Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/IEMktYaMiC-GEEVUAghthpwtj_U.roa
File: IEMktYaMiC-GEEVUAghthpwtj_U.roa (raw, json)
Hash identifier: QvAVuPTEQAp48y0qGEPWf34uqjfT2A571xhrKXzHPf8=
Subject key identifier: 20:43:24:B5:86:8C:88:2F:86:10:45:54:02:08:6D:86:9C:2D:8F:F5
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018EE1ADCA1BE14BA11A91EDB9088231DE55
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/IEMktYaMiC-GEEVUAghthpwtj_U.roa
Signing time: Mon 15 Apr 2024 12:14:06 +0000
ROA not before: Mon 15 Apr 2024 12:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.54.0/23 maxlen: 23
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
88.130.59.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.236.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:ad:ca:1b:e1:4b:a1:1a:91:ed:b9:08:82:31:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 15 12:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=204324b5868c882f8610455402086d869c2d8ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:94:45:b5:ce:8a:5b:46:3a:e1:c8:a4:ad:
a4:c1:dd:77:9c:df:a2:81:28:89:23:33:56:63:64:
e5:7b:10:6d:9d:23:43:07:25:17:3f:19:3b:ed:17:
98:17:a9:2c:82:01:91:59:b0:ca:5e:64:9a:1d:d9:
f0:a6:a1:f4:01:51:a2:69:da:95:99:51:ae:e7:84:
f2:d4:c7:52:39:cb:32:e2:c3:5a:22:7b:5f:fe:c5:
96:b7:26:af:a6:0c:60:63:6f:40:6e:9f:8b:34:ba:
a4:da:c7:86:53:6a:63:8f:0d:e6:91:2c:fc:11:bb:
60:6b:ec:3e:cc:9a:5c:30:06:0d:91:90:00:e1:23:
ae:61:8e:00:cb:92:52:e0:e9:5d:a6:64:ab:e8:d2:
95:d1:3c:04:0e:bc:e2:92:af:da:ca:2a:dd:c2:41:
11:6a:d3:f5:12:c4:08:12:b7:0b:a9:72:ab:c6:95:
bd:63:b7:33:c0:8c:3c:a1:d3:3d:4a:18:89:9c:66:
d8:e2:17:66:e3:f1:49:18:5d:da:a6:de:53:2b:38:
5f:22:d1:af:f4:4b:17:81:08:48:7d:5a:17:fc:03:
ef:ae:4a:5c:5e:39:18:9c:28:2b:e5:e4:39:9b:9e:
4e:f1:50:20:1c:ac:54:9d:c9:01:1a:84:94:ff:9b:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:24:B5:86:8C:88:2F:86:10:45:54:02:08:6D:86:9C:2D:8F:F5
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/IEMktYaMiC-GEEVUAghthpwtj_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
20:f1:56:a1:26:08:52:47:6b:95:42:db:09:66:6c:05:e4:a1:
86:e9:aa:ca:15:d4:14:1d:75:89:ad:d2:67:89:e0:fc:df:e8:
ff:1f:dc:16:04:d9:b5:0a:f9:cf:24:8c:76:fa:94:f7:f9:3b:
1e:35:ff:7b:64:e1:6a:00:0e:cd:96:84:da:b3:5f:c1:4e:2d:
05:97:d5:7c:74:e4:78:10:97:d4:e9:f9:63:11:72:ff:15:e7:
7e:df:7f:d0:3a:8f:ad:70:6d:96:81:4b:38:c5:60:a8:94:ac:
6e:51:a4:83:9f:e6:a0:20:2d:e8:aa:10:c9:32:36:c1:dc:e0:
fc:d0:c2:a6:06:b2:f0:d8:d3:66:ae:6d:d6:a4:0b:ee:62:0d:
26:b8:3f:15:0b:9c:7d:3f:d3:53:e4:27:36:70:d0:a0:fc:33:
2e:c8:ff:3f:f9:f4:6a:75:e3:96:08:7d:49:86:35:99:22:b6:
35:0c:c6:3b:2b:7e:8f:22:24:e7:cd:41:1b:11:cb:c5:18:2d:
10:20:8d:0b:78:db:e5:37:43:74:ba:bf:ec:e1:26:d2:8b:3c:
a7:6b:e9:43:e7:80:61:69:97:99:28:25:cd:60:21:e9:5d:c7:
ab:79:c7:d4:9e:50:c6:e5:0f:f1:5c:4e:14:6a:b4:89:66:44:
81:dc:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:10:35 2025 by rpki-client