Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/HwBWKrlmmbsE9i5P7nxoH3DlXXc.roa
File: HwBWKrlmmbsE9i5P7nxoH3DlXXc.roa (raw, json)
Hash identifier: QX+GGPV7BXn1BwXCRR8t9te6EZ3/F2yuYgvuoenCHdw=
Subject key identifier: 1F:00:56:2A:B9:66:99:BB:04:F6:2E:4F:EE:7C:68:1F:70:E5:5D:77
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018EA8639FD55BFA6B452FE5F819F9E7E7AC
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/HwBWKrlmmbsE9i5P7nxoH3DlXXc.roa
Signing time: Thu 04 Apr 2024 09:14:44 +0000
ROA not before: Thu 04 Apr 2024 09:14:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.54.0/23 maxlen: 23
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
88.130.59.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.236.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:63:9f:d5:5b:fa:6b:45:2f:e5:f8:19:f9:e7:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 4 09:14:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f00562ab96699bb04f62e4fee7c681f70e55d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:66:8c:07:de:d7:b6:75:85:2c:a2:f6:64:
f0:a1:02:de:80:2a:60:a8:bb:b6:bf:06:66:ab:30:
00:e7:58:9b:b2:bd:11:07:de:43:07:98:7e:99:66:
88:31:82:16:8e:1f:39:17:3b:fd:d6:c3:ef:4e:cb:
c0:bb:2b:c6:4f:3a:82:b0:bb:e2:67:c6:9a:56:c9:
63:fe:6a:0a:e8:c5:d9:5e:3a:bc:f5:ca:ca:ef:bd:
60:24:31:a6:51:ce:e9:ee:84:f7:d5:72:a6:88:2a:
86:87:ea:ca:2f:16:47:c4:8a:a4:59:ba:0e:55:0f:
7c:70:9d:dd:aa:95:e4:28:ab:74:d5:89:4b:d9:00:
ec:8c:15:2c:01:84:d8:23:c5:ff:e5:6e:8b:fe:5c:
ae:00:27:bf:07:b8:3a:55:c0:fc:2d:6a:74:d6:0a:
5a:d4:e5:e5:c6:20:c2:14:81:a9:7f:17:28:00:83:
11:14:21:1a:30:7c:c1:f1:23:00:cd:69:69:76:d7:
87:89:97:38:01:c8:c0:25:e7:6b:21:43:c2:a7:ed:
5d:63:c1:c2:cc:fe:f1:7d:03:a2:25:11:b2:a1:5e:
09:08:25:e8:29:58:f1:aa:c0:f0:33:21:af:49:4f:
30:f8:4c:7c:2f:fd:8e:ea:58:ed:bf:95:3a:03:52:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:56:2A:B9:66:99:BB:04:F6:2E:4F:EE:7C:68:1F:70:E5:5D:77
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/HwBWKrlmmbsE9i5P7nxoH3DlXXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
5f:ca:37:83:26:81:c1:78:74:ce:e9:67:22:ba:7e:15:00:75:
57:75:12:5b:49:a4:34:ac:ac:28:f6:f0:d8:1c:02:a8:52:f2:
52:02:0f:08:46:d7:81:0c:3e:57:62:05:ee:0b:bb:de:ab:79:
11:6a:2c:43:e2:e1:2a:83:13:21:ee:90:0b:c6:7d:d6:9f:64:
fe:d1:54:64:e9:d6:f8:98:d4:8c:b2:50:21:b3:ad:00:89:a2:
f8:48:11:38:15:ac:36:08:f2:b7:d0:f4:82:75:bb:95:61:89:
60:82:86:6c:54:60:36:ec:3e:dd:51:d5:ad:9d:07:40:d2:95:
0c:f1:9f:94:72:e2:e6:33:85:c7:e8:7b:38:64:70:c8:0c:05:
12:a2:14:27:74:bf:b4:ae:2c:49:27:cb:5f:fa:c9:81:10:5c:
03:07:13:26:dd:2d:0b:bf:f0:cf:e0:fd:ec:b6:df:01:54:a8:
e8:9d:73:70:48:89:95:c2:3b:c9:6b:66:d7:d4:1c:97:7e:67:
f2:a6:9c:74:b8:df:ec:1a:b8:9e:11:e1:fb:b7:98:1d:af:25:
fe:89:ae:9a:1d:5a:ad:2d:ed:32:2b:b3:c9:c5:de:22:0a:5c:
93:8e:28:0a:67:b2:d9:7c:12:b3:d1:df:78:e3:e8:5e:1e:d1:
4a:fb:df:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAY6oY5/VW/prRS/l+Bn55+esMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjQwNDA0MDkxNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjAwNTYyYWI5NjY5OWJiMDRmNjJlNGZlZTdjNjgxZjcwZTU1ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhmjAfe17Z1hSyi9mTwoQLegCpg
qLu2vwZmqzAA51ibsr0RB95DB5h+mWaIMYIWjh85Fzv91sPvTsvAuyvGTzqCsLvi
Z8aaVslj/moK6MXZXjq89crK771gJDGmUc7p7oT31XKmiCqGh+rKLxZHxIqkWboO
VQ98cJ3dqpXkKKt01YlL2QDsjBUsAYTYI8X/5W6L/lyuACe/B7g6VcD8LWp01gpa
1OXlxiDCFIGpfxcoAIMRFCEaMHzB8SMAzWlpdteHiZc4AcjAJedrIUPCp+1dY8HC
zP7xfQOiJRGyoV4JCCXoKVjxqsDwMyGvSU8w+Ex8L/2O6ljtv5U6A1J7QQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFB8AViq5Zpm7BPYuT+58aB9w5V13MB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvSHdCV0tybG1tYnNFOWk1UDdueG9IM0RsWFhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCASEEAgABMIIB
GQMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD
BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD
AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA
AwQGjzpAAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+Kg
AwQEykeAAwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1YogAwQF1YuA
AwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdAMCkEAgAC
MCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkqhkiG9w0B
AQsFAAOCAQEAX8o3gyaBwXh0zulnIrp+FQB1V3USW0mkNKysKPbw2BwCqFLyUgIP
CEbXgQw+V2IF7gu73qt5EWosQ+LhKoMTIe6QC8Z91p9k/tFUZOnW+JjUjLJQIbOt
AImi+EgROBWsNgjyt9D0gnW7lWGJYIKGbFRgNuw+3VHVrZ0HQNKVDPGflHLi5jOF
x+h7OGRwyAwFEqIUJ3S/tK4sSSfLX/rJgRBcAwcTJt0tC7/wz+D97LbfAVSo6J1z
cEiJlcI7yWtm19Qcl35n8qacdLjf7Bq4nhHh+7eYHa8l/omumh1arS3tMiuzycXe
Igpck44oCmey2XwSs9HfeOPoXh7RSvvf+Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 15:15:32 2025 by rpki-client