Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Sp4iVd_pOq560eUzaVqvX_2Gqas.roa
File: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (raw, json)
Hash identifier: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=
Subject key identifier: 4A:9E:22:55:DF:E9:3A:AE:7A:D1:E5:33:69:5A:AF:5F:FD:86:A9:AB
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019427B5D4BD9497C987EA7D4CAEDEAEC672
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Sp4iVd_pOq560eUzaVqvX_2Gqas.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8437
IP address blocks: 46.57.0.0/17 maxlen: 17
46.57.72.0/22 maxlen: 22
46.57.80.0/21 maxlen: 21
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
46.57.104.0/22 maxlen: 22
46.57.112.0/21 maxlen: 21
46.57.120.0/22 maxlen: 22
46.57.124.0/22 maxlen: 22
62.116.0.0/19 maxlen: 19
62.116.64.0/18 maxlen: 18
62.218.0.0/16 maxlen: 16
62.218.4.0/24 maxlen: 24
62.218.52.0/24 maxlen: 24
62.218.100.0/24 maxlen: 24
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
62.218.205.0/24 maxlen: 24
77.118.0.0/16 maxlen: 16
77.118.14.0/24 maxlen: 24
77.118.17.0/24 maxlen: 24
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
77.118.104.0/22 maxlen: 22
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
77.118.128.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.118.240.0/20 maxlen: 20
77.119.32.0/19 maxlen: 19
77.119.64.0/18 maxlen: 18
77.119.80.0/21 maxlen: 21
77.119.88.0/21 maxlen: 21
77.119.96.0/22 maxlen: 22
77.119.112.0/22 maxlen: 22
78.142.128.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.213.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
86.59.0.0/17 maxlen: 17
91.186.128.0/19 maxlen: 19
178.114.0.0/16 maxlen: 16
178.114.92.0/22 maxlen: 22
178.114.96.0/20 maxlen: 20
178.114.112.0/20 maxlen: 20
178.114.128.0/21 maxlen: 21
178.114.144.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
178.114.176.0/20 maxlen: 20
178.114.192.0/21 maxlen: 21
178.114.208.0/21 maxlen: 21
178.114.216.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
178.115.96.0/19 maxlen: 19
178.115.96.0/24 maxlen: 24
178.115.98.0/24 maxlen: 24
188.118.192.0/18 maxlen: 18
195.70.224.0/19 maxlen: 19
195.96.0.0/19 maxlen: 19
195.248.32.0/19 maxlen: 19
212.27.64.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
213.90.0.0/17 maxlen: 17
213.129.224.0/19 maxlen: 19
213.235.192.0/18 maxlen: 18
213.235.196.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
2001:858::/32 maxlen: 32
2001:858:40::/45 maxlen: 45
2001:938::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d4:bd:94:97:c9:87:ea:7d:4c:ae:de:ae:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9e2255dfe93aae7ad1e533695aaf5ffd86a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:e4:36:67:de:89:7a:7a:74:da:46:36:82:
87:4b:b3:2c:75:15:69:37:af:43:5c:ec:57:cf:64:
f8:d9:bc:0e:8e:d4:60:93:a9:0a:b5:a9:f5:ad:fc:
86:0a:b1:c6:35:aa:2a:cb:c0:d4:f0:44:4e:22:08:
f6:71:5e:0f:e1:cb:03:84:23:44:a1:bb:98:7a:b6:
61:9a:b0:76:94:4a:3d:97:3a:81:f4:f8:77:a4:7f:
12:b3:0c:0b:c6:b0:4c:64:09:16:6a:2e:76:38:d1:
82:b0:3e:b4:0a:78:ab:73:c9:78:b3:4f:7d:1b:c9:
e4:55:db:84:f8:05:25:c6:13:20:60:7d:68:a7:69:
0f:fa:9a:24:d9:62:f5:60:79:5a:3c:88:01:c7:ab:
66:49:f3:d7:69:b3:d8:2d:d9:2a:d7:f2:56:36:60:
bf:a1:8a:0f:99:dd:b8:57:e3:e7:e3:e0:37:2a:ce:
53:11:e3:0b:1d:4d:70:7f:1b:2c:d6:f5:e8:f5:4b:
7a:f2:f9:0b:4d:fd:5e:bd:43:dc:09:9f:38:e2:e1:
dc:8a:86:36:d5:90:78:97:40:26:4b:a6:04:7c:8c:
fa:bc:da:28:49:47:f3:13:bb:05:91:f1:46:05:02:
61:a1:65:14:23:0e:a7:7d:49:6f:3b:30:6f:7a:94:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:22:55:DF:E9:3A:AE:7A:D1:E5:33:69:5A:AF:5F:FD:86:A9:AB
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Sp4iVd_pOq560eUzaVqvX_2Gqas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
69:fa:72:92:43:9c:dd:9c:7b:22:06:e3:96:d7:c2:3e:24:27:
bb:28:0a:df:d1:3d:33:5f:57:17:ce:6d:40:4e:51:04:28:91:
2e:fe:3d:f7:11:c8:dd:af:9e:99:18:a1:ae:55:46:64:5c:d0:
39:c4:08:50:51:3a:5e:a7:ab:82:ef:db:c5:e3:72:ed:2a:4c:
9b:86:34:0a:63:f5:d9:dc:f3:47:e3:62:dc:a4:8a:df:2f:26:
29:3a:fe:18:63:e0:7c:f8:d8:fc:44:a8:f6:e9:17:e3:a0:76:
66:3e:b1:e6:56:1a:28:33:2c:62:de:da:51:9d:e6:45:4b:67:
46:54:a5:ca:28:e4:bb:a5:8c:fd:5a:c5:0a:93:e1:0f:23:34:
6f:cb:09:cf:88:a2:15:e2:d8:e0:28:52:4d:90:48:b6:21:4b:
71:37:84:60:4f:7a:dc:b1:cc:0c:91:15:67:9f:cf:12:27:e3:
a9:ac:10:ea:49:cc:fe:26:7f:5d:f2:a4:7d:82:60:e4:94:1a:
5a:c9:8a:1d:d3:26:9a:d6:95:d7:70:6e:46:ca:e7:6a:6e:6c:
f6:f2:ee:bf:5a:f8:4b:95:a7:22:e3:32:0e:6f:8d:32:66:b7:
e6:e0:c8:f3:0a:e2:4b:bf:a3:c3:d4:e5:ff:33:f2:6d:36:a2:
50:b2:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net