Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/i61e9li0rhk6r8h7vD0muhkquws.roa
File: i61e9li0rhk6r8h7vD0muhkquws.roa (raw, json)
Hash identifier: B4cMZQnfJll2hsrELmmZk/T36ltzmqYbgfwl2ul6t/g=
Subject key identifier: 8B:AD:5E:F6:58:B4:AE:19:3A:AF:C8:7B:BC:3D:26:BA:19:2A:BB:0B
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018CC64AFF40C95A96E5846E8F51A3A297E3
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/i61e9li0rhk6r8h7vD0muhkquws.roa
Signing time: Mon 01 Jan 2024 18:30:52 +0000
ROA not before: Mon 01 Jan 2024 18:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 195.167.208.0/20 maxlen: 20
84.19.192.0/19 maxlen: 19
94.134.176.0/24 maxlen: 24
94.134.178.0/24 maxlen: 24
94.134.180.0/24 maxlen: 24
94.134.181.0/24 maxlen: 24
94.134.182.0/24 maxlen: 24
94.134.95.0/24 maxlen: 24
94.134.112.0/24 maxlen: 24
94.134.113.0/24 maxlen: 24
94.134.114.0/24 maxlen: 24
94.134.115.0/24 maxlen: 24
82.140.0.0/18 maxlen: 18
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
82.207.128.0/17 maxlen: 17
89.247.236.0/22 maxlen: 22
82.140.48.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
82.194.96.0/19 maxlen: 19
82.207.224.0/21 maxlen: 21
82.207.240.0/20 maxlen: 20
89.247.254.0/23 maxlen: 23
62.220.0.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.246.192.0/19 maxlen: 19
143.58.64.0/18 maxlen: 18
89.247.96.0/20 maxlen: 20
62.72.64.0/19 maxlen: 19
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
213.139.128.0/19 maxlen: 19
89.247.80.0/20 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.56.0/21 maxlen: 21
213.138.32.0/19 maxlen: 19
89.246.0.0/19 maxlen: 20
89.246.160.0/19 maxlen: 19
89.246.160.0/21 maxlen: 21
202.71.128.0/20 maxlen: 20
89.246.184.0/21 maxlen: 21
213.30.192.0/18 maxlen: 18
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.124.0/22 maxlen: 22
104.151.0.0/17 maxlen: 17
89.245.80.0/20 maxlen: 20
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
87.123.208.0/23 maxlen: 23
87.123.224.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
87.123.240.0/21 maxlen: 21
89.245.64.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.245.160.0/20 maxlen: 20
212.204.0.0/19 maxlen: 19
89.244.120.0/21 maxlen: 21
87.123.80.0/20 maxlen: 20
87.123.0.0/19 maxlen: 20
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
87.123.32.0/19 maxlen: 19
88.130.87.0/24 maxlen: 24
89.244.224.0/20 maxlen: 20
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
89.244.176.0/20 maxlen: 20
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.51.0/24 maxlen: 24
89.244.192.0/19 maxlen: 20
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
87.123.128.0/19 maxlen: 19
88.130.59.0/24 maxlen: 24
88.130.60.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
83.135.208.0/20 maxlen: 20
87.122.96.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
87.122.128.0/21 maxlen: 21
87.122.32.0/19 maxlen: 19
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
87.122.64.0/19 maxlen: 20
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
89.244.0.0/14 maxlen: 14
87.122.224.0/19 maxlen: 20
87.122.138.0/23 maxlen: 23
87.122.144.0/20 maxlen: 20
46.142.214.0/24 maxlen: 24
87.122.176.0/21 maxlen: 21
83.135.0.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
46.189.0.0/17 maxlen: 17
94.134.192.0/22 maxlen: 22
212.80.224.0/19 maxlen: 19
195.202.32.0/19 maxlen: 19
24.40.128.0/18 maxlen: 18
94.134.216.0/21 maxlen: 21
80.242.160.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
87.122.0.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
217.27.192.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.0.0/15 maxlen: 15
83.135.64.0/19 maxlen: 19
89.27.128.0/17 maxlen: 17
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.0.0/18 maxlen: 18
62.214.224.0/19 maxlen: 19
94.134.0.0/15 maxlen: 15
94.134.144.0/20 maxlen: 20
94.134.160.0/21 maxlen: 21
94.134.172.0/23 maxlen: 23
94.134.168.0/22 maxlen: 22
94.134.174.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
212.93.0.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
62.214.0.0/16 maxlen: 16
89.247.255.0/24 maxlen: 24
217.65.16.0/20 maxlen: 20
195.226.160.0/19 maxlen: 19
217.78.128.0/20 maxlen: 20
89.247.124.0/24 maxlen: 24
89.246.36.0/24 maxlen: 24
89.246.37.0/24 maxlen: 24
89.246.41.0/24 maxlen: 24
89.246.45.0/24 maxlen: 24
193.219.15.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
217.199.64.0/20 maxlen: 20
89.246.120.0/24 maxlen: 24
89.246.122.0/24 maxlen: 24
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
87.123.201.0/24 maxlen: 24
87.123.202.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.204.0/24 maxlen: 24
87.123.206.0/24 maxlen: 24
88.130.136.0/21 maxlen: 21
87.123.207.0/24 maxlen: 24
88.130.144.0/21 maxlen: 21
217.9.96.0/19 maxlen: 19
88.130.160.0/22 maxlen: 22
82.144.32.0/19 maxlen: 19
88.130.176.0/21 maxlen: 21
88.130.0.0/19 maxlen: 19
88.130.0.0/16 maxlen: 16
89.244.76.0/24 maxlen: 24
61.8.128.0/19 maxlen: 19
88.130.80.0/20 maxlen: 20
88.130.96.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
87.123.194.0/24 maxlen: 24
87.123.195.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
88.130.32.0/20 maxlen: 20
88.130.54.0/23 maxlen: 23
88.130.64.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.180.0/23 maxlen: 23
46.142.96.0/20 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.128.0/19 maxlen: 19
46.142.224.0/19 maxlen: 19
185.128.68.0/22 maxlen: 22
94.134.196.0/24 maxlen: 24
46.142.64.0/19 maxlen: 20
212.7.128.0/19 maxlen: 19
46.142.0.0/18 maxlen: 20
46.142.0.0/16 maxlen: 16
213.182.128.0/19 maxlen: 19
2001:7b0::/32 maxlen: 32
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2001:9e8:2140::/42 maxlen: 42
2001:9e8:3540::/42 maxlen: 42
2001:9e8:4140::/42 maxlen: 42
2001:9e8:2000::/48 maxlen: 48
2001:9e8:4000::/48 maxlen: 48
2001:9e8:2003::/48 maxlen: 48
2001:9e8:3980::/42 maxlen: 42
2001:9e8:2001::/48 maxlen: 48
2001:9e8:4001::/48 maxlen: 48
2001:16b8::/32 maxlen: 40
2001:9e8:39c0::/42 maxlen: 42
2001:9e8:50c0::/42 maxlen: 42
2001:9e8:c000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8::/32 maxlen: 32
2001:9e8:e000::/35 maxlen: 36
2a00:fb8::/29 maxlen: 29
2001:9e8:3500::/42 maxlen: 42
2001:9e8:5100::/42 maxlen: 42
2001:9e8:3a00::/42 maxlen: 42
2001:9e8:4100::/42 maxlen: 42
2001:1438::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ff:40:c9:5a:96:e5:84:6e:8f:51:a3:a2:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Jan 1 18:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bad5ef658b4ae193aafc87bbc3d26ba192abb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:40:f3:e2:f4:73:40:fb:08:c3:ca:d4:11:
ef:e6:28:b3:91:be:f3:31:fb:81:8e:39:f0:69:54:
c6:45:b3:2a:b1:65:b4:b3:ae:79:98:d8:4c:84:42:
4d:e1:bd:86:8e:15:c4:d9:ed:fc:44:8e:c1:63:51:
fd:cb:f9:2b:4b:96:48:94:5a:8f:e4:05:f6:9b:02:
5c:57:55:1e:92:b0:95:52:15:55:a8:69:30:9c:b3:
4f:83:89:83:e9:50:a7:9d:f8:eb:5d:ea:57:99:38:
5a:58:d8:87:5f:74:9c:ad:60:08:3f:25:b6:97:d7:
2f:72:54:a8:bf:4e:9a:52:95:5d:b4:a6:97:39:d7:
48:72:0d:f8:82:46:76:7b:f5:6e:73:1c:54:a6:9b:
3e:b1:64:27:16:5c:2a:6a:86:6f:b0:62:b5:d3:d9:
c8:09:66:6c:40:94:e0:c0:27:7d:0c:85:29:5b:be:
2c:a7:d9:97:1b:d7:c0:27:16:c2:6b:9c:f5:9c:02:
86:8e:9e:4f:bf:8f:80:e0:e7:eb:ee:b3:1a:89:ae:
22:58:73:42:6f:63:e4:3a:a4:77:49:ea:77:a2:11:
a1:88:d4:c9:7c:9e:5d:32:3c:b9:b9:4f:ff:86:eb:
ea:b0:ef:a5:49:24:13:21:b8:8d:00:e5:82:7d:f5:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:5E:F6:58:B4:AE:19:3A:AF:C8:7B:BC:3D:26:BA:19:2A:BB:0B
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/i61e9li0rhk6r8h7vD0muhkquws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
a6:ef:db:09:1e:7f:27:e2:3a:e8:c4:73:35:ef:76:32:d2:0c:
0a:30:23:19:4b:b8:b5:17:88:aa:70:6a:ad:05:9a:00:b9:c5:
9d:a1:85:12:b9:23:27:ea:75:1d:78:65:5f:7c:f8:d3:d9:30:
f6:34:24:07:db:65:36:11:07:6a:02:8d:f1:c4:92:e6:8d:f2:
44:4f:f7:bb:dd:d8:68:46:38:55:90:7b:e5:d5:cd:b8:4d:3a:
b1:23:bb:e3:98:e2:15:c9:5f:6a:a8:46:d2:73:d6:ba:fe:59:
2a:8b:b2:8b:e3:4b:22:b9:43:dc:96:77:8b:8c:c4:bd:10:03:
b3:4d:5c:cd:d2:ce:6a:59:69:cb:3e:98:8a:13:07:60:aa:fb:
01:dc:a1:65:0b:2f:01:71:a4:8c:02:a7:2c:2e:50:d0:de:b3:
c0:68:37:e2:bd:94:5c:8c:95:c9:2e:49:e4:e8:f8:28:90:83:
77:84:32:70:3a:a3:b2:e8:fb:ad:f7:2c:3f:d3:d7:45:9b:83:
7c:07:da:16:a8:b8:ba:03:9a:d4:06:0a:af:b9:3c:f0:13:f4:
e8:09:71:bd:1a:ea:15:67:d2:7b:73:ab:df:5e:01:e3:6b:8d:
3f:8c:88:86:67:e7:3a:b9:48:13:cb:f1:96:28:e5:d3:3c:39:
44:58:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:18:10 2025 by rpki-client