Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/rAIYg67r6qtKV7UnPfvb70JLRks.roa
File: rAIYg67r6qtKV7UnPfvb70JLRks.roa (raw, json)
Hash identifier: PsmfEZ6CFdpKPawKgVV7Q4JuUJnC4y/v4qmElS22NY0=
Subject key identifier: AC:02:18:83:AE:EB:EA:AB:4A:57:B5:27:3D:FB:DB:EF:42:4B:46:4B
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 0194A76030B59A2D4E7583F01EE7AE424E91
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/rAIYg67r6qtKV7UnPfvb70JLRks.roa
Signing time: Mon 27 Jan 2025 10:48:06 +0000
ROA not before: Mon 27 Jan 2025 10:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210218
IP address blocks: 2.58.93.0/24 maxlen: 24
2.58.94.0/24 maxlen: 24
2.58.136.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.59.248.0/22 maxlen: 22
31.13.194.0/24 maxlen: 24
31.13.249.0/24 maxlen: 24
31.13.250.0/23 maxlen: 23
31.13.252.0/22 maxlen: 22
45.8.74.0/23 maxlen: 23
45.12.248.0/22 maxlen: 22
45.139.100.0/22 maxlen: 22
45.143.100.0/22 maxlen: 22
45.149.232.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
77.75.56.0/23 maxlen: 23
77.75.58.0/23 maxlen: 23
78.40.160.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
87.120.46.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
87.120.64.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.66.0/24 maxlen: 24
87.120.85.0/24 maxlen: 24
87.120.86.0/24 maxlen: 24
87.120.96.0/23 maxlen: 23
87.120.111.0/24 maxlen: 24
87.120.177.0/24 maxlen: 24
87.120.218.0/24 maxlen: 24
87.120.224.0/24 maxlen: 24
87.120.226.0/24 maxlen: 24
87.120.232.0/22 maxlen: 22
87.121.19.0/24 maxlen: 24
87.121.36.0/23 maxlen: 23
87.121.59.0/24 maxlen: 24
87.121.66.0/23 maxlen: 23
87.121.68.0/24 maxlen: 24
87.121.116.0/24 maxlen: 24
87.121.148.0/23 maxlen: 23
91.92.3.0/24 maxlen: 24
91.92.24.0/24 maxlen: 24
91.92.25.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
92.249.51.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.86.0/23 maxlen: 23
93.123.108.0/24 maxlen: 24
94.33.0.0/24 maxlen: 24
94.154.174.0/23 maxlen: 23
94.156.16.0/22 maxlen: 22
94.156.32.0/24 maxlen: 24
94.156.48.0/21 maxlen: 21
94.156.95.0/24 maxlen: 24
94.156.108.0/22 maxlen: 22
94.156.168.0/23 maxlen: 23
94.156.182.0/23 maxlen: 23
94.156.184.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
94.156.192.0/23 maxlen: 23
94.156.234.0/23 maxlen: 23
94.156.240.0/22 maxlen: 22
94.156.246.0/23 maxlen: 23
94.240.56.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
109.206.238.0/24 maxlen: 24
141.98.0.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
164.40.186.0/23 maxlen: 23
171.22.29.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
178.175.184.0/21 maxlen: 21
178.175.184.0/22 maxlen: 22
185.171.148.0/22 maxlen: 22
185.221.66.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.19.200.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.37.43.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
193.46.172.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
193.207.0.0/24 maxlen: 24
193.207.1.0/24 maxlen: 24
193.207.2.0/24 maxlen: 24
193.207.9.0/24 maxlen: 24
193.207.10.0/24 maxlen: 24
193.207.11.0/24 maxlen: 24
193.207.12.0/24 maxlen: 24
193.207.13.0/24 maxlen: 24
193.207.16.0/21 maxlen: 21
194.48.249.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
194.180.50.0/24 maxlen: 24
195.178.120.0/24 maxlen: 24
195.225.120.0/22 maxlen: 22
212.22.128.0/19 maxlen: 19
212.24.0.0/19 maxlen: 19
212.73.135.0/24 maxlen: 24
2a09:e6c0::/29 maxlen: 29
2a09:e6c0::/48 maxlen: 48
2a09:e6c7:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:60:30:b5:9a:2d:4e:75:83:f0:1e:e7:ae:42:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 27 10:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac021883aeebeaab4a57b5273dfbdbef424b464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:c2:c5:0e:9b:6c:13:18:e8:61:fa:05:fc:
cb:07:de:8b:28:c2:da:f7:f5:14:bf:39:5b:ef:a4:
db:0f:79:5a:1d:db:a5:6f:40:2e:bb:01:e0:cf:8e:
f2:34:dc:31:2b:c7:da:a0:d0:4b:3b:93:eb:cb:2e:
23:74:db:86:bf:ff:3e:0c:bc:85:c1:01:a2:a3:ea:
1b:40:38:c9:b4:2e:d8:52:a2:2c:70:be:38:a9:cd:
95:dc:d5:07:ea:58:c9:b2:32:41:08:d7:03:0a:17:
91:28:a6:f2:6a:37:d9:3e:03:26:1f:c4:b1:34:5d:
74:38:04:fb:81:e6:fe:62:1b:af:4b:a1:e4:43:82:
83:cc:86:ae:67:8b:48:bb:b5:5a:26:28:79:93:ce:
e5:fb:be:b4:d3:f0:3a:99:5b:50:09:01:91:ed:18:
32:15:e0:a6:8a:ed:8e:38:82:c7:bd:3f:46:5d:41:
7a:e4:2f:9c:c9:c7:2e:cd:2c:8e:74:37:a4:ff:3e:
55:85:bf:04:04:be:ea:76:20:b0:b0:1b:1a:d4:c1:
c0:67:9d:62:c6:6b:48:15:90:92:d3:77:e7:f6:bb:
59:bc:b7:ac:db:2a:52:7b:a3:62:62:a3:15:6c:4b:
c1:e3:9a:dc:eb:33:72:14:cf:1d:43:68:cc:63:dd:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:18:83:AE:EB:EA:AB:4A:57:B5:27:3D:FB:DB:EF:42:4B:46:4B
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/rAIYg67r6qtKV7UnPfvb70JLRks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
45.8.74.0/23
45.12.248.0/22
45.139.100.0/22
45.143.100.0/22
45.149.232.0/23
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
185.171.148.0/22
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0-193.207.2.255
193.207.9.0-193.207.13.255
193.207.16.0/21
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:7f:7b:d1:2c:2e:a2:47:1a:3f:93:e5:46:59:be:29:e8:ce:
e4:c6:a4:54:36:b4:76:3e:74:34:a9:41:cb:ad:b8:44:dc:fc:
0b:35:88:ab:72:a1:a3:63:42:34:af:91:f0:20:0d:69:96:07:
57:e2:82:b0:ad:4c:7c:b6:67:0b:2f:37:28:1c:42:cf:31:6d:
bd:d8:cc:7d:f3:49:25:31:a2:79:c7:95:7c:7f:e6:81:0c:17:
42:e3:24:66:a6:95:d8:ec:eb:ca:b2:09:ba:2d:76:3f:29:c7:
11:37:88:17:aa:0d:78:58:07:cb:6d:3d:5b:fd:19:6c:51:d2:
10:c9:2b:94:cd:c6:08:a5:6b:8d:39:e3:11:33:b0:b6:aa:2a:
b9:8e:a3:f3:51:39:4c:96:75:e9:fc:03:6c:60:b0:4b:aa:84:
28:37:dd:ec:55:bf:c1:4f:7c:18:11:88:bf:6d:d6:a1:b0:b2:
83:08:e3:90:a6:4f:a3:17:6d:10:f5:73:87:ff:12:1b:7e:77:
f8:14:11:34:68:96:5e:0a:03:d2:d6:3c:a5:cf:a9:5d:88:fa:
d8:08:ea:48:e0:21:fc:4e:19:f8:d2:b7:d0:87:03:f3:06:97:
b4:62:f7:a3:bd:15:56:32:e3:cf:65:5f:d5:b4:42:e5:5d:ca:
e6:ec:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:21 2025 by rpki-client