Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/EWCs9IFonEHqhRbBmYk5-oHPZo0.roa
File: EWCs9IFonEHqhRbBmYk5-oHPZo0.roa (raw, json)
Hash identifier: j8fdi8n9Oo+J4SMu6M4P13rglJhkrK0dZshnV73c9Bg=
Subject key identifier: 11:60:AC:F4:81:68:9C:41:EA:85:16:C1:99:89:39:FA:81:CF:66:8D
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 019427B5B585B258705629C10DA75F5007D6
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/EWCs9IFonEHqhRbBmYk5-oHPZo0.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210218
IP address blocks: 2.58.93.0/24 maxlen: 24
2.58.94.0/24 maxlen: 24
2.58.136.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.59.248.0/22 maxlen: 22
31.13.194.0/24 maxlen: 24
31.13.249.0/24 maxlen: 24
31.13.250.0/23 maxlen: 23
31.13.252.0/22 maxlen: 22
45.8.74.0/23 maxlen: 23
45.12.248.0/22 maxlen: 22
45.139.100.0/22 maxlen: 22
45.143.100.0/22 maxlen: 22
45.149.232.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
77.75.56.0/23 maxlen: 23
77.75.58.0/23 maxlen: 23
78.40.160.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
87.120.46.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
87.120.64.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.66.0/24 maxlen: 24
87.120.85.0/24 maxlen: 24
87.120.86.0/24 maxlen: 24
87.120.96.0/23 maxlen: 23
87.120.111.0/24 maxlen: 24
87.120.177.0/24 maxlen: 24
87.120.218.0/24 maxlen: 24
87.120.224.0/24 maxlen: 24
87.120.226.0/24 maxlen: 24
87.120.232.0/22 maxlen: 22
87.121.19.0/24 maxlen: 24
87.121.36.0/23 maxlen: 23
87.121.59.0/24 maxlen: 24
87.121.66.0/23 maxlen: 23
87.121.68.0/24 maxlen: 24
87.121.116.0/24 maxlen: 24
87.121.148.0/23 maxlen: 23
91.92.3.0/24 maxlen: 24
91.92.24.0/24 maxlen: 24
91.92.25.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
92.249.51.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.86.0/23 maxlen: 23
93.123.108.0/24 maxlen: 24
94.154.174.0/23 maxlen: 23
94.156.16.0/22 maxlen: 22
94.156.32.0/24 maxlen: 24
94.156.48.0/21 maxlen: 21
94.156.95.0/24 maxlen: 24
94.156.108.0/22 maxlen: 22
94.156.168.0/23 maxlen: 23
94.156.182.0/23 maxlen: 23
94.156.184.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
94.156.192.0/23 maxlen: 23
94.156.234.0/23 maxlen: 23
94.156.240.0/22 maxlen: 22
94.156.246.0/23 maxlen: 23
94.240.56.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
109.206.238.0/24 maxlen: 24
141.98.0.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
164.40.186.0/23 maxlen: 23
171.22.29.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
178.175.184.0/21 maxlen: 21
178.175.184.0/22 maxlen: 22
185.171.148.0/22 maxlen: 22
185.221.66.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.19.200.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.37.43.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
193.46.172.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
193.207.0.0/24 maxlen: 24
193.207.1.0/24 maxlen: 24
193.207.2.0/24 maxlen: 24
193.207.9.0/24 maxlen: 24
193.207.10.0/24 maxlen: 24
193.207.11.0/24 maxlen: 24
193.207.12.0/24 maxlen: 24
193.207.13.0/24 maxlen: 24
193.207.16.0/21 maxlen: 21
194.48.249.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
194.180.50.0/24 maxlen: 24
195.178.120.0/24 maxlen: 24
195.225.120.0/22 maxlen: 22
212.22.128.0/19 maxlen: 19
212.24.0.0/19 maxlen: 19
212.73.135.0/24 maxlen: 24
2a09:e6c0::/29 maxlen: 29
2a09:e6c0::/48 maxlen: 48
2a09:e6c7:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b5:85:b2:58:70:56:29:c1:0d:a7:5f:50:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1160acf481689c41ea8516c1998939fa81cf668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:2d:0e:c2:c4:9e:8f:37:1e:fa:73:4e:4f:
f0:c2:a3:a1:e2:62:cc:3e:4c:d0:de:00:a6:21:3b:
68:11:58:4b:f0:09:61:17:8c:32:31:72:45:50:c2:
0a:2a:da:4c:73:32:aa:24:10:93:f8:0b:90:eb:53:
83:0a:42:dd:0a:3f:83:92:0c:36:3e:77:a0:c0:36:
74:c3:3b:75:1f:80:8c:ad:18:f3:da:f7:7a:ec:a8:
43:39:f5:18:e7:0c:b8:bb:c1:f4:a0:8c:ee:af:bc:
75:c6:32:3c:77:9f:dc:91:38:f8:7a:81:31:09:89:
d7:34:fe:05:19:d3:21:a9:79:2d:ef:57:da:5a:dc:
15:1c:4a:4c:4a:26:4a:e5:2d:22:e4:d8:d6:ec:63:
03:13:6d:a5:99:15:76:17:ca:f2:5a:74:9f:63:89:
96:ed:b3:1e:43:64:7f:e0:36:31:d6:09:bd:55:9e:
7b:b9:7f:ce:48:d0:7e:b7:80:4a:94:83:b4:de:c7:
f7:a3:78:ad:cd:fb:9a:44:28:97:3c:31:07:4b:d4:
1b:ca:76:fd:e0:56:4b:0d:2b:92:a7:d9:53:2d:71:
04:6d:68:d7:30:63:d1:74:f3:bb:39:ea:28:9b:31:
ee:c9:93:59:9c:8d:f6:64:e7:84:76:d2:fe:40:19:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:AC:F4:81:68:9C:41:EA:85:16:C1:99:89:39:FA:81:CF:66:8D
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/EWCs9IFonEHqhRbBmYk5-oHPZo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
45.8.74.0/23
45.12.248.0/22
45.139.100.0/22
45.143.100.0/22
45.149.232.0/23
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
185.171.148.0/22
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0-193.207.2.255
193.207.9.0-193.207.13.255
193.207.16.0/21
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:b9:e7:a0:b7:8a:00:b0:e6:84:8a:6c:b3:a4:b2:86:a1:5b:
78:9f:3e:24:81:0b:3b:2a:22:c6:c3:e2:4c:d2:a3:74:51:70:
b2:dd:13:3b:8f:68:41:29:23:53:b8:7c:3f:5b:e7:69:e9:62:
98:ab:68:18:96:d8:03:ea:74:34:2c:25:9c:eb:70:9d:77:fb:
eb:cb:35:69:ee:7f:48:5e:f8:3b:ed:15:3c:ff:32:1d:52:9a:
85:9a:88:ad:30:e5:92:af:09:6d:d3:da:50:9e:99:4b:fd:ed:
06:1c:01:7e:b2:fc:90:b5:91:d8:d0:ea:e6:30:f5:fc:b7:0e:
53:47:00:5e:2c:1c:90:1c:a4:b4:43:ec:30:1b:5b:14:00:c4:
f3:3a:f5:58:7d:f3:23:a2:40:ea:33:30:6b:7f:74:cd:26:65:
78:94:52:4c:fc:0c:49:de:78:fa:61:60:56:a3:74:ba:fa:3c:
f9:f2:dd:15:e4:19:43:51:55:37:3c:5e:e4:69:3b:32:f2:3a:
6f:5c:b8:01:3a:4b:ee:4d:13:be:ae:05:96:80:10:6a:4c:8e:
76:dd:4f:5c:0a:4c:f3:cb:82:07:f7:bf:80:2a:5a:ac:15:12:
fb:f0:3c:b4:c8:bf:85:9f:70:39:f5:b5:79:c6:d1:bb:96:d7:
a5:18:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:46 2025 by rpki-client