Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0KMynJaiHrt6Gkspt5hH1U_sPFc.roa
File: 0KMynJaiHrt6Gkspt5hH1U_sPFc.roa (raw, json)
Hash identifier: qOs7dVIk0BFgnY22QRniecN6kA0pCGOdFGkU4g4Wp4k=
Subject key identifier: D0:A3:32:9C:96:A2:1E:BB:7A:1A:4B:29:B7:98:47:D5:4F:EC:3C:57
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0189250A78AFA1A187E4736D000C0DD24D67
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0KMynJaiHrt6Gkspt5hH1U_sPFc.roa
Signing time: Wed 05 Jul 2023 07:53:10 +0000
ROA not before: Wed 05 Jul 2023 07:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 138.188.0.0/16 maxlen: 24
193.134.36.0/22 maxlen: 24
194.6.160.0/19 maxlen: 24
193.222.64.0/19 maxlen: 19
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.151.0/24 maxlen: 24
193.5.20.0/24 maxlen: 24
193.247.166.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.166.0/23 maxlen: 23
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
185.106.64.0/22 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.247.193.0/24 maxlen: 24
185.39.92.0/22 maxlen: 22
193.5.224.0/20 maxlen: 20
193.247.255.0/24 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.246.202.0/23 maxlen: 24
195.65.0.0/16 maxlen: 24
193.247.104.0/23 maxlen: 23
193.5.4.0/23 maxlen: 24
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.6.0/23 maxlen: 23
193.247.44.0/22 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
194.11.96.0/20 maxlen: 20
193.247.41.0/24 maxlen: 24
193.247.40.0/24 maxlen: 24
194.11.144.0/21 maxlen: 21
193.247.90.0/24 maxlen: 24
193.247.86.0/24 maxlen: 24
193.246.32.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
217.192.0.0/15 maxlen: 24
185.84.76.0/22 maxlen: 24
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
212.117.96.0/19 maxlen: 19
195.144.32.0/19 maxlen: 24
78.110.128.0/20 maxlen: 20
46.245.144.0/21 maxlen: 21
195.35.121.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
195.176.192.0/19 maxlen: 24
193.135.255.0/24 maxlen: 24
195.176.128.0/19 maxlen: 24
138.190.0.0/16 maxlen: 16
193.134.248.0/23 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
164.128.0.0/16 maxlen: 24
194.209.0.0/16 maxlen: 24
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.47.232.0/24 maxlen: 24
193.223.16.0/20 maxlen: 20
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.223.32.0/19 maxlen: 19
193.135.144.0/23 maxlen: 24
212.243.0.0/16 maxlen: 24
2a02:a90::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:0a:78:af:a1:a1:87:e4:73:6d:00:0c:0d:d2:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jul 5 07:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0a3329c96a21ebb7a1a4b29b79847d54fec3c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:8a:06:32:e9:57:44:86:23:00:a4:53:9d:
c9:bd:43:56:d4:ba:49:e5:5d:32:d2:1b:cc:42:65:
b4:02:90:43:fd:0c:77:43:bc:b8:c8:ca:8f:33:5c:
a4:50:8e:39:2e:75:42:7c:fd:8f:f0:66:42:d7:9e:
14:c7:a6:ac:ca:9f:5e:8c:2b:5e:b1:60:8e:36:b9:
f0:34:e4:ef:74:5d:37:46:63:c5:63:f8:89:82:86:
ed:52:e1:a0:c2:e8:49:3d:ed:96:87:41:22:03:1b:
ae:a2:15:a8:ff:ca:9b:65:69:c6:68:5a:84:3b:ea:
37:bc:4f:c9:b6:6c:77:63:7c:2c:c3:94:df:bf:39:
22:cc:5c:5c:ea:af:30:c9:ec:b2:23:99:ee:9a:71:
4e:92:ca:84:de:9e:e1:43:5e:55:df:ad:b8:6b:90:
4f:c7:8e:9e:d6:13:04:70:f2:b6:0b:02:1a:98:8b:
20:ba:22:20:82:28:be:6e:d0:c2:cf:be:b5:3d:6a:
da:39:46:b5:70:7a:b2:b4:41:18:0c:a6:9b:d5:cf:
08:0c:9a:02:cf:62:9d:9c:ba:12:6e:65:85:61:a1:
4e:c4:28:46:41:af:6a:a9:fe:62:60:a8:7e:ae:9e:
71:fa:e5:46:76:72:3f:ff:7a:32:16:d7:f4:95:65:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:32:9C:96:A2:1E:BB:7A:1A:4B:29:B7:98:47:D5:4F:EC:3C:57
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0KMynJaiHrt6Gkspt5hH1U_sPFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/23
193.247.247.0/24
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
6f:4b:42:74:5e:da:6e:1c:ee:bd:9e:19:c6:f2:a4:87:51:70:
b3:be:de:fa:4d:7b:fe:08:d9:f2:36:0d:ee:3c:0c:4f:9e:41:
d4:4c:e8:6a:48:50:5b:f1:f5:3d:bb:ed:5d:e1:b3:a8:15:0e:
d4:5d:48:24:a7:53:05:c5:4c:f4:78:ea:21:60:d1:64:a0:57:
2d:bd:6b:7c:f4:2a:a9:de:72:87:02:58:4f:9d:dc:3a:f3:16:
4f:9c:f2:a2:8f:7a:2c:55:47:98:a9:5b:57:5a:1a:cf:69:1b:
08:67:e5:b0:4a:36:c6:a5:20:25:75:7c:70:ba:0d:b5:89:51:
0d:83:c9:77:7d:99:54:34:fd:2e:1b:ee:dc:c0:60:8b:df:c6:
2c:a1:82:e2:1c:b5:f3:61:c3:12:02:01:2c:93:a7:e8:36:75:
35:fa:40:61:4c:cf:32:81:a5:a0:52:03:7b:15:13:fd:ec:52:
31:17:40:b5:07:72:e3:99:8a:4a:e8:e9:a6:58:58:ff:2d:53:
33:59:bf:6f:ac:3a:22:77:c5:b4:da:55:f8:b1:67:bd:ae:af:
38:01:17:05:8f:e5:d2:cb:d3:8d:d6:be:f9:0d:09:b1:e8:2b:
e3:ec:2b:e8:8e:43:19:93:7d:32:79:0c:60:87:f5:72:2b:97:
38:10:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:31:50 2025 by rpki-client