Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iuSwtKoLBA8mUVhpP4qZY-Aol0Q.roa
File: iuSwtKoLBA8mUVhpP4qZY-Aol0Q.roa (raw, json)
Hash identifier: yJkv4bmoKQiZjaIyN3nBTlUFbfkj2/m+aN/ENPpMoGs=
Subject key identifier: 8A:E4:B0:B4:AA:0B:04:0F:26:51:58:69:3F:8A:99:63:E0:28:97:44
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018B4BB8606F522083E1D64C9DF3838C765A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iuSwtKoLBA8mUVhpP4qZY-Aol0Q.roa
Signing time: Fri 20 Oct 2023 06:14:16 +0000
ROA not before: Fri 20 Oct 2023 06:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31363
IP address blocks: 195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
195.91.204.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.227.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.252.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.150.0/24 maxlen: 24
195.91.151.0/24 maxlen: 24
195.91.146.0/24 maxlen: 24
195.91.147.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.153.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.166.0/24 maxlen: 24
195.91.165.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.178.0/24 maxlen: 24
195.91.179.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.180.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.182.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.188.0/24 maxlen: 24
195.91.195.0/24 maxlen: 24
195.91.196.0/24 maxlen: 24
195.91.197.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
195.91.145.0/24 maxlen: 24
195.91.144.0/24 maxlen: 24
86.62.79.0/24 maxlen: 24
86.62.84.0/24 maxlen: 24
86.62.94.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.98.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.99.0/24 maxlen: 24
86.62.110.0/24 maxlen: 24
86.62.112.0/24 maxlen: 24
86.62.118.0/24 maxlen: 24
86.62.114.0/24 maxlen: 24
86.62.115.0/24 maxlen: 24
86.62.116.0/24 maxlen: 24
86.62.117.0/24 maxlen: 24
86.62.113.0/24 maxlen: 24
86.62.119.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.54.210.0/24 maxlen: 24
86.62.75.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:b8:60:6f:52:20:83:e1:d6:4c:9d:f3:83:8c:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Oct 20 06:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ae4b0b4aa0b040f265158693f8a9963e0289744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:c6:94:2e:4d:83:74:e7:21:e5:81:8b:9a:
cf:b1:47:df:4d:5d:24:5c:98:75:6b:7c:bf:ef:15:
15:bc:dc:93:d2:a9:0d:29:26:1f:2d:a6:09:4d:80:
20:52:49:45:ff:5f:e8:92:7e:99:62:08:42:65:e2:
f4:14:13:5d:0e:d8:04:82:57:e4:69:cb:39:99:f4:
84:b4:5e:38:83:86:a7:f3:60:c6:df:85:47:16:16:
8b:0b:1f:ef:45:a8:9b:35:83:bb:cf:4b:76:c0:0e:
63:55:01:bb:ab:80:5f:ed:05:fc:95:b1:05:63:a5:
52:16:28:d1:eb:c4:df:fc:57:fb:4b:52:cf:7c:4d:
40:ca:a6:80:1c:39:7d:6d:54:33:8b:6b:21:cb:7c:
6a:c6:bb:14:e7:2c:ac:26:f4:e6:d7:70:b6:cb:67:
09:bd:4e:57:66:6e:b8:5a:b8:00:ce:27:a0:14:8f:
93:46:62:6f:14:ba:f8:6d:4d:28:88:df:63:fd:f3:
14:30:25:98:6e:80:51:6b:a9:da:be:92:e6:b3:73:
60:36:16:e7:92:ed:c1:21:e5:4a:3b:a7:cf:09:c1:
10:38:32:18:6b:83:de:3e:89:d8:2f:c3:06:26:47:
1e:92:47:36:59:e2:a5:f9:1d:5e:54:3c:44:45:f1:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:B0:B4:AA:0B:04:0F:26:51:58:69:3F:8A:99:63:E0:28:97:44
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iuSwtKoLBA8mUVhpP4qZY-Aol0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.75.0/24
86.62.79.0/24
86.62.84.0/24
86.62.92.0/24
86.62.94.0/24
86.62.96.0/24
86.62.98.0/23
86.62.102.0/24
86.62.110.0/24
86.62.112.0/21
86.62.125.0/24
195.54.210.0/24
195.91.133.0/24
195.91.138.0/24
195.91.144.0/21
195.91.153.0/24
195.91.156.0/24
195.91.160.0/24
195.91.165.0-195.91.166.255
195.91.168.0/21
195.91.178.0-195.91.182.255
195.91.184.0/24
195.91.187.0-195.91.188.255
195.91.191.0/24
195.91.195.0-195.91.197.255
195.91.204.0/24
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.247.255
195.91.252.0/24
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
9e:80:b0:97:46:bb:3b:21:d9:96:e3:68:6c:b1:36:08:0b:d1:
b7:bd:a2:ac:1c:73:88:d7:a8:27:83:5f:39:0d:0d:72:a4:38:
ba:38:97:30:98:ed:e9:04:a9:dc:67:e0:69:83:48:b3:21:25:
f7:c8:98:7f:f8:15:1b:64:5c:65:1c:7d:fb:21:3f:dc:a4:c6:
fa:ac:c8:b1:e8:a4:8c:90:38:61:2f:68:3c:f0:d6:5c:fc:e8:
1f:a7:ad:01:c5:89:8f:a2:96:36:9e:77:55:4f:4d:b7:1b:54:
25:d5:d1:ba:83:4d:23:07:c3:2d:25:12:b7:0c:e3:82:6e:db:
c9:06:a1:b8:a8:2c:b2:2b:6c:13:49:eb:c3:bb:a4:d8:ac:56:
90:a1:9b:6f:38:52:69:15:28:ed:b9:7f:2c:25:8a:4e:03:1e:
c9:95:ae:ed:cc:8f:fc:26:9f:0b:cc:b6:b1:27:36:d8:73:bb:
25:5d:a4:81:f6:ea:53:fc:05:d7:d8:cd:81:47:e4:74:75:7a:
b5:b3:d5:b3:a3:85:00:d7:ca:f3:9f:8c:3b:aa:97:6b:fa:3d:
99:c0:22:08:e9:d2:ce:f2:a7:f1:bd:ca:dd:72:ed:51:13:7c:
6d:a2:fc:cb:69:65:ce:6d:58:35:37:da:dd:96:2e:13:ad:4f:
d8:9b:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:22 2025 by rpki-client