Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cSzASQM895FlKz_YdHm0No1skzU.roa
File: cSzASQM895FlKz_YdHm0No1skzU.roa (raw, json)
Hash identifier: 11YNENf9/jlAe04eAPM1kyjVn1kq06QLM2enrkTgzfA=
Subject key identifier: 71:2C:C0:49:03:3C:F7:91:65:2B:3F:D8:74:79:B4:36:8D:6C:93:35
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C18F3B
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cSzASQM895FlKz_YdHm0No1skzU.roa
Signing time: Sat 01 Jan 2022 16:01:38 +0000
ROA not before: Sat 01 Jan 2022 16:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 138.188.0.0/16 maxlen: 24
193.134.36.0/22 maxlen: 24
195.144.32.0/19 maxlen: 24
194.6.160.0/19 maxlen: 24
193.222.64.0/19 maxlen: 19
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.151.0/24 maxlen: 24
193.5.20.0/24 maxlen: 24
193.247.166.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.166.0/23 maxlen: 23
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
138.187.0.0/16 maxlen: 18
195.35.121.0/24 maxlen: 24
185.106.64.0/22 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.247.193.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.247.36.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.246.202.0/23 maxlen: 24
193.135.173.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
193.247.104.0/23 maxlen: 23
195.176.192.0/19 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.6.0/23 maxlen: 23
193.247.44.0/22 maxlen: 24
193.135.255.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
194.11.96.0/20 maxlen: 20
193.247.41.0/24 maxlen: 24
193.247.40.0/24 maxlen: 24
195.176.128.0/19 maxlen: 24
138.190.0.0/16 maxlen: 16
194.11.144.0/21 maxlen: 21
193.247.90.0/24 maxlen: 24
193.247.86.0/24 maxlen: 24
193.134.248.0/23 maxlen: 24
193.246.32.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.135.0.0/23 maxlen: 24
193.246.40.0/21 maxlen: 21
193.135.3.0/24 maxlen: 24
193.134.255.0/24 maxlen: 24
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
164.128.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
185.84.76.0/22 maxlen: 24
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
194.209.0.0/16 maxlen: 24
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.47.232.0/24 maxlen: 24
193.223.16.0/20 maxlen: 20
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.223.32.0/19 maxlen: 19
193.135.144.0/23 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
212.243.0.0/16 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
2a02:a90::/32 maxlen: 32
2001:918::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354862395 (0x50c18f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=712cc049033cf791652b3fd87479b4368d6c9335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:d1:75:a2:66:ea:85:5d:5c:d0:76:95:f9:
f1:e5:57:c9:26:ce:e0:b3:0d:e8:17:e0:9d:9e:d0:
6a:9a:ab:41:ef:20:b4:68:4d:c9:88:3b:33:f9:ae:
4b:7a:fa:7b:d5:cc:19:11:36:70:82:f4:e8:91:f8:
32:4c:2b:1e:25:8d:ed:fa:4f:79:12:00:75:dd:97:
83:89:f5:df:70:0d:10:a2:08:65:a1:c0:05:d3:b3:
28:a6:dc:6b:79:43:f6:c7:af:94:b2:e4:8d:83:47:
b0:48:44:44:df:11:23:5d:ce:4c:29:8b:87:1e:3e:
d8:90:42:b3:96:ae:8a:20:be:e7:12:7f:42:e4:b6:
8d:26:d2:2f:75:aa:c7:23:3f:6d:e8:05:aa:07:9a:
36:0b:12:25:eb:0d:5a:b5:df:7b:d6:48:d6:f2:e4:
aa:c8:9d:b3:3f:05:ce:93:9a:cc:b8:a6:b3:29:25:
18:92:63:8b:e0:39:02:de:5f:5c:4e:f9:51:8c:51:
7c:b9:1e:61:f3:e8:81:c5:cf:d5:b3:68:8d:cb:7e:
5f:29:10:eb:1c:02:8d:50:47:23:4c:e1:39:f0:81:
3f:9b:10:4f:f3:f7:42:ef:c8:87:d2:f2:f3:ae:b9:
4b:2c:2b:8f:a1:c2:39:ac:ca:25:fe:47:25:e1:d4:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:C0:49:03:3C:F7:91:65:2B:3F:D8:74:79:B4:36:8D:6C:93:35
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/cSzASQM895FlKz_YdHm0No1skzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.142.0-193.135.145.255
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/23
193.247.247.0/24
193.247.250.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
59:67:0b:0f:ba:ca:17:67:b1:09:e5:cf:72:24:31:3f:48:b8:
82:77:40:4f:c6:bb:74:16:bc:b4:13:08:2c:65:7e:cc:ce:40:
60:75:87:9b:93:3d:49:b4:62:8b:ef:53:df:8d:77:27:b7:98:
2f:c7:9c:ec:8a:59:22:5b:83:f4:6d:d5:32:04:66:f7:7d:78:
6b:23:a8:6c:a3:4e:ef:6d:2c:a3:57:f2:af:87:91:97:30:be:
6b:2c:f8:f6:ce:f9:03:83:e7:d1:8a:1d:e6:f6:db:21:b0:bf:
56:c7:4a:54:2d:44:64:01:f8:b8:13:43:8a:11:f1:4f:5e:8a:
ee:38:32:49:67:da:6a:08:0b:d4:0d:bf:f9:c6:1a:42:32:c6:
26:49:64:2e:75:ed:ad:67:10:9b:35:99:e9:45:94:54:3f:22:
c2:f9:11:e7:03:cd:9f:2b:1d:e4:a1:db:c0:41:e4:19:8e:0c:
e2:ec:74:eb:03:88:a2:4f:3b:b5:b4:96:00:6d:87:bf:97:44:
7e:43:2e:e2:8b:09:84:6e:37:5a:13:e8:83:c9:f2:28:a2:f7:
f7:d2:36:a3:d5:9f:67:9f:ff:45:ef:71:07:69:41:d9:3b:c9:
41:8b:78:bf:f2:a8:f3:ff:7b:46:b4:b0:13:9b:d1:8e:0d:2f:
5f:f0:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:52:39 2025 by rpki-client