Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/19-_vY6bWl2zTfGSHLt4AR-Qr_M.roa
File: 19-_vY6bWl2zTfGSHLt4AR-Qr_M.roa (raw, json)
Hash identifier: I7mn9sBNyVx0dc2q/q3+x+XP3WMgLdm4k/y+h5tTP/c=
Subject key identifier: D7:DF:BF:BD:8E:9B:5A:5D:B3:4D:F1:92:1C:BB:78:01:1F:90:AF:F3
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 01852009B5B95DFB903E1FE928177FF52DB4
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/19-_vY6bWl2zTfGSHLt4AR-Qr_M.roa
Signing time: Sat 17 Dec 2022 12:23:05 +0000
ROA not before: Sat 17 Dec 2022 12:23:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59447
IP address blocks: 198.55.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
198.55.30.0/24 maxlen: 24
185.4.225.0/24 maxlen: 24
23.252.67.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
162.218.177.0/24 maxlen: 24
162.218.176.0/24 maxlen: 24
162.218.179.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
162.218.178.0/24 maxlen: 24
167.160.1.0/24 maxlen: 24
167.160.0.0/24 maxlen: 24
167.160.2.0/24 maxlen: 24
167.160.4.0/24 maxlen: 24
167.160.3.0/24 maxlen: 24
162.222.90.0/24 maxlen: 24
162.222.89.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.13.0/24 maxlen: 24
167.160.12.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.19.0/24 maxlen: 24
167.160.21.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
167.160.30.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
107.150.163.0/24 maxlen: 24
107.150.162.0/24 maxlen: 24
107.150.164.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
107.150.167.0/24 maxlen: 24
107.150.168.0/24 maxlen: 24
107.150.169.0/24 maxlen: 24
107.150.172.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
107.150.173.0/24 maxlen: 24
107.150.175.0/24 maxlen: 24
185.212.174.0/24 maxlen: 24
2a07:5140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:09:b5:b9:5d:fb:90:3e:1f:e9:28:17:7f:f5:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Dec 17 12:23:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7dfbfbd8e9b5a5db34df1921cbb78011f90aff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:dd:5a:26:5a:fa:e9:b6:4b:25:98:61:a9:
49:a8:78:1b:ef:d3:8a:da:3f:03:fe:a1:a3:42:76:
eb:57:ce:f3:43:9c:b9:0f:fb:26:1c:e5:ce:fe:8d:
99:92:2e:42:23:9b:be:19:37:f1:ec:70:eb:ce:56:
64:0f:76:ac:0a:7a:65:c7:58:39:58:b5:18:ac:c6:
76:28:c6:71:a4:62:91:73:86:7f:b4:c9:34:ef:f8:
a9:82:82:5e:0a:dd:7d:2d:c2:20:01:2a:62:88:66:
29:dd:96:07:ef:44:b5:24:ce:34:a4:09:a4:3b:fe:
b0:bc:70:6d:b5:a8:d1:a0:af:9f:0f:33:2b:f9:0e:
34:6c:7c:24:72:2f:a4:99:cb:56:79:68:5c:e0:81:
c4:4b:f6:3c:5f:20:89:64:81:94:2c:ba:30:15:d8:
b5:ad:6f:b9:1f:b0:68:8e:02:31:08:03:cf:be:1f:
21:1a:52:6b:67:e1:8a:2c:bb:a8:73:51:bd:cf:b3:
8a:9c:20:96:74:b1:20:5a:16:9a:b4:c6:43:70:5d:
91:45:ff:54:6d:a8:3f:74:d7:91:d7:c3:d9:64:88:
35:07:04:49:3f:0c:00:96:4a:26:05:81:7e:4b:c5:
1e:25:8d:e4:2b:d1:40:79:2a:2c:60:10:92:6f:39:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:BF:BD:8E:9B:5A:5D:B3:4D:F1:92:1C:BB:78:01:1F:90:AF:F3
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/19-_vY6bWl2zTfGSHLt4AR-Qr_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.67.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
107.150.162.0-107.150.164.255
107.150.166.0-107.150.169.255
107.150.171.0-107.150.173.255
107.150.175.0/24
162.218.176.0/22
162.222.89.0-162.222.90.255
167.160.0.0-167.160.4.255
167.160.12.0/23
167.160.16.0/23
167.160.19.0/24
167.160.21.0/24
167.160.28.0-167.160.30.255
185.4.225.0/24
185.161.110.0/23
185.212.174.0/24
198.55.28.0/22
IPv6:
2a07:5140::/29
Signature Algorithm: sha256WithRSAEncryption
ac:71:f5:39:fa:c0:57:70:32:60:2a:17:6e:9b:7c:3c:00:5a:
ae:ff:df:93:42:36:5a:93:35:cb:e6:7e:04:e2:0d:da:23:db:
b0:09:7e:92:f9:6a:27:23:b1:4c:22:4e:30:78:4c:f4:4d:3b:
40:0a:fe:6d:57:cc:f8:1a:ab:9c:dd:e2:db:c9:78:93:87:43:
af:e2:ce:8d:19:b4:d5:7d:5f:fa:28:92:67:62:da:57:2a:4d:
f3:71:66:67:9e:c8:2b:f3:99:24:51:cc:63:ba:c1:14:da:a4:
2c:13:82:ca:7b:6c:fa:57:9d:5a:17:1a:35:29:73:5d:22:e9:
d1:fa:5f:69:51:19:0d:83:5a:ef:da:b8:3e:65:2c:47:95:78:
c7:d9:4b:af:31:dc:35:c5:93:8b:6e:2c:0c:15:92:22:cb:a5:
a4:d3:40:07:33:12:3c:30:27:6c:e1:85:81:fc:31:9d:3a:cb:
56:18:33:15:70:17:7d:57:c7:dc:63:27:b0:fa:e1:a1:52:b8:
11:06:2a:e4:af:65:29:02:25:f4:15:3a:a5:8f:aa:a0:70:af:
8d:59:5e:9c:d6:f1:1f:dd:4a:0d:b3:03:32:d6:7c:b0:16:dd:
0d:9e:1f:0c:14:b0:4b:87:0c:d4:07:ad:ec:70:ff:d4:13:ff:
a1:8f:e4:a9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYUgCbW5XfuQPh/pKBd/9S20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjRkZWZiYWFkZTkzZTk5OGUxM2E5NDIwMjlkZDU5M2I4
YjJlYTMwHhcNMjIxMjE3MTIyMzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2RmYmZiZDhlOWI1YTVkYjM0ZGYxOTIxY2JiNzgwMTFmOTBhZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLdWiZa+um2SyWYYalJqHgb79OK
2j8D/qGjQnbrV87zQ5y5D/smHOXO/o2Zki5CI5u+GTfx7HDrzlZkD3asCnplx1g5
WLUYrMZ2KMZxpGKRc4Z/tMk07/ipgoJeCt19LcIgASpiiGYp3ZYH70S1JM40pAmk
O/6wvHBttajRoK+fDzMr+Q40bHwkci+kmctWeWhc4IHES/Y8XyCJZIGULLowFdi1
rW+5H7BojgIxCAPPvh8hGlJrZ+GKLLuoc1G9z7OKnCCWdLEgWhaatMZDcF2RRf9U
bag/dNeR18PZZIg1BwRJPwwAlkomBYF+S8UeJY3kK9FAeSosYBCSbznedwIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFNffv72Om1pds03xkhy7eAEfkK/zMB8GA1UdIwQY
MBaAFFMk3vuq3pPpmOE6lCAp3Vk7iy6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2Qt
MzNiNzQ1OTk3NWUwLzEvMTktX3ZZNmJXbDJ6VGZHU0hMdDRBUi1Rcl9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2QtMzNiNzQ1OTk3NWUw
LzEvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBvgQCAAEwgbcwDAME
ABf8QwMEABf8RAMEABf8RzAMAwQAF/xLAwQAF/xMAwQAF/xPMAwDBAFrlqIDBABr
lqQwDAMEAWuWpgMEAWuWqDAMAwQAa5arAwQBa5asAwQAa5avAwQCotqwMAwDBACi
3lkDBACi3lowCwMDBaegAwQAp6AEAwQBp6AMAwQBp6AQAwQAp6ATAwQAp6AVMAwD
BAKnoBwDBACnoB4DBAC5BOEDBAG5oW4DBAC51K4DBALGNxwwDQQCAAIwBwMFAyoH
UUAwDQYJKoZIhvcNAQELBQADggEBAKxx9Tn6wFdwMmAqF26bfDwAWq7/35NCNlqT
NcvmfgTiDdoj27AJfpL5aicjsUwiTjB4TPRNO0AK/m1XzPgaq5zd4tvJeJOHQ6/i
zo0ZtNV9X/ookmdi2lcqTfNxZmeeyCvzmSRRzGO6wRTapCwTgsp7bPpXnVoXGjUp
c10i6dH6X2lRGQ2DWu/auD5lLEeVeMfZS68x3DXFk4tuLAwVkiLLpaTTQAczEjww
J2zhhYH8MZ06y1YYMxVwF31Xx9xjJ7D64aFSuBEGKuSvZSkCJfQVOqWPqqBwr41Z
XpzW8R/dSg2zAzLWfLAW3Q2eHwwUsEuHDNQHrexw/9QT/6GP5Kk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:30 2025 by rpki-client