Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hGQsn_NH6P_DkT99qq2iVGYg8XA.roa
File: hGQsn_NH6P_DkT99qq2iVGYg8XA.roa (raw, json)
Hash identifier: 6eSTSgqKR7uXR+e7fx3WMAZfKPrYtHrQtBn3EJau1sU=
Subject key identifier: 84:64:2C:9F:F3:47:E8:FF:C3:91:3F:7D:AA:AD:A2:54:66:20:F1:70
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BEF304B9175734C111D1402A74139B154
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hGQsn_NH6P_DkT99qq2iVGYg8XA.roa
Signing time: Tue 21 Nov 2023 00:03:21 +0000
ROA not before: Tue 21 Nov 2023 00:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200598
IP address blocks: 194.149.76.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
79.110.184.0/22 maxlen: 24
195.78.90.0/23 maxlen: 24
121.127.48.0/20 maxlen: 24
173.214.200.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
162.216.138.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
24.235.22.0/23 maxlen: 24
77.223.200.0/23 maxlen: 24
91.210.80.0/22 maxlen: 24
204.15.4.0/22 maxlen: 24
69.72.72.0/22 maxlen: 24
176.222.48.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
89.20.50.0/23 maxlen: 24
95.215.144.0/22 maxlen: 24
217.144.108.0/22 maxlen: 24
158.247.56.0/22 maxlen: 24
83.142.200.0/21 maxlen: 24
77.223.192.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
205.220.216.0/23 maxlen: 24
128.0.60.0/22 maxlen: 24
85.204.28.0/23 maxlen: 24
192.200.192.0/19 maxlen: 24
86.106.28.0/23 maxlen: 24
199.48.230.0/23 maxlen: 24
176.111.54.0/23 maxlen: 24
168.149.248.0/23 maxlen: 24
193.91.8.0/23 maxlen: 24
141.193.214.0/23 maxlen: 24
91.217.106.0/23 maxlen: 24
74.124.204.0/22 maxlen: 24
89.37.60.0/23 maxlen: 24
50.20.224.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
31.187.92.0/22 maxlen: 24
89.40.236.0/23 maxlen: 24
134.199.80.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:30:4b:91:75:73:4c:11:1d:14:02:a7:41:39:b1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 21 00:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84642c9ff347e8ffc3913f7daaada2546620f170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:6f:9e:00:b3:50:f8:5e:88:8f:9b:cb:14:
4b:5a:9c:16:e5:f2:40:ac:34:bd:6e:5b:76:8b:50:
ea:0d:1f:ce:9f:26:78:91:1c:02:fc:d4:dd:29:68:
57:2b:b5:99:84:38:c5:b2:4c:6e:e8:4f:0f:b7:75:
e7:9b:f9:59:db:23:b2:18:de:31:1f:3f:86:d6:49:
1c:64:30:48:28:dd:f5:fd:cb:7e:24:26:8b:54:24:
03:19:37:8c:98:59:28:f0:a2:d2:7c:81:24:f5:1a:
1b:19:ab:3a:74:16:04:a8:6a:ac:7f:0a:33:e7:6c:
01:b2:67:6c:20:e3:a3:27:d7:c6:01:18:01:13:ae:
d8:e6:a4:45:ba:30:53:60:23:65:79:20:bf:30:94:
1e:bc:b6:77:a7:5c:76:9b:63:5b:c8:61:f0:f2:20:
4c:e9:a4:2f:f0:7f:23:16:83:86:48:ea:7c:c2:e0:
04:54:36:60:35:a1:97:94:58:c2:fa:a8:c0:ea:03:
f2:4a:e2:98:fd:a4:42:3f:9d:f4:a8:27:c7:6b:f7:
f5:8a:2f:c7:cd:df:e5:4f:db:55:1d:15:eb:84:85:
c6:58:f2:00:97:ea:49:dc:68:57:3e:73:d7:d5:39:
68:27:f5:d3:00:15:c4:15:ff:18:4c:76:da:30:34:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:2C:9F:F3:47:E8:FF:C3:91:3F:7D:AA:AD:A2:54:66:20:F1:70
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hGQsn_NH6P_DkT99qq2iVGYg8XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
31.187.92.0/22
50.20.224.0/20
66.9.96.0/20
66.117.8.0/22
69.72.72.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.210.80.0/22
91.217.106.0/23
95.215.144.0/22
121.127.48.0/20
128.0.60.0/22
134.199.80.0/20
141.193.108.0/22
141.193.214.0/23
158.247.56.0/22
162.216.138.0/23
162.250.216.0/22
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
192.200.192.0/19
193.91.8.0/23
194.149.76.0/22
195.78.90.0/23
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.134.244.0/22
205.220.216.0/23
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
84:16:a6:5c:60:5d:08:65:1b:e1:54:6e:ba:5b:0a:9c:9e:a8:
34:b9:f8:60:08:10:1a:c1:87:ce:e7:7d:ae:9c:82:a1:b8:65:
91:bd:22:74:52:4c:ad:77:3f:6a:79:c4:c0:31:9d:08:98:09:
1f:70:06:ec:cb:e5:86:90:7d:98:b2:59:63:b2:a1:00:5d:d3:
3a:68:a2:90:41:b1:93:3e:6b:09:57:84:41:f6:96:c4:8b:ab:
83:73:40:70:c7:c5:ed:cd:25:2e:d9:f6:fb:fa:f7:f1:00:49:
7f:d4:61:21:61:00:98:7e:ee:f0:7e:08:d7:af:91:bf:ba:b3:
9f:a8:fb:c4:4f:a3:94:ab:1b:c4:2a:94:cb:7e:cc:69:ce:20:
fd:5c:7e:ef:49:6a:24:2a:8d:12:31:fb:41:e9:cc:eb:3d:81:
4d:6a:1a:71:1f:0d:82:56:62:29:7a:8a:45:c7:5e:f1:1c:58:
bb:4c:6f:4a:60:d4:a6:36:ea:c7:8e:bc:c0:05:08:7b:25:9c:
de:41:64:ab:3e:1c:58:59:37:7d:2c:53:12:d4:2d:03:a3:df:
5d:d2:a9:23:2f:e0:2a:81:d1:4f:5d:d3:64:fe:2d:ff:af:a6:
91:9a:e6:d8:b4:e3:fd:ac:cc:44:a4:18:17:6b:95:a8:fe:4b:
c4:c6:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:21 2025 by rpki-client