Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iPvHiHGenEDT6YlOj7XOGoUgTiU.roa
File: iPvHiHGenEDT6YlOj7XOGoUgTiU.roa (raw, json)
Hash identifier: cynWDXpD9v718MluNEWK6wfAhAS4BAO/af82ZycH/a4=
Subject key identifier: 88:FB:C7:88:71:9E:9C:40:D3:E9:89:4E:8F:B5:CE:1A:85:20:4E:25
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018F62C742495D6826B0FA6DF317C31E722A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iPvHiHGenEDT6YlOj7XOGoUgTiU.roa
Signing time: Fri 10 May 2024 13:52:56 +0000
ROA not before: Fri 10 May 2024 13:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 23
193.247.166.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:c7:42:49:5d:68:26:b0:fa:6d:f3:17:c3:1e:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: May 10 13:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88fbc788719e9c40d3e9894e8fb5ce1a85204e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:20:88:47:90:8a:75:8a:c7:8c:24:2d:0c:
54:d7:27:1e:76:00:7b:b5:81:23:e6:a8:ee:7a:66:
56:28:f1:2d:1e:7d:dc:3d:56:e2:a9:d7:dc:e6:cd:
38:43:6f:8f:8d:6c:c7:c0:1b:50:74:bf:ee:31:56:
e7:31:59:17:19:a2:80:a7:b5:bc:18:65:53:08:2a:
a1:a6:d8:f6:ac:2a:41:b7:8c:bf:de:5f:7c:25:6a:
af:65:96:8f:4c:c0:2c:8b:3b:db:be:48:fa:3a:f6:
a8:71:af:ca:15:dd:44:47:54:2b:66:40:58:a9:ea:
df:e4:42:ba:a8:42:9d:80:8f:05:51:89:2c:01:3c:
ed:58:4a:92:79:7e:01:87:bb:a8:22:e1:ce:9d:11:
bc:6d:c9:33:da:9d:28:b3:1c:d5:12:f5:5b:55:84:
79:ba:04:50:20:26:e2:90:97:14:38:8c:c0:4b:ed:
e7:4d:25:2b:fa:eb:f7:08:69:6a:67:3b:5b:5f:9d:
75:02:31:ea:d7:f9:e7:77:30:6f:34:d8:62:20:97:
09:01:ce:1b:d1:1d:b0:84:07:5f:3a:44:3e:66:30:
b3:27:c9:74:47:65:3c:ea:90:30:74:00:8a:e0:43:
a7:c4:38:e1:92:94:8f:8b:26:67:50:6a:7a:76:02:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:C7:88:71:9E:9C:40:D3:E9:89:4E:8F:B5:CE:1A:85:20:4E:25
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iPvHiHGenEDT6YlOj7XOGoUgTiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d6:c9:03:64:2a:55:6a:56:0d:77:3b:ab:7d:7d:1b:82:bc:
0a:a7:6f:8a:a0:85:a2:ab:4d:08:98:e7:22:d1:3f:dc:dd:d4:
cf:59:02:03:cb:a4:c0:e2:60:73:82:c1:40:01:bc:0f:9d:51:
05:d0:e6:cf:ac:52:23:3f:89:be:df:55:44:32:30:51:1b:eb:
ec:d3:db:c4:f3:75:39:16:26:3c:cf:cd:ef:23:54:ee:ed:61:
f8:f8:f9:39:b2:b4:cb:56:ef:d2:e5:c3:42:90:a8:fa:29:38:
b9:98:a8:6d:7c:12:59:c7:e8:f1:df:42:ec:53:30:23:f3:31:
68:27:17:92:5c:1a:88:76:df:1c:ac:b8:71:67:08:28:d2:b3:
4a:fb:28:92:23:72:ba:3d:a0:62:5c:70:a9:2d:16:57:6c:5f:
a2:a0:cc:9b:32:c0:60:db:cb:a7:47:46:6e:4b:6b:b9:ed:ef:
9f:eb:54:3b:e8:1a:1f:d5:3d:f1:c4:36:54:04:4b:52:6c:7a:
b9:66:70:b9:ed:11:44:4a:96:28:b2:ae:72:80:95:c3:57:0f:
42:89:e1:24:89:0e:1e:b0:3b:b0:e9:14:3e:86:b4:6a:ad:15:
8c:d3:83:ca:9f:1c:08:89:f8:c1:f4:d2:64:d2:5d:53:c5:0e:
54:ca:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:54:07 2025 by rpki-client