Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WYo1adyfh3hR_Juvvf_4maRkt4.roa
File: 8WYo1adyfh3hR_Juvvf_4maRkt4.roa (raw, json)
Hash identifier: uLfsseYc/BSiBn5S/uI0sNaBICe4AVAq9vJI7ODmaCs=
Subject key identifier: F1:66:28:D5:A7:72:7E:1D:E1:47:F2:6E:BE:F7:FF:E2:66:91:92:DE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E61ADD25090C624DFE630A5F72EF001CB
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WYo1adyfh3hR_Juvvf_4maRkt4.roa
Signing time: Thu 21 Mar 2024 15:42:45 +0000
ROA not before: Thu 21 Mar 2024 15:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
195.95.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:ad:d2:50:90:c6:24:df:e6:30:a5:f7:2e:f0:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 21 15:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16628d5a7727e1de147f26ebef7ffe2669192de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:b8:de:41:bb:78:1f:9e:71:e6:6f:ad:55:
9f:88:1b:f6:52:ef:8d:74:d0:42:08:bd:b8:48:21:
26:9a:1b:bb:e3:89:e7:66:1a:69:c3:82:3e:81:d0:
46:62:7a:f8:8b:b3:c9:e4:57:58:07:36:7f:c3:f0:
8d:fc:5b:1f:41:6f:71:30:92:7d:e6:db:8b:e6:f9:
9c:ac:3c:c9:90:11:27:3f:25:bf:e3:28:0a:12:6f:
ef:4f:4e:7e:14:67:47:c9:08:d7:e0:67:e5:62:41:
30:b5:c5:d2:a5:f2:f3:55:04:11:02:2a:ae:3e:8f:
8e:53:29:f6:e2:8a:4b:85:95:82:42:8d:db:0c:45:
71:12:40:b2:4b:93:85:19:45:7e:83:0f:33:b7:bd:
a3:62:88:b6:59:37:5b:8d:84:f2:06:8a:6b:9e:3b:
75:bf:92:a4:c4:0b:73:d2:8b:ad:55:a5:98:0f:49:
1b:01:0c:61:eb:11:13:d0:7e:f4:8d:2e:9e:06:c1:
8e:5c:7c:3b:e8:eb:5a:76:45:3e:e7:a1:8a:19:72:
0e:25:5f:4d:8e:c1:63:1d:28:df:14:07:1c:a0:29:
eb:44:74:56:34:bf:29:10:62:7d:8c:cd:19:5b:7e:
69:a5:2e:4d:05:35:cc:00:c2:0e:72:3d:45:6f:7a:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:28:D5:A7:72:7E:1D:E1:47:F2:6E:BE:F7:FF:E2:66:91:92:DE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/8WYo1adyfh3hR_Juvvf_4maRkt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.123.240.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
98:60:3a:79:80:ea:c0:e8:18:34:ba:00:10:dc:ea:02:cf:f1:
1f:d2:f5:56:d7:e8:11:35:d7:dd:8e:57:96:fd:66:4b:29:48:
4f:59:83:8b:a5:18:41:35:f6:c4:38:33:16:9a:ad:41:f3:f6:
87:84:f0:fe:da:4c:4d:88:2e:3b:c2:99:f1:39:f8:d5:b0:d4:
81:79:cc:ad:9e:93:9f:eb:39:65:f5:fd:b9:3f:ca:61:b1:19:
70:98:c0:00:70:5d:aa:6e:f1:da:14:6e:21:99:20:cb:0a:fc:
ee:a2:5c:39:41:aa:09:e2:40:6c:11:77:49:2f:4e:1e:ea:23:
ba:ac:14:cb:0b:93:5f:48:6c:dc:7f:e0:34:7a:f1:ce:90:61:
f4:c8:55:34:57:93:67:14:75:c6:45:92:e6:07:40:44:65:44:
f0:aa:c0:38:20:1e:51:ca:f1:cf:37:6c:8c:50:c2:3b:a9:11:
35:be:8b:e1:10:8d:f7:67:62:90:82:c6:4a:a5:f2:9f:6a:ef:
0c:6f:6d:5e:52:08:79:fd:c3:a6:05:43:ba:23:09:7d:3f:14:
54:50:1f:77:62:1c:48:b1:c6:75:2e:81:09:e8:44:6b:51:4f:
e8:78:c9:af:76:26:b0:b1:63:e1:9a:ea:13:bb:65:79:d7:ad:
b3:26:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:45 2025 by rpki-client