Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/wTYC4zH5JgLGmmIL8cwuLN5qdF0.roa
File: wTYC4zH5JgLGmmIL8cwuLN5qdF0.roa (raw, json)
Hash identifier: T1W7XAGubzubl1esutsHd7BVXV96IKHFs/uvU4Yqlj8=
Subject key identifier: C1:36:02:E3:31:F9:26:02:C6:9A:62:0B:F1:CC:2E:2C:DE:6A:74:5D
Certificate issuer: /CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
Certificate serial: 01857203202825E567D378759A83CE8EC5DE
Authority key identifier: 9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/wTYC4zH5JgLGmmIL8cwuLN5qdF0.roa
Signing time: Mon 02 Jan 2023 10:24:45 +0000
ROA not before: Mon 02 Jan 2023 10:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.255.226.0/23 maxlen: 23
185.255.224.0/23 maxlen: 23
185.248.232.0/23 maxlen: 23
194.33.90.0/23 maxlen: 23
194.33.88.0/23 maxlen: 23
185.248.234.0/23 maxlen: 23
185.241.14.0/23 maxlen: 23
185.241.12.0/23 maxlen: 23
91.193.250.0/23 maxlen: 23
91.193.248.0/23 maxlen: 23
185.254.186.0/23 maxlen: 23
185.254.184.0/23 maxlen: 23
185.92.172.0/24 maxlen: 24
185.92.172.0/23 maxlen: 23
185.92.174.0/23 maxlen: 23
185.92.173.0/24 maxlen: 24
185.92.174.0/24 maxlen: 24
185.92.175.0/24 maxlen: 24
185.227.250.0/23 maxlen: 23
185.227.248.0/23 maxlen: 23
185.227.248.0/22 maxlen: 22
185.246.244.0/24 maxlen: 24
185.246.245.0/24 maxlen: 24
185.246.246.0/24 maxlen: 24
185.246.246.0/23 maxlen: 23
185.246.244.0/23 maxlen: 23
185.246.247.0/24 maxlen: 24
192.145.226.0/23 maxlen: 23
192.145.224.0/23 maxlen: 23
185.227.40.0/24 maxlen: 24
185.227.41.0/24 maxlen: 24
185.227.42.0/24 maxlen: 24
185.227.43.0/24 maxlen: 24
185.227.42.0/23 maxlen: 23
185.227.40.0/23 maxlen: 23
185.240.192.0/23 maxlen: 23
185.240.194.0/23 maxlen: 23
185.247.72.0/24 maxlen: 24
185.247.73.0/24 maxlen: 24
185.247.74.0/24 maxlen: 24
185.247.75.0/24 maxlen: 24
185.233.226.0/23 maxlen: 23
185.233.224.0/23 maxlen: 23
185.246.136.0/24 maxlen: 24
185.246.137.0/24 maxlen: 24
185.246.138.0/24 maxlen: 24
185.246.139.0/24 maxlen: 24
185.145.138.0/23 maxlen: 23
185.145.136.0/23 maxlen: 23
185.145.136.0/22 maxlen: 22
185.246.109.0/24 maxlen: 24
185.246.110.0/24 maxlen: 24
185.246.111.0/24 maxlen: 24
185.246.110.0/23 maxlen: 23
185.246.108.0/24 maxlen: 24
185.226.68.0/24 maxlen: 24
185.226.69.0/24 maxlen: 24
185.226.70.0/24 maxlen: 24
185.226.71.0/24 maxlen: 24
185.226.70.0/23 maxlen: 23
185.226.68.0/23 maxlen: 23
193.56.212.0/23 maxlen: 23
185.231.248.0/24 maxlen: 24
185.231.250.0/23 maxlen: 23
185.231.249.0/24 maxlen: 24
185.231.250.0/24 maxlen: 24
185.231.248.0/23 maxlen: 23
185.231.251.0/24 maxlen: 24
193.43.22.0/23 maxlen: 23
193.43.20.0/23 maxlen: 23
185.252.106.0/23 maxlen: 23
185.245.216.0/24 maxlen: 24
185.245.217.0/24 maxlen: 24
185.245.218.0/24 maxlen: 24
185.245.219.0/24 maxlen: 24
185.245.218.0/23 maxlen: 23
185.245.216.0/23 maxlen: 23
193.56.214.0/23 maxlen: 23
185.252.104.0/23 maxlen: 23
185.244.88.0/22 maxlen: 22
185.251.158.0/23 maxlen: 23
185.251.156.0/23 maxlen: 23
185.251.170.0/23 maxlen: 23
185.251.168.0/23 maxlen: 23
91.197.202.0/23 maxlen: 23
91.197.200.0/23 maxlen: 23
185.243.198.0/23 maxlen: 23
185.243.196.0/23 maxlen: 23
185.243.196.0/22 maxlen: 22
193.223.64.0/23 maxlen: 23
193.223.66.0/23 maxlen: 23
185.95.190.0/23 maxlen: 23
185.95.188.0/23 maxlen: 23
185.54.26.0/23 maxlen: 23
185.249.130.0/23 maxlen: 23
185.249.128.0/23 maxlen: 23
185.242.240.0/22 maxlen: 22
185.242.240.0/23 maxlen: 23
185.54.24.0/22 maxlen: 22
185.54.24.0/23 maxlen: 23
185.249.246.0/23 maxlen: 23
185.249.244.0/23 maxlen: 23
185.249.250.0/23 maxlen: 23
185.249.248.0/23 maxlen: 23
185.249.248.0/22 maxlen: 22
185.242.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:20:28:25:e5:67:d3:78:75:9a:83:ce:8e:c5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d845f409ab2ff2c8147fc1c9a8d00ddf1286117
Validity
Not Before: Jan 2 10:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c13602e331f92602c69a620bf1cc2e2cde6a745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:44:2d:77:09:f0:d6:ac:82:8d:cb:5b:83:
b5:00:07:25:a3:bb:35:be:75:8b:2d:7c:e0:78:09:
f9:4c:81:c1:60:8a:81:87:03:21:0e:de:63:98:af:
82:88:97:6e:62:44:21:71:4d:89:a1:b4:be:a9:f8:
27:1c:e5:e3:11:af:27:43:ae:a3:e1:7b:b2:a7:5e:
7c:be:df:8e:15:df:90:ec:56:25:e3:a7:ce:3e:bf:
65:41:15:5b:75:c8:81:c2:3b:e4:df:73:94:df:c9:
3c:1d:e6:6b:65:42:8d:94:a2:cd:46:dd:9c:e3:1e:
57:02:18:4b:f0:ca:94:63:cf:91:59:bb:cc:fd:18:
83:91:37:de:cc:8e:79:67:43:e7:3d:6f:88:54:b0:
9e:80:a7:f9:61:e3:25:6b:50:61:b3:03:ea:6e:48:
c5:ef:cb:b1:b8:b3:45:46:96:fc:68:68:1f:06:49:
31:5d:cf:39:77:7b:41:13:04:14:f0:43:2f:9c:bf:
52:f5:06:2c:f0:de:ce:ca:b1:36:26:da:dc:45:97:
25:19:66:f5:b5:57:1c:d6:87:fd:74:25:1c:a3:28:
c3:a7:0e:a7:ff:d1:4f:2b:c3:d3:9b:ee:74:89:a2:
ca:cd:7c:9c:71:7e:9b:24:14:28:0a:fa:61:03:52:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:02:E3:31:F9:26:02:C6:9A:62:0B:F1:CC:2E:2C:DE:6A:74:5D
X509v3 Authority Key Identifier:
keyid:9D:84:5F:40:9A:B2:FF:2C:81:47:FC:1C:9A:8D:00:DD:F1:28:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYRfQJqy_yyBR_wcmo0A3fEoYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/wTYC4zH5JgLGmmIL8cwuLN5qdF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e8af1d-8537-4b2d-b9df-52b8cd5a9d88/1/nYRfQJqy_yyBR_wcmo0A3fEoYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.248.0/22
91.197.200.0/22
185.54.24.0/22
185.92.172.0/22
185.95.188.0/22
185.145.136.0/22
185.226.68.0/22
185.227.40.0/22
185.227.248.0/22
185.231.248.0/22
185.233.224.0/22
185.240.192.0/22
185.241.12.0/22
185.242.240.0/22
185.243.196.0/22
185.244.88.0/22
185.245.216.0/22
185.246.108.0/22
185.246.136.0/22
185.246.244.0/22
185.247.72.0/22
185.248.232.0/22
185.249.128.0/22
185.249.244.0-185.249.251.255
185.251.156.0/22
185.251.168.0/22
185.252.104.0/22
185.254.184.0/22
185.255.224.0/22
192.145.224.0/22
193.43.20.0/22
193.56.212.0/22
193.223.64.0/22
194.33.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c7:9b:b2:82:ee:bc:c2:7f:01:ca:64:c1:68:82:71:5e:08:
bd:28:d8:88:84:16:55:0d:0d:be:6a:ef:c0:d8:1a:9c:1e:05:
02:7b:f2:04:04:d5:42:95:7a:92:da:ce:0d:f1:67:7a:81:1c:
7b:ad:e9:89:35:05:32:12:23:3f:fe:f7:0b:21:25:fc:d7:0f:
9f:3c:48:f2:f2:c1:fe:06:95:ee:27:7c:71:1a:c2:4c:c6:b3:
5c:fa:8b:f8:fb:f3:aa:92:a9:41:af:57:9e:79:94:d8:bc:e9:
56:4b:17:52:73:31:79:f4:e1:ff:47:9c:35:93:36:97:f1:1b:
46:e7:50:91:6a:c0:85:22:4a:8c:4c:7f:fb:85:0f:2d:21:a7:
f4:74:a4:d2:30:a2:05:af:51:f3:99:ae:0f:cb:49:67:c2:45:
06:f4:1c:b8:2b:05:d9:73:2f:56:11:14:3a:f5:c1:77:c9:5a:
3b:80:2f:d8:5a:26:ec:12:e7:a6:b7:ae:03:1b:bf:46:e2:f6:
e6:26:6d:19:8b:5e:b1:cd:83:36:c2:12:fa:78:9d:e1:4e:6c:
05:56:a7:6f:43:4f:6d:42:61:ff:49:33:54:00:fe:9d:e3:f1:
16:f6:3d:34:2e:c1:ba:a6:26:6c:8d:5f:e0:3c:b5:e5:a6:d4:
46:40:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org