04:1e:7c:
6a:21:6e:66:67:c1:ff:91:3a:21:f1:81:99:de:6a:bd:a0:8c:
8e:29:51:4a:96:63:5e:3d:35:b1:db:58:21:56:0f:2e:d3:fd:
4e:47:5f:a7:13:6e:84:eb:1c:ce:67:5b:a2:28:71:ca:7a:3f:
62:46:b5:71:47:ab:d8:40:a0:1c:6c:e0:13:1a:a6:f1:66:90:
e4:b1:c2:9e:6e:b5:34:ae:c7:ee:38:28:29:c2:ba:e2:77:86:
a2:b4:95:27:aa:01:ea:24:c1:3a:c6:80:5d:60:de:0a:b3:0d:
a5:8c:f7:b7:8d:b4:9f:a8:8f:e9:1c:bd:00:3d:d6:ab:83:95:
c7:13:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:30:22 2025 by rpki-client