Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uu8Trj_lWMJjlVPGVumowwLMRzk.roa
File: uu8Trj_lWMJjlVPGVumowwLMRzk.roa (raw, json)
Hash identifier: Vija8CoIjrBT0gbQz3cogP7Dm+Z4weUwiVE+n23x8Pg=
Subject key identifier: BA:EF:13:AE:3F:E5:58:C2:63:95:53:C6:56:E9:A8:C3:02:CC:47:39
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0195F5FE2C773D237B427A15E1CFD5824285
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uu8Trj_lWMJjlVPGVumowwLMRzk.roa
Signing time: Wed 02 Apr 2025 10:13:50 +0000
ROA not before: Wed 02 Apr 2025 10:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 2.17.108.0/22 maxlen: 22
2.17.120.0/22 maxlen: 22
2.17.192.0/22 maxlen: 22
2.17.192.0/24 maxlen: 24
2.17.193.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.18.212.0/22 maxlen: 22
2.19.4.0/22 maxlen: 22
2.21.112.0/24 maxlen: 24
2.21.113.0/24 maxlen: 24
2.21.114.0/24 maxlen: 24
2.21.115.0/24 maxlen: 24
2.21.116.0/24 maxlen: 24
2.21.117.0/24 maxlen: 24
2.21.118.0/24 maxlen: 24
2.21.119.0/24 maxlen: 24
2.21.120.0/24 maxlen: 24
2.21.121.0/24 maxlen: 24
2.21.122.0/24 maxlen: 24
2.21.123.0/24 maxlen: 24
2.21.124.0/24 maxlen: 24
2.21.125.0/24 maxlen: 24
2.21.126.0/24 maxlen: 24
2.21.127.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
2.23.128.0/23 maxlen: 23
2.23.130.0/23 maxlen: 23
2.23.132.0/23 maxlen: 23
92.122.184.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
95.100.157.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.204.0/22 maxlen: 22
2a02:2370:1::/48 maxlen: 48
2a02:2370:2::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:202::/48 maxlen: 48
2a02:2370:203::/48 maxlen: 48
2a02:2370:204::/48 maxlen: 48
2a02:2370:205::/48 maxlen: 48
2a02:2370:206::/48 maxlen: 48
2a02:2370:207::/48 maxlen: 48
2a02:2370:208::/48 maxlen: 48
2a02:2370:209::/48 maxlen: 48
2a02:2370:20a::/48 maxlen: 48
2a02:2370:20b::/48 maxlen: 48
2a02:2370:20c::/48 maxlen: 48
2a02:2370:4000::/48 maxlen: 48
2a02:2370:8000::/48 maxlen: 48
2a02:2370:c000::/48 maxlen: 48
2a02:2370:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:fe:2c:77:3d:23:7b:42:7a:15:e1:cf:d5:82:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Apr 2 10:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baef13ae3fe558c2639553c656e9a8c302cc4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:c9:af:2f:cd:7d:6c:9a:87:35:2a:ab:d3:
55:96:13:63:a4:59:82:c3:e6:32:30:a4:59:1e:4a:
a1:8f:c2:f5:48:5d:5a:91:88:c8:ba:38:60:e6:25:
0e:85:e5:2e:86:25:57:8e:38:62:cc:fb:fd:1c:be:
94:fa:4f:62:30:fb:df:36:b2:8d:4f:e4:67:67:3a:
d6:08:1e:45:7c:00:8b:6f:6c:68:19:be:c6:4c:10:
ac:34:50:aa:4d:e1:e8:81:5a:c1:3e:8b:0a:f4:8c:
dc:37:b7:57:8a:fb:cd:f4:98:8e:0f:40:f4:1f:f0:
db:aa:2e:6c:c6:c6:eb:c7:e0:54:f7:c9:5d:10:7c:
bc:a0:d8:b8:89:7a:4b:96:a1:be:65:f4:c5:a6:18:
4c:94:4f:a1:83:1a:8c:60:cc:7a:68:1d:50:94:6c:
d4:60:95:64:d9:b2:05:85:5d:5d:b1:80:8e:03:ea:
7b:e7:27:99:91:2b:9b:d6:1e:3a:90:eb:e7:7a:ae:
c7:a2:f2:80:d8:1e:e7:5a:cc:1e:de:21:4a:e4:c4:
42:fe:27:ca:06:21:ec:b9:54:91:33:be:eb:c9:05:
ed:bb:5a:68:8b:ed:9f:05:37:5a:e6:7c:ef:1b:26:
2c:e2:f8:14:c7:22:50:e4:63:83:d2:f8:2a:96:3c:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:13:AE:3F:E5:58:C2:63:95:53:C6:56:E9:A8:C3:02:CC:47:39
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uu8Trj_lWMJjlVPGVumowwLMRzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.108.0/22
2.17.120.0/22
2.17.192.0/22
2.18.212.0/22
2.19.4.0/22
2.21.112.0/20
2.21.175.0/24
2.23.128.0-2.23.133.255
92.122.184.0/23
92.122.207.0/24
93.191.168.0/23
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
95.101.204.0/22
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::-2a02:2370:20c:ffff:ffff:ffff:ffff:ffff
2a02:2370:4000::/48
2a02:2370:8000::/48
2a02:2370:c000::/48
2a02:2370:f000::/48
Signature Algorithm: sha256WithRSAEncryption
10:e5:30:d9:ef:43:e5:61:79:8e:7d:f1:54:76:a0:e6:b3:c1:
f2:aa:cf:d6:df:2a:22:f9:c2:41:30:5d:8d:a3:d2:96:c4:8d:
97:51:b4:e3:a1:8a:ed:bd:cb:37:ea:d4:05:ad:00:59:ab:4c:
78:63:68:e8:93:ae:f4:77:53:15:ca:cd:dc:b4:d5:54:15:ce:
80:cd:ae:3c:3f:ed:09:98:34:f2:37:08:66:25:53:0b:de:09:
0f:79:ae:90:49:c6:5d:33:86:30:e1:93:94:3b:40:52:8c:71:
de:61:87:58:57:8d:04:08:34:7b:17:69:bd:8c:85:a6:26:b3:
69:8c:35:5f:f2:72:93:f5:ce:37:62:03:c6:c1:4b:b1:93:4f:
8b:9c:f8:61:a8:c0:00:ba:41:ea:8f:81:54:50:98:99:af:b6:
1d:59:ab:c6:89:9d:b5:bd:f1:33:84:c4:36:e3:de:b1:bb:fe:
bd:da:b2:e3:9c:a5:e3:e6:ed:ae:b6:6a:e0:8a:e4:05:fd:d0:
6f:2c:3f:74:0b:6d:43:80:2e:69:3c:84:d8:2e:8d:d2:2c:18:
c5:05:46:0f:46:6a:13:ea:6f:ea:7d:ed:73:8b:1d:09:d7:39:
ad:d1:e4:0b:ca:c6:6e:06:68:f1:25:85:7b:01:4b:25:85:19:
7f:79:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net