Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4UjbBKdhz38m_hE0HRAfke9dsXk.roa
File: 4UjbBKdhz38m_hE0HRAfke9dsXk.roa (raw, json)
Hash identifier: OJ+WRTpbdf10kqvhFpmFsxxZkGOcSEMPcb9Dbjd0tjM=
Subject key identifier: E1:48:DB:04:A7:61:CF:7F:26:FE:11:34:1D:10:1F:91:EF:5D:B1:79
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348CF04FB0A2658C7784A4CDE8D961C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4UjbBKdhz38m_hE0HRAfke9dsXk.roa
Signing time: Mon 01 Jan 2024 04:29:37 +0000
ROA not before: Mon 01 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 138.188.0.0/16 maxlen: 24
193.134.36.0/22 maxlen: 24
194.6.160.0/19 maxlen: 24
193.222.64.0/19 maxlen: 19
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.151.0/24 maxlen: 24
193.5.20.0/24 maxlen: 24
193.247.166.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.166.0/23 maxlen: 23
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
185.106.64.0/22 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.247.193.0/24 maxlen: 24
185.39.92.0/22 maxlen: 22
193.5.224.0/20 maxlen: 20
193.247.255.0/24 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.246.202.0/23 maxlen: 24
195.65.0.0/16 maxlen: 24
193.247.104.0/23 maxlen: 23
193.5.4.0/23 maxlen: 24
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.6.0/23 maxlen: 23
193.247.44.0/22 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
194.11.96.0/20 maxlen: 20
193.247.41.0/24 maxlen: 24
193.247.40.0/24 maxlen: 24
194.11.144.0/21 maxlen: 21
193.247.90.0/24 maxlen: 24
193.247.86.0/24 maxlen: 24
193.246.32.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
217.192.0.0/15 maxlen: 24
185.84.76.0/22 maxlen: 24
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
212.117.96.0/19 maxlen: 19
195.144.32.0/19 maxlen: 24
78.110.128.0/20 maxlen: 20
46.245.144.0/21 maxlen: 21
195.35.121.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
195.176.192.0/19 maxlen: 24
193.135.255.0/24 maxlen: 24
195.176.128.0/19 maxlen: 24
138.190.0.0/16 maxlen: 16
193.134.248.0/23 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
164.128.0.0/16 maxlen: 24
194.209.0.0/16 maxlen: 24
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.47.232.0/24 maxlen: 24
193.223.16.0/20 maxlen: 20
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.223.32.0/19 maxlen: 19
193.135.144.0/23 maxlen: 24
212.243.0.0/16 maxlen: 24
2a02:a90::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cf:04:fb:0a:26:58:c7:78:4a:4c:de:8d:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e148db04a761cf7f26fe11341d101f91ef5db179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:68:00:e3:37:48:e4:1c:09:1a:c3:2a:9c:
fc:e7:45:49:57:25:80:de:20:6e:c2:17:14:44:65:
41:5f:3f:4c:37:92:71:6e:5b:8c:40:19:38:06:a6:
78:34:8e:c3:e3:24:c2:29:65:70:73:f6:3d:6a:8a:
fe:c6:43:7a:bd:c7:d3:37:e3:92:71:3d:8e:ac:6f:
a3:e9:ed:69:7f:f7:d4:66:f7:a1:b6:2e:25:c4:d0:
d8:9d:3a:f3:13:1e:f3:e4:19:63:5f:8b:05:9f:d1:
6e:e4:86:09:aa:c2:23:11:7c:49:7c:c2:5a:9b:f9:
e7:5e:31:39:c5:39:f2:37:13:a6:45:4c:2b:4b:83:
9e:9a:3e:8f:88:6e:e6:55:49:65:70:db:a8:35:06:
7d:34:b4:1f:52:cc:3a:c1:56:9b:05:f1:31:8b:63:
1e:0b:1e:89:0a:a9:f8:43:5a:4d:bf:09:2e:9b:bb:
15:bb:a3:60:1b:06:db:1d:06:ff:3b:e6:82:6a:a9:
e9:05:8b:1b:4f:23:2c:86:a3:8f:03:19:ba:bc:bf:
33:82:3f:56:69:6d:e3:b7:c2:fb:e7:77:db:37:d1:
ba:b7:f5:a6:8d:00:b2:d2:4c:f6:09:56:8a:95:28:
b0:b0:12:59:a2:d7:8c:64:1b:77:94:5a:ee:66:76:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:DB:04:A7:61:CF:7F:26:FE:11:34:1D:10:1F:91:EF:5D:B1:79
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4UjbBKdhz38m_hE0HRAfke9dsXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/23
193.247.247.0/24
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
54:30:81:fa:ad:00:24:c7:cc:0f:3a:f4:e1:ed:94:a8:2b:52:
bc:d7:63:1b:ac:40:cf:75:2d:83:e2:e5:7f:c8:44:3a:eb:c7:
d5:05:d5:ae:9d:b5:41:47:ef:78:f9:0d:27:7e:57:75:d0:a1:
b8:62:c1:4d:1e:0b:3e:3a:a6:da:cc:69:aa:16:ab:9d:71:89:
1d:ea:49:f0:f9:ac:a5:09:a7:30:ee:24:a8:5a:f8:de:ce:43:
6f:68:5c:87:60:76:ed:5a:6b:4d:3a:76:75:12:00:79:0d:86:
40:73:b1:cc:07:57:d1:40:a5:68:26:46:fe:9d:84:80:73:6d:
5f:1e:74:8d:4b:ca:53:d9:03:f9:ca:d0:9e:ea:ac:2e:db:05:
32:74:c8:0c:fa:8b:78:03:5c:4f:7b:c7:bc:6d:17:c9:88:2d:
19:61:98:d1:b6:c5:95:9b:69:9d:07:2b:d0:a9:de:08:57:59:
13:ee:f2:03:f8:be:4a:be:33:98:94:12:9b:39:87:83:95:c0:
05:2b:ec:9a:51:7c:8c:64:3f:71:e8:4a:63:f0:01:22:5b:61:
55:a2:8f:40:37:95:bf:bf:e2:fa:3a:7f:a7:0c:1f:dc:d4:7b:
2e:17:8a:f1:46:32:b5:96:28:2a:7b:85:04:72:f0:2a:84:51:
38:47:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:01 2025 by rpki-client