Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/aCEBxOW3r3YQjafCLBq4H_Q_OWE.roa
File: aCEBxOW3r3YQjafCLBq4H_Q_OWE.roa (raw, json)
Hash identifier: q2nXSi3LsW7Z6yqNCgqVLrPLJQCSdCvlmVGWMAqKEa0=
Subject key identifier: 68:21:01:C4:E5:B7:AF:76:10:8D:A7:C2:2C:1A:B8:1F:F4:3F:39:61
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 0194DB037E696D5E64B0E70E5BFD6D27C758
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/aCEBxOW3r3YQjafCLBq4H_Q_OWE.roa
Signing time: Thu 06 Feb 2025 11:27:06 +0000
ROA not before: Thu 06 Feb 2025 11:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
62.220.1.0/24 maxlen: 24
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:03:7e:69:6d:5e:64:b0:e7:0e:5b:fd:6d:27:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Feb 6 11:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682101c4e5b7af76108da7c22c1ab81ff43f3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:dd:cf:de:94:00:58:83:ed:2b:df:f2:f9:
d6:40:b1:88:14:61:78:19:02:56:de:47:09:cc:82:
86:78:49:a8:56:1d:f2:c3:6d:6e:19:0d:74:a5:12:
29:f0:2c:1b:8a:f4:e5:19:d2:03:ef:67:f6:9e:f3:
e9:7d:7e:ba:43:cb:30:50:e4:23:e5:5b:23:39:55:
ac:51:eb:6c:ca:23:e2:f0:60:6c:00:50:30:99:93:
d8:c3:48:2f:7b:36:35:3c:f7:a9:bc:46:1f:2b:52:
a7:fe:32:0a:8e:b0:d6:09:19:04:b8:68:b1:cd:68:
22:be:3e:b4:09:a3:5d:fe:72:10:f6:d0:c7:7f:e3:
0b:9e:f1:40:ec:90:5f:50:6a:93:14:6d:bb:fa:d0:
cc:a0:6c:1b:66:cc:b3:05:79:e1:7e:ea:06:20:bb:
46:04:14:53:01:85:d9:73:8e:aa:ee:c9:b0:40:4c:
62:d9:ac:bc:d1:d3:ca:67:fc:e0:72:d7:89:23:b6:
17:c6:21:b9:c5:14:fc:a8:be:a9:23:db:a8:b5:c6:
eb:ca:1d:84:4e:6d:25:cd:55:f6:f0:a6:4e:f9:86:
c3:b2:14:b3:b6:1d:ee:6c:0f:19:41:00:9f:bd:54:
8b:7a:72:48:3c:f0:d3:09:40:1a:6d:fb:15:9b:16:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:01:C4:E5:B7:AF:76:10:8D:A7:C2:2C:1A:B8:1F:F4:3F:39:61
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/aCEBxOW3r3YQjafCLBq4H_Q_OWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
41:c3:28:66:e6:d5:a9:2a:e0:2e:01:f7:7e:23:86:8c:09:56:
ac:ca:0b:7a:a5:22:bb:40:d8:14:bb:63:e4:ed:ff:2f:3b:a0:
d4:e9:8c:41:40:ed:c6:c8:dc:7b:5b:08:1e:11:5b:58:06:76:
e0:0f:e8:c1:5f:ff:2a:a0:fb:cc:79:a0:28:3d:5a:e7:76:c5:
20:dc:6f:43:55:95:8b:7f:b1:9c:ce:c7:c0:fb:7a:bf:f6:24:
20:72:00:9e:73:ea:56:45:a8:33:88:e7:c1:ee:e4:8a:a1:85:
ba:70:da:d7:9e:b5:2b:01:51:56:55:81:19:80:c2:32:35:49:
c8:f0:e8:f3:ec:0c:35:a1:fd:44:f9:ed:00:fe:00:87:e7:39:
da:ed:2f:72:15:2d:a0:22:71:68:ac:cd:c7:a6:17:3e:85:ad:
5b:c8:d4:e9:2c:69:dc:4b:7a:0a:22:11:b0:1a:c7:a4:78:88:
9f:1a:a2:e1:4f:64:77:c7:d7:b1:b5:50:1c:dc:0d:5b:1a:b3:
dd:dd:8b:1d:93:cb:d0:66:4e:f9:89:13:3c:37:22:10:74:a3:
0e:18:65:2a:27:27:ad:c0:7f:19:7e:5b:16:5d:3f:85:d1:81:
97:57:1c:b4:b4:c0:df:af:54:85:a0:bf:9d:c4:92:bf:33:ed:
25:9a:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:18:18 2025 by rpki-client