Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/iYcRQAQMKacWoI0nI1unHb4sqCc.roa
File: iYcRQAQMKacWoI0nI1unHb4sqCc.roa (raw, json)
Hash identifier: hxBmxA+BTS0vsSqvYLGfhNMkU+k/L9Zp4B5ZUdkDO/Y=
Subject key identifier: 89:87:11:40:04:0C:29:A7:16:A0:8D:27:23:5B:A7:1D:BE:2C:A8:27
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018EF0E112BC01898732D78212442516BACB
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/iYcRQAQMKacWoI0nI1unHb4sqCc.roa
Signing time: Thu 18 Apr 2024 11:04:25 +0000
ROA not before: Thu 18 Apr 2024 11:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.54.0/23 maxlen: 23
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
88.130.59.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:e1:12:bc:01:89:87:32:d7:82:12:44:25:16:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 18 11:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89871140040c29a716a08d27235ba71dbe2ca827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:29:53:08:ec:43:cb:8b:5f:04:d8:aa:36:
03:d8:f4:b3:3e:84:21:f8:ba:70:1e:63:2c:1e:b6:
41:93:6b:c9:d3:69:8d:34:e4:b6:9e:7e:cc:96:4b:
e5:ed:f0:82:31:4d:84:de:07:c7:bf:de:ce:d4:3d:
9f:16:72:1f:44:ca:34:c5:e9:f6:fd:da:10:c2:f7:
b5:1c:42:df:4b:21:d7:3a:8c:82:2b:5f:39:41:cd:
54:d7:53:5f:da:bf:9c:b3:4a:5a:74:36:51:2e:e1:
a8:39:5e:01:73:a4:9c:9a:59:dd:1b:68:90:77:8b:
7d:e2:6b:d3:55:c8:88:1b:74:38:08:1c:22:f3:b3:
6d:7a:29:52:c3:a5:c0:9d:5f:10:b1:53:3a:a2:b0:
21:a6:97:30:bc:d8:6b:aa:2c:1a:19:a9:be:d1:19:
a6:2a:10:b0:dc:c6:37:30:96:80:b6:39:21:3d:55:
fd:77:b1:d5:1b:43:ce:2d:0b:d7:8f:87:30:1b:14:
b3:2d:6b:a3:a1:ae:13:ab:1f:8f:88:a0:89:9a:14:
d1:0d:e6:9c:9a:23:c7:8e:ac:4e:69:b7:43:c0:70:
1a:e3:1c:da:55:3e:89:1a:84:37:49:30:f2:c6:b7:
3b:5e:ba:43:de:3f:3d:41:fa:51:ec:1b:e9:f2:b3:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:11:40:04:0C:29:A7:16:A0:8D:27:23:5B:A7:1D:BE:2C:A8:27
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/iYcRQAQMKacWoI0nI1unHb4sqCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
3b:ef:e2:1e:2b:cd:6e:3d:b6:10:b0:7e:96:11:25:66:a3:c0:
af:72:95:1a:05:2c:d9:ec:74:aa:ee:39:be:11:cc:22:2e:f3:
f5:6d:de:2e:76:50:6f:54:b7:07:7d:8d:95:08:3d:61:9f:35:
31:87:37:35:02:ca:4c:77:e4:58:22:86:2d:5e:21:76:c0:5b:
77:17:19:87:d8:1b:06:4a:e2:3d:bd:96:07:69:68:10:30:c9:
d2:9d:43:70:9d:bf:2c:72:6c:90:9d:74:91:6d:eb:41:b3:d3:
46:ef:78:a2:5f:80:46:41:92:79:f7:99:9d:d9:01:f1:f1:c3:
99:59:e6:f5:95:37:07:58:3f:22:98:d1:b1:01:90:47:7b:ba:
89:c3:a3:7b:e9:b2:2a:1e:74:32:63:04:57:54:33:76:0a:65:
b0:62:ed:56:44:25:57:f7:cc:c2:cc:fa:ac:53:05:f4:d9:c9:
3d:10:b5:2b:56:bc:c4:87:ce:f3:9d:9f:cc:5b:f0:33:8b:63:
f4:08:51:ed:01:14:58:59:80:03:be:f8:1e:d4:d1:b1:72:c0:
ca:63:7f:2e:f4:f2:f0:f3:ed:d5:32:d3:0f:7f:ab:d7:41:46:
60:2c:2a:90:f4:a2:d8:c2:7c:6c:a1:ed:07:60:72:0f:3c:8e:
44:5b:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:13:33 2025 by rpki-client