Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/pRh5GBhfV6T4BRbalquH8aDVRR0.roa
File: pRh5GBhfV6T4BRbalquH8aDVRR0.roa (raw, json)
Hash identifier: /E/QxKG//3B3EdekXdobUIPeEpiNE6JRYKp1JIp4sSA=
Subject key identifier: A5:18:79:18:18:5F:57:A4:F8:05:16:DA:96:AB:87:F1:A0:D5:45:1D
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01912280FE44C4857A254551B1E4650175EC
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/pRh5GBhfV6T4BRbalquH8aDVRR0.roa
Signing time: Mon 05 Aug 2024 12:26:04 +0000
ROA not before: Mon 05 Aug 2024 12:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:80:fe:44:c4:85:7a:25:45:51:b1:e4:65:01:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 5 12:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5187918185f57a4f80516da96ab87f1a0d5451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:eb:5d:1f:8e:65:f9:e4:55:fb:bd:89:6c:
9d:93:9a:a6:ae:2e:d5:b8:31:65:8e:46:49:ea:5a:
3e:1b:a5:0a:4c:12:71:47:4e:3b:a3:94:3c:25:13:
a2:6f:ab:60:45:91:f1:13:42:e0:00:04:b2:4c:97:
54:47:48:c0:4e:1f:19:b4:e4:77:ff:08:90:72:6f:
71:fd:74:24:65:79:de:94:d1:6a:09:08:13:61:4c:
4b:28:16:58:84:16:db:a7:fe:dc:f0:44:49:68:4f:
64:24:35:dd:2f:ba:fb:98:c7:7e:b4:28:b2:22:5e:
e9:fc:d6:e5:e4:8e:b6:d0:fa:09:ab:46:d5:ff:4e:
e1:89:e1:0b:08:6f:30:a8:c9:46:08:df:3e:1c:df:
55:27:52:c1:ef:d5:2f:ca:30:93:ee:9b:43:a5:bd:
eb:8e:7d:93:0f:6c:2b:fa:de:44:0f:0d:b9:ec:bf:
36:7f:91:0f:d4:d2:49:a6:f5:1f:53:62:f7:9f:c3:
6c:30:8c:0d:6c:50:24:25:9c:ca:ef:73:1b:47:5d:
91:79:a3:98:47:09:b6:ca:31:d0:fb:31:10:c9:a0:
40:d5:0a:8c:04:34:26:af:d0:bb:9a:ff:26:2e:9a:
23:ed:7e:33:01:fb:15:ea:20:cf:62:72:3f:d5:52:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:18:79:18:18:5F:57:A4:F8:05:16:DA:96:AB:87:F1:A0:D5:45:1D
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/pRh5GBhfV6T4BRbalquH8aDVRR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/23
45.141.235.0/24
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.34.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.218.255
93.152.220.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0/24
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0e:56:25:70:59:0f:a7:7a:58:3d:9e:09:c1:49:aa:54:4e:
4f:05:ef:0d:83:5e:4f:6e:9f:65:3d:00:4d:ef:26:b0:a7:c2:
15:71:d5:64:60:5c:26:42:5b:11:01:90:8d:0a:ff:3d:a8:7c:
8b:d8:a1:d5:03:e1:b0:b1:49:22:d7:aa:70:7e:45:c9:49:28:
b1:45:cb:0a:ba:e7:ea:00:03:0d:29:38:31:51:ce:91:72:f1:
a0:00:a8:ad:ae:10:93:72:63:cd:a9:cf:bd:97:14:09:02:90:
59:29:17:f7:7b:05:12:2d:d9:07:ea:e8:bf:48:f3:f3:d1:4a:
16:80:dc:a1:61:f0:56:53:15:84:37:4d:5d:dd:83:4b:ea:c4:
9e:d7:1a:63:d6:b6:e1:7a:f9:79:7e:12:d8:16:2a:d9:b9:63:
98:db:50:da:5d:c9:48:55:37:0c:80:93:c2:cb:c8:dd:dc:45:
41:49:3e:b5:65:78:54:e3:31:c1:e2:72:2d:a4:4d:83:d3:c8:
0e:94:5d:7c:32:74:f9:35:4a:70:eb:4b:ea:58:2a:a4:ca:1c:
cb:0f:ef:ca:e3:7e:62:cf:c1:3c:05:b8:f2:68:8d:4b:1f:c7:
f4:44:89:1a:92:27:95:bf:56:bf:ae:57:c7:1e:68:ec:9b:31:
30:11:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:39 2025 by rpki-client