Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/J1dx3JmHsApM1XTxKwCvAjUVAHI.roa
File: J1dx3JmHsApM1XTxKwCvAjUVAHI.roa (raw, json)
Hash identifier: hvs/xN7J3c4RnIquS831a/n0AoDwUZ4JgN7u6ui/DZQ=
Subject key identifier: 27:57:71:DC:99:87:B0:0A:4C:D5:74:F1:2B:00:AF:02:35:15:00:72
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455B55F9CA3DC1764CE295CD2E5013
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/J1dx3JmHsApM1XTxKwCvAjUVAHI.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.111.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.10.248.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.83.132.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5b:55:f9:ca:3d:c1:76:4c:e2:95:cd:2e:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275771dc9987b00a4cd574f12b00af0235150072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:01:fc:8d:5e:36:51:8c:1a:ff:9c:a8:35:
98:a6:57:dc:b8:9d:b9:6c:23:5f:f3:04:51:e1:29:
48:be:17:cf:9f:b7:8f:ff:05:65:88:cd:b6:69:76:
3b:75:91:4c:6d:5a:a1:b7:1a:bb:a8:c2:24:d3:32:
cc:12:3f:53:ae:7f:da:3d:0f:ca:7e:b4:9f:47:31:
02:82:1a:26:f7:33:e2:dd:09:b5:b6:d2:aa:2e:72:
3f:38:a9:0c:c7:28:73:a6:70:63:d4:26:7e:dc:95:
c8:5a:e3:63:0d:56:bc:72:ef:ce:5e:f8:ac:0b:3f:
60:3a:38:6b:63:a2:bf:a6:2b:31:0a:df:4c:27:4f:
95:70:b9:30:a0:46:c8:44:89:24:51:b1:1d:ca:b6:
4c:62:05:8d:ee:1f:4d:19:08:f5:e3:1c:00:8c:af:
7a:14:2f:5a:9c:ef:0e:a3:1a:ef:20:a1:d3:22:0b:
d2:34:72:0f:91:6f:90:47:a8:02:18:1a:54:45:83:
ec:07:f7:58:ad:5c:f2:b1:f7:f8:e2:59:f6:c0:fa:
d1:ff:5c:c6:23:d1:71:54:f2:52:9b:a7:1a:af:12:
bb:85:e7:64:e3:46:ac:09:24:54:75:d8:ff:3b:8e:
45:cb:46:a4:08:e3:2e:79:61:4f:8c:5f:e5:aa:3a:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:71:DC:99:87:B0:0A:4C:D5:74:F1:2B:00:AF:02:35:15:00:72
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/J1dx3JmHsApM1XTxKwCvAjUVAHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
31.25.176.0/21
37.122.219.0/24
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.70.152.0/22
185.83.132.0/22
185.103.148.0/22
185.153.16.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
193.246.154.0-193.246.157.255
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:3c:f8:94:71:09:47:2d:e5:b3:cb:41:de:fb:43:9d:56:51:
5b:2d:d7:84:dd:b1:98:76:bc:97:01:5a:19:2b:f4:b0:f0:cb:
dd:54:ea:4d:09:e2:df:48:df:33:14:98:b5:e3:2e:44:a3:f1:
f6:cf:b7:36:e0:ba:c2:e7:0f:1c:61:1e:f3:a4:53:fe:3a:f6:
5b:3a:d6:ce:8b:1c:0b:7f:1e:9b:f7:8e:70:89:7f:1a:a0:47:
af:30:69:ed:f3:7f:2e:1d:15:cc:db:06:4f:17:ff:19:4f:80:
b0:a0:e9:f5:a5:35:a2:e5:9d:ed:1d:ee:45:a2:bb:14:08:83:
6e:57:7e:ea:63:ac:70:09:0a:e5:ac:d2:e8:54:95:5c:57:a6:
b5:25:e1:c9:d3:19:fe:89:a0:a7:3d:43:9d:99:5b:6b:8a:f2:
ad:10:50:90:a6:80:79:30:a2:0f:f0:7d:27:36:66:27:40:b9:
1d:f3:d4:45:0c:ed:05:2e:5d:d3:4a:fd:f8:12:e0:aa:76:67:
c4:81:ce:72:ec:8e:37:ad:d3:15:32:45:e2:09:62:a3:e0:13:
7d:10:cb:a4:66:c3:6d:96:88:a4:78:54:8a:66:40:60:42:23:
f7:25:d5:04:aa:e5:15:84:b7:78:02:65:10:47:bb:34:a6:93:
35:48:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:04:01 2025 by rpki-client on console.sobornost.net