Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E2YGCkvl1qJmLxaFsCR58I4gibo.roa
File: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (raw, json)
Hash identifier: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=
Subject key identifier: 13:66:06:0A:4B:E5:D6:A2:66:2F:16:85:B0:24:79:F0:8E:20:89:BA
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019427B5D577E0E19E40FE0129FB0FD41BDB
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E2YGCkvl1qJmLxaFsCR58I4gibo.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25255
IP address blocks: 46.220.0.0/16 maxlen: 16
77.116.0.0/14 maxlen: 14
77.116.0.0/17 maxlen: 17
77.116.128.0/17 maxlen: 17
77.117.0.0/17 maxlen: 17
77.119.128.0/20 maxlen: 20
77.119.128.0/22 maxlen: 22
77.119.160.0/20 maxlen: 20
77.119.192.0/19 maxlen: 19
77.119.224.0/19 maxlen: 19
81.3.192.0/18 maxlen: 18
81.3.192.0/24 maxlen: 24
81.3.201.0/24 maxlen: 24
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.210.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
91.141.0.0/17 maxlen: 17
91.141.0.0/20 maxlen: 20
91.141.0.0/22 maxlen: 22
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
94.245.192.0/18 maxlen: 18
94.245.192.0/24 maxlen: 24
109.126.64.0/18 maxlen: 18
178.112.0.0/14 maxlen: 14
178.112.0.0/17 maxlen: 17
178.112.128.0/17 maxlen: 17
178.113.0.0/17 maxlen: 17
178.115.32.0/19 maxlen: 19
178.115.64.0/20 maxlen: 20
178.115.128.0/20 maxlen: 20
178.115.128.0/22 maxlen: 22
178.115.224.0/19 maxlen: 19
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
178.165.128.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.165.192.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
194.24.158.0/24 maxlen: 24
194.24.159.0/24 maxlen: 24
213.94.64.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
213.94.78.0/24 maxlen: 24
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
213.94.95.0/24 maxlen: 24
213.94.96.0/21 maxlen: 21
2a02:2861::/32 maxlen: 32
2a02:2861:d::/48 maxlen: 48
2a02:2861:e::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d5:77:e0:e1:9e:40:fe:01:29:fb:0f:d4:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1366060a4be5d6a2662f1685b02479f08e2089ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:e4:22:78:c6:65:81:ec:6f:c7:58:0a:52:
52:4f:97:99:4c:21:df:e0:6c:5a:d6:da:76:ef:4c:
77:3b:33:bd:60:b6:8e:0e:e4:06:43:aa:99:3a:0a:
94:34:c5:38:82:45:6c:0a:da:b5:ec:6b:52:c3:91:
69:34:c7:34:12:b1:e1:f1:b5:47:97:f0:62:c5:99:
06:7e:48:13:1e:52:ca:41:16:8c:c3:37:d4:c5:89:
c7:05:ff:78:51:5b:35:1b:4a:f8:ab:67:47:90:f9:
3d:5e:67:34:32:af:37:1d:96:a5:f5:8b:56:25:21:
46:bd:4f:01:84:1e:77:92:26:fb:14:52:90:e4:10:
2a:3c:bb:37:a0:bc:29:8b:45:02:f6:b1:9b:85:a5:
d8:1b:06:42:c6:7a:b6:bf:38:c5:14:7d:a6:12:cb:
24:2d:cd:c3:c8:11:93:63:6f:53:30:67:e3:dc:76:
df:58:a4:8e:6d:b8:36:41:bb:05:6d:b3:46:62:c5:
49:ad:7f:a8:d1:1b:10:2c:f1:32:f0:67:5c:de:1f:
54:35:0f:4d:19:ea:74:ea:3c:36:a8:a8:53:73:e3:
7b:66:96:66:34:c8:fa:ab:b4:97:7d:02:de:5e:ea:
b0:c9:ab:0d:7b:00:a0:44:ef:5f:32:1b:84:fd:04:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:06:0A:4B:E5:D6:A2:66:2F:16:85:B0:24:79:F0:8E:20:89:BA
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E2YGCkvl1qJmLxaFsCR58I4gibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
92:fe:3a:fe:82:a5:e5:1f:8e:20:87:0c:38:33:b9:6b:d3:33:
16:01:1f:b5:ae:14:84:87:9e:a2:21:96:3b:58:3d:2c:80:d8:
d5:0b:cb:c7:37:7a:bd:de:e9:db:39:53:5f:b6:7a:a2:3a:4f:
9b:d7:9b:67:b8:27:64:6c:b2:69:e3:a4:64:50:f4:e8:0d:67:
58:02:2c:b6:36:e5:b3:e5:70:4b:b3:bb:c4:73:bf:cb:3f:2f:
4b:fe:03:6a:56:da:88:f1:6b:c3:a3:56:8f:20:8f:28:c2:82:
c8:86:47:95:84:51:23:e7:60:ad:08:64:59:d4:5f:ee:c2:da:
c6:0b:7b:60:82:94:fd:82:4c:15:d5:ec:57:db:ef:ef:9a:f0:
b0:8c:d3:cb:d5:46:f6:c8:86:05:c9:3c:dc:69:5f:56:5c:63:
60:0d:1d:d0:10:6a:05:1e:15:69:5c:3f:48:d8:59:5e:62:79:
ae:7e:cf:b0:21:e6:3d:88:01:66:bf:03:2e:c5:54:0b:ae:ba:
00:48:69:3b:3a:36:94:2f:65:99:70:5a:18:ce:bd:18:6d:e9:
77:b1:53:ba:84:f1:ee:3f:44:3a:46:fc:22:c6:3c:7d:8c:34:
aa:e8:05:79:ed:64:fc:f0:ad:15:9d:b2:95:33:93:b8:cb:1b:
59:bd:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net