Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MTFrOQqhMP9CYZUPMcYCa_Ywr8w.roa
File: MTFrOQqhMP9CYZUPMcYCa_Ywr8w.roa (raw, json)
Hash identifier: A4x9uwqhQl8sowiMLLtH8J3w91CctVtwvNBEglgoPNE=
Subject key identifier: 31:31:6B:39:0A:A1:30:FF:42:61:95:0F:31:C6:02:6B:F6:30:AF:CC
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0195A2DBD20B037F5D85B70417F1DFC7CD2E
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MTFrOQqhMP9CYZUPMcYCa_Ywr8w.roa
Signing time: Mon 17 Mar 2025 06:47:49 +0000
ROA not before: Mon 17 Mar 2025 06:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:db:d2:0b:03:7f:5d:85:b7:04:17:f1:df:c7:cd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 17 06:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31316b390aa130ff4261950f31c6026bf630afcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:cf:23:21:21:dd:86:21:52:4b:31:d9:2c:
9f:c8:1a:89:db:f6:d2:17:95:5e:f2:49:b4:bc:88:
03:92:fb:21:ac:7e:05:14:bd:6f:87:f6:46:95:74:
e2:d5:97:0a:7f:dd:cb:69:df:eb:62:0c:0b:60:a0:
f2:64:64:c9:82:8c:0e:78:89:50:d0:3e:c7:40:c6:
8b:eb:b8:16:2e:2a:5e:5b:65:51:0d:ae:d3:f9:8e:
9b:8f:85:a2:15:81:3f:04:bb:17:ba:ec:d0:1a:93:
0a:09:73:4f:e3:6c:75:cf:68:90:19:99:da:42:65:
39:d6:c2:55:d7:ef:73:8f:0b:ee:c4:c1:fc:0f:8c:
5a:59:7c:3e:5e:10:fe:d8:1d:11:55:e4:c0:be:81:
c8:ef:1d:be:c3:61:0f:cd:0e:1f:54:da:79:28:c0:
a6:fd:d8:c0:d0:ac:b8:08:2c:d7:32:f4:7c:6d:9d:
04:c1:11:5d:74:40:eb:b2:95:49:9a:7b:18:3a:b7:
14:dc:2f:fd:3d:70:6a:27:0e:02:cd:f5:fb:72:6d:
0d:71:e9:c3:9d:c2:f3:56:85:7e:29:91:a8:df:ce:
ae:15:a3:bc:5b:c6:81:87:c4:47:48:13:29:25:27:
fe:ea:9e:d8:8e:58:37:69:39:35:fd:63:a5:b0:ef:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:6B:39:0A:A1:30:FF:42:61:95:0F:31:C6:02:6B:F6:30:AF:CC
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MTFrOQqhMP9CYZUPMcYCa_Ywr8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ac:bc:97:f3:0b:8b:3b:11:ca:df:b5:18:48:8d:5c:b9:ee:
e9:97:01:3f:94:ea:22:e2:70:32:02:57:a4:0e:cf:50:06:92:
f8:9d:bd:bb:28:eb:b4:30:5e:46:3c:62:46:a0:78:38:fd:c1:
25:be:60:b0:32:32:be:51:1d:2c:e3:77:63:38:34:1e:80:95:
bf:a4:12:06:73:f6:83:a0:57:1b:aa:e1:55:ba:f4:aa:8c:0d:
43:07:00:d9:5f:5e:44:70:36:15:04:af:4f:c1:9a:d8:c3:47:
26:a9:29:57:95:5a:1e:34:19:ed:43:09:83:bd:87:cd:0a:d6:
a4:87:16:ad:7c:4b:f2:f7:94:f3:6c:12:a6:b1:ad:fd:02:40:
5e:d5:b9:89:57:3b:6a:17:c5:80:13:8f:fd:ae:2b:4f:6e:93:
48:f8:3f:1f:08:f7:3f:f7:94:72:02:91:a4:00:60:e1:7a:be:
89:79:81:b5:aa:6b:8c:be:6a:1b:df:c2:7f:28:f5:bd:cd:0d:
d9:49:d1:f3:29:78:33:49:65:9b:2c:55:f1:9c:32:11:aa:19:
a1:a8:c8:46:57:fe:a5:f8:37:f4:54:e2:c2:a7:50:ed:97:bc:
0f:7c:38:70:d5:20:06:84:a2:5b:c2:3c:2d:ee:c3:5b:79:92:
40:94:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:24:42 2025 by rpki-client