Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/0-dFdMQBS6PQc_H8zCEvitr9Geo.roa
File: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (raw, json)
Hash identifier: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=
Subject key identifier: D3:E7:45:74:C4:01:4B:A3:D0:73:F1:FC:CC:21:2F:8A:DA:FD:19:EA
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 0194CC61268E8782CCBA9047E33835AF8977
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/0-dFdMQBS6PQc_H8zCEvitr9Geo.roa
Signing time: Mon 03 Feb 2025 15:15:06 +0000
ROA not before: Mon 03 Feb 2025 15:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31638
IP address blocks: 5.144.184.0/21 maxlen: 24
5.144.184.0/22 maxlen: 22
5.144.188.0/22 maxlen: 22
5.144.188.0/24 maxlen: 24
5.144.190.0/24 maxlen: 24
37.156.96.0/22 maxlen: 23
37.156.96.0/23 maxlen: 23
37.156.98.0/23 maxlen: 23
37.156.148.0/22 maxlen: 23
37.156.148.0/23 maxlen: 23
37.156.150.0/23 maxlen: 23
37.156.168.0/22 maxlen: 23
37.156.168.0/23 maxlen: 23
37.156.170.0/23 maxlen: 23
37.156.208.0/22 maxlen: 23
37.156.208.0/23 maxlen: 23
37.156.210.0/23 maxlen: 23
46.255.80.0/21 maxlen: 24
46.255.80.0/22 maxlen: 22
46.255.80.0/24 maxlen: 24
46.255.83.0/24 maxlen: 24
46.255.84.0/22 maxlen: 22
46.255.85.0/24 maxlen: 24
86.104.6.0/24 maxlen: 24
86.104.229.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
86.105.179.0/24 maxlen: 24
89.33.232.0/24 maxlen: 24
89.34.6.0/24 maxlen: 24
89.39.92.0/24 maxlen: 24
89.39.224.0/20 maxlen: 21
89.39.224.0/21 maxlen: 21
89.39.232.0/21 maxlen: 21
89.42.230.0/24 maxlen: 24
89.44.206.0/24 maxlen: 24
89.45.24.0/21 maxlen: 21
89.45.24.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.26.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
89.45.95.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
93.113.89.0/24 maxlen: 24
93.115.170.0/23 maxlen: 23
93.118.37.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
94.177.151.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
185.82.168.0/22 maxlen: 23
185.82.168.0/23 maxlen: 23
185.82.169.0/24 maxlen: 24
185.82.170.0/23 maxlen: 23
185.82.170.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
188.209.80.0/21 maxlen: 21
188.209.80.0/24 maxlen: 24
188.209.81.0/24 maxlen: 24
188.209.82.0/24 maxlen: 24
188.209.83.0/24 maxlen: 24
188.209.86.0/24 maxlen: 24
188.209.87.0/24 maxlen: 24
188.209.88.0/21 maxlen: 21
188.209.88.0/24 maxlen: 24
188.209.89.0/24 maxlen: 24
188.210.239.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.44.0/22 maxlen: 23
188.215.45.0/24 maxlen: 24
188.215.65.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.215.248.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
188.241.190.0/23 maxlen: 24
195.62.160.0/19 maxlen: 20
195.62.160.0/20 maxlen: 20
195.62.176.0/20 maxlen: 20
2a02:20d8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:61:26:8e:87:82:cc:ba:90:47:e3:38:35:af:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Feb 3 15:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3e74574c4014ba3d073f1fccc212f8adafd19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:5e:b2:6f:1c:3c:58:3f:d1:2f:3b:42:f7:
d3:42:fe:59:d2:94:ca:0d:59:8d:93:7c:49:af:8e:
e7:4a:a5:14:56:43:02:b9:c4:09:16:42:86:1f:97:
90:2a:8d:0e:a1:57:45:f6:75:38:d4:87:68:a3:5c:
e7:14:42:ab:d1:f0:d5:d6:81:e4:d4:f5:fd:27:a0:
9d:d7:d2:d2:cc:65:55:a4:c7:d9:63:37:f8:a4:a9:
c1:c8:e9:f2:cf:e4:43:b1:fc:36:64:1a:79:b2:e6:
2d:05:b7:f3:bf:bc:65:e6:c3:16:22:f1:0f:4d:f6:
c5:94:57:7a:2e:52:1e:cb:11:2c:ed:be:03:6d:8c:
7c:3d:41:d7:ca:44:34:5e:b4:a2:72:57:41:8b:ff:
fa:94:b9:c5:c7:74:5f:81:96:ff:6f:9d:6d:2f:12:
89:41:45:31:4a:3e:2c:3c:84:45:82:3b:8c:f2:a3:
d1:76:06:ee:b5:e2:f1:99:9b:6a:2b:00:cf:09:f4:
5a:1b:e0:6f:ad:61:28:23:ea:df:af:8e:d2:5a:1d:
d9:de:f0:d2:c7:7a:f3:1a:04:4d:9c:1b:bc:64:b2:
d0:89:cc:09:e7:43:de:10:07:97:eb:e5:2e:52:10:
f3:32:0d:7b:e8:6a:d5:d9:21:a2:6b:6e:7c:2d:af:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:45:74:C4:01:4B:A3:D0:73:F1:FC:CC:21:2F:8A:DA:FD:19:EA
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/0-dFdMQBS6PQc_H8zCEvitr9Geo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.6.0/24
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.92.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
45:9b:37:82:f8:dd:dd:b5:8a:e0:46:d6:2f:97:a5:6f:ff:54:
76:39:57:e3:f8:76:5e:6c:3c:20:40:38:03:28:52:69:ba:1b:
98:04:2f:f7:7c:8d:c5:6d:1c:ee:2c:5d:4d:68:a0:f2:23:71:
1e:f0:42:21:d8:5b:fe:17:6c:60:e2:ae:9f:7e:5a:d4:2b:a3:
92:42:be:d1:50:f0:51:0d:78:5f:4f:6f:8b:d1:1f:a7:df:58:
00:d5:cf:42:ab:f2:f8:64:48:02:5a:f9:01:43:d4:2b:98:33:
c1:87:d4:10:06:13:8a:02:74:c8:c2:67:8a:8a:85:11:9c:b2:
d1:69:d1:f3:a6:5a:aa:b0:f2:19:b5:ca:36:70:3e:46:1c:6f:
f0:08:02:f5:2d:f2:98:c6:75:29:7c:c5:4f:7e:3d:8c:6e:4c:
0c:8a:2a:ad:dd:a1:0d:7b:37:f1:29:c0:51:6f:6f:f5:0b:6d:
2d:48:9a:58:2d:d3:c0:f8:ad:9c:dd:3a:60:c1:37:db:33:c1:
7c:75:2c:fb:93:af:81:85:52:a6:a0:ff:e2:03:2f:0b:52:5e:
72:1a:14:0a:b3:6e:88:4e:5f:7a:bd:5d:d6:b7:95:25:20:4d:
4a:08:48:d8:fe:32:cf:02:8e:1c:0d:d4:12:ac:7d:33:b7:a9:
86:f7:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:34 2025 by rpki-client