Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ELaIItpNMzqHS9OpyWZxQCWwejQ.roa
File: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (raw, json)
Hash identifier: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=
Subject key identifier: 10:B6:88:22:DA:4D:33:3A:87:4B:D3:A9:C9:66:71:40:25:B0:7A:34
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D6FFA3080A74F604CCB9BFD9785235
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ELaIItpNMzqHS9OpyWZxQCWwejQ.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48715
IP address blocks: 78.110.120.0/22 maxlen: 24
80.71.149.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.247.171.0/24 maxlen: 24
130.193.77.0/24 maxlen: 24
152.89.44.0/22 maxlen: 22
152.89.44.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.47.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.36.228.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.112.149.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/22 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.104.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
185.206.231.0/24 maxlen: 24
185.213.195.0/24 maxlen: 24
185.233.131.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.152.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
194.56.148.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
213.109.199.0/24 maxlen: 24
2a0a:5e80::/29 maxlen: 29
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:a3:08:0a:74:f6:04:cc:b9:bf:d9:78:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b68822da4d333a874bd3a9c966714025b07a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:d7:05:37:b1:5d:64:5f:68:bb:3f:22:be:
d1:0a:6c:aa:ab:e5:bd:79:2a:bc:cd:54:d1:21:87:
ee:45:d1:62:69:d1:36:5d:54:d0:84:cb:36:35:90:
9c:f4:4c:71:65:0f:bc:57:01:ad:19:98:fe:f8:e5:
96:1f:97:44:64:d6:40:42:54:15:2c:8f:ff:88:48:
f0:8a:cb:1b:15:d9:85:c1:19:50:b1:2c:41:e6:a2:
9a:15:4c:f2:fc:4d:c3:60:80:a7:2a:f3:8f:ba:2e:
dc:cb:22:84:3b:4a:87:aa:f6:e7:c1:19:67:b7:51:
77:3f:16:81:8b:e3:67:b5:d7:8a:88:d4:b1:47:60:
5b:0b:79:a8:a8:47:63:e1:3e:0c:c5:3b:0e:1d:cf:
eb:63:e9:7f:2d:88:ec:52:8b:3f:b9:29:22:8a:c6:
d9:3c:93:ba:1e:06:c3:86:37:21:2b:53:77:f6:07:
f4:1b:d0:10:06:75:75:44:8c:44:5a:54:f2:7f:f1:
3b:59:5d:e4:c7:06:4e:68:fa:50:a2:15:6d:c5:f6:
ea:bd:4d:f8:71:7c:dc:ee:cb:2b:81:ec:23:73:13:
31:7b:55:59:63:b7:3e:a7:6a:90:26:ef:20:e9:90:
18:32:c0:d1:f5:73:00:98:05:49:28:ae:42:11:35:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:88:22:DA:4D:33:3A:87:4B:D3:A9:C9:66:71:40:25:B0:7A:34
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ELaIItpNMzqHS9OpyWZxQCWwejQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
80.71.149.0/24
88.135.36.0/22
91.236.168.0/23
91.247.171.0/24
130.193.77.0/24
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.206.231.0/24
185.213.195.0/24
185.233.131.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
194.56.148.0/24
195.110.38.0/23
195.211.44.0/22
213.109.199.0/24
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
33:52:72:7e:0a:51:04:6d:a0:c4:ca:e6:7a:0b:bb:95:90:f4:
a0:1c:a6:5f:62:49:4e:32:73:3e:75:82:77:88:da:c9:85:86:
68:dc:74:42:73:f8:df:e7:fe:7c:b1:dd:55:ba:62:70:08:3a:
73:ae:02:73:a8:66:b0:fe:3d:ba:65:83:81:cf:3e:9b:1a:50:
55:42:8f:95:8b:70:1d:20:52:d0:31:e4:0f:22:e8:74:8b:0a:
65:e3:03:19:64:74:f4:3f:00:1d:b1:af:ea:c7:14:13:7a:0f:
e7:64:ce:c2:69:f4:16:1d:9c:65:8a:76:18:11:c8:55:9e:9c:
cb:c7:9d:e2:52:60:03:4c:3e:aa:da:50:47:e1:db:5c:a4:88:
52:df:ab:a1:1b:86:a0:3e:b4:75:ec:4d:6e:a6:d9:b5:41:b8:
a3:87:31:86:5b:a1:b2:77:2b:f9:27:74:a6:11:3d:40:6d:2f:
1e:bf:5b:a0:aa:47:40:2d:7c:f9:4c:09:3a:a6:bc:46:d7:c3:
cd:39:5d:f2:e2:f6:91:36:05:46:d8:47:a5:45:0f:30:f2:55:
31:4e:ae:2f:23:82:af:08:19:9a:68:5a:b8:a3:0a:3e:33:7b:
e0:91:76:0e:b0:03:9b:1c:60:dc:d2:e3:94:08:04:8a:a6:26:
b8:ee:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net