Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/fRK0AkvZ1bVdBEi2_mXSaCzGglo.roa
File: fRK0AkvZ1bVdBEi2_mXSaCzGglo.roa (raw, json)
Hash identifier: Z3mIgj8PAjWG8pdWcQJ4NNJsClV639h9h6L+zBdSwZs=
Subject key identifier: 7D:12:B4:02:4B:D9:D5:B5:5D:04:48:B6:FE:65:D2:68:2C:C6:82:5A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018321CE2B9D5E3CF406AA735036DD5BC4D3
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/fRK0AkvZ1bVdBEi2_mXSaCzGglo.roa
Signing time: Fri 09 Sep 2022 10:31:43 +0000
ROA not before: Fri 09 Sep 2022 10:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 138.188.0.0/16 maxlen: 24
193.134.36.0/22 maxlen: 24
194.6.160.0/19 maxlen: 24
193.222.64.0/19 maxlen: 19
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.151.0/24 maxlen: 24
193.5.20.0/24 maxlen: 24
193.247.166.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.166.0/23 maxlen: 23
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
185.106.64.0/22 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.247.193.0/24 maxlen: 24
185.39.92.0/22 maxlen: 22
193.5.224.0/20 maxlen: 20
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.246.202.0/23 maxlen: 24
195.65.0.0/16 maxlen: 24
193.247.104.0/23 maxlen: 23
193.5.4.0/23 maxlen: 24
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.6.0/23 maxlen: 23
193.247.44.0/22 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
194.11.96.0/20 maxlen: 20
193.247.41.0/24 maxlen: 24
193.247.40.0/24 maxlen: 24
194.11.144.0/21 maxlen: 21
193.247.90.0/24 maxlen: 24
193.247.86.0/24 maxlen: 24
193.246.32.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
217.192.0.0/15 maxlen: 24
185.84.76.0/22 maxlen: 24
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
212.117.96.0/19 maxlen: 19
195.144.32.0/19 maxlen: 24
78.110.128.0/20 maxlen: 20
46.245.144.0/21 maxlen: 21
195.35.121.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
195.176.192.0/19 maxlen: 24
193.135.255.0/24 maxlen: 24
195.176.128.0/19 maxlen: 24
138.190.0.0/16 maxlen: 16
193.134.248.0/23 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
164.128.0.0/16 maxlen: 24
194.209.0.0/16 maxlen: 24
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.47.232.0/24 maxlen: 24
193.223.16.0/20 maxlen: 20
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.223.32.0/19 maxlen: 19
193.135.144.0/23 maxlen: 24
212.243.0.0/16 maxlen: 24
2a02:a90::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2001:918::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:ce:2b:9d:5e:3c:f4:06:aa:73:50:36:dd:5b:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Sep 9 10:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d12b4024bd9d5b55d0448b6fe65d2682cc6825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:4c:b3:c8:4b:c5:58:a2:42:18:89:8b:96:
5d:6b:01:9c:f3:ff:eb:3a:81:fe:4c:f7:47:22:0a:
c4:20:53:37:94:5c:22:73:db:7e:10:fc:d2:f3:35:
a0:6e:25:f3:37:93:79:29:a3:61:85:fa:1f:61:e3:
80:2b:20:6c:7a:73:8e:a5:7b:8d:64:de:aa:75:bc:
d0:43:d5:95:8b:cf:02:12:4c:61:e3:cb:9d:c9:c5:
72:ec:74:e9:dd:23:e7:21:66:92:00:bd:56:44:a3:
31:c1:16:22:98:9f:9f:f0:75:a4:57:84:1a:43:80:
8d:cb:5c:be:3f:7b:02:0a:da:29:dc:e9:48:47:15:
84:58:51:ff:78:8f:49:33:4f:cd:34:e7:77:36:3c:
19:c1:4e:da:27:65:42:68:69:a8:6f:91:8f:c4:7b:
0a:cd:7c:9c:09:79:51:4a:95:60:73:00:6f:58:07:
d6:69:71:1f:c0:74:5c:5d:27:64:cb:74:53:06:64:
6d:e7:70:07:0b:0a:2a:6c:92:14:ac:59:12:f6:c5:
c1:a8:8b:71:c0:6b:ea:69:0d:8d:45:55:6e:2d:20:
60:e2:e3:a6:e9:3d:ab:aa:3d:07:1e:8f:a2:8d:5d:
d9:d2:1e:80:e1:95:23:22:37:16:49:21:4a:e9:8e:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:B4:02:4B:D9:D5:B5:5D:04:48:B6:FE:65:D2:68:2C:C6:82:5A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/fRK0AkvZ1bVdBEi2_mXSaCzGglo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/23
193.247.247.0/24
193.247.250.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
39:45:ba:25:5d:75:2b:93:7d:d1:a3:cd:01:8e:5c:5d:7b:b9:
1a:d2:cf:cc:74:d9:24:57:01:7e:09:aa:c4:a9:e0:10:6c:40:
f8:d3:a6:9b:1e:28:a5:fe:08:86:ee:f0:7a:79:8c:3a:64:49:
b2:41:00:12:fe:79:07:67:b8:7f:75:43:c6:1f:22:00:f4:6f:
be:9c:91:88:d8:8f:a2:30:a6:c3:b8:f0:a1:bf:86:29:f5:af:
89:25:5c:02:ed:e3:eb:6a:15:8f:20:cc:8d:74:f6:18:a5:95:
5d:8b:e5:12:e8:87:ab:a0:62:46:27:1f:83:c3:54:5a:65:3f:
74:ef:05:d9:83:0c:84:a9:21:5b:bb:2c:6c:81:0f:2f:45:e1:
08:54:6e:98:3c:c4:cd:9e:94:b8:a8:fc:90:da:d6:7c:d4:89:
0a:fb:3d:d7:6c:77:f2:f1:ba:40:7a:65:4d:78:49:b6:99:9a:
f1:64:db:a4:11:ef:f9:9b:d7:2f:88:a8:40:7c:a5:5a:d7:17:
25:31:6b:ea:04:fb:d9:5a:5a:0f:f9:f6:1c:ba:54:31:1f:af:
f2:bf:ad:c2:7b:94:4e:86:0d:e6:8b:8d:91:99:6d:1c:4d:40:
1e:f1:75:6e:49:6e:6a:c0:dd:6e:09:ab:2b:a2:31:9c:10:8e:
34:a9:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:53 2025 by rpki-client