Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ndzApjt7Y2Fm3TWHP1CaV8L8lmo.roa
File: ndzApjt7Y2Fm3TWHP1CaV8L8lmo.roa (raw, json)
Hash identifier: dL+FtRIIiuJwqhAOXKHymhu9DQ0M/l9mc2CsaK/JsyY=
Subject key identifier: 9D:DC:C0:A6:3B:7B:63:61:66:DD:35:87:3F:50:9A:57:C2:FC:96:6A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067BC5B106D36C1093B30208C243709
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ndzApjt7Y2Fm3TWHP1CaV8L8lmo.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bc:5b:10:6d:36:c1:09:3b:30:20:8c:24:37:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ddcc0a63b7b636166dd35873f509a57c2fc966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:ea:96:99:a7:cd:74:ab:d2:3f:f1:f4:1a:
fb:fb:78:b5:b4:15:ba:99:0b:15:ed:16:9b:77:e0:
30:98:02:87:e8:51:23:c2:e3:ea:5b:29:42:b7:fa:
60:e8:78:15:cd:7a:3e:c8:4c:5f:4d:bc:91:c8:68:
00:69:64:28:42:6b:b7:70:94:69:6b:4a:02:2a:21:
73:e3:6a:94:f1:b1:4e:21:10:3a:ae:61:03:9f:91:
2f:76:c9:d7:37:ba:ae:4d:2e:69:1d:0d:43:39:ec:
fe:17:63:af:32:ab:a2:94:91:57:91:0a:1a:fc:5e:
9c:de:8f:2e:55:36:86:1c:21:ac:f6:48:f6:5b:15:
f2:fa:04:f1:eb:fa:55:e5:13:c3:d3:93:d5:4e:4f:
28:4f:3f:e9:bc:6d:f3:c6:ae:8e:ac:26:a5:90:03:
e6:f5:9c:fb:e6:64:f0:0d:e3:1e:e5:88:0e:4e:bc:
a3:0b:e5:72:61:06:89:96:85:71:f0:da:3e:c7:cb:
92:51:82:45:66:d5:3d:74:9b:36:75:24:2c:aa:1a:
62:dc:9d:69:ac:de:9b:de:65:9f:2c:75:db:20:d8:
13:ae:0b:09:70:c8:d3:63:cc:09:7f:fa:d0:be:90:
24:85:40:ad:22:18:88:dd:35:70:7e:a5:aa:ab:a7:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DC:C0:A6:3B:7B:63:61:66:DD:35:87:3F:50:9A:57:C2:FC:96:6A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ndzApjt7Y2Fm3TWHP1CaV8L8lmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
7e:87:e7:ca:c2:42:05:52:ed:7d:b0:31:92:33:70:22:59:1b:
da:b5:b0:d0:8f:6b:e7:78:15:5a:10:25:4c:a9:f0:49:ca:6a:
7a:ab:c2:cb:1d:b7:ca:84:98:bd:80:b4:19:47:b2:67:fb:3a:
50:ab:58:96:80:4e:91:fc:0d:11:cb:1b:19:3e:13:fd:f0:15:
75:68:f8:17:9e:be:83:7d:11:95:a4:e0:62:0a:65:c5:cc:5b:
3b:4e:43:d9:67:8d:14:9f:e6:72:32:db:6d:aa:57:9a:24:6d:
5f:93:ab:fa:07:3d:fc:ac:12:0e:ad:d1:d4:17:0f:95:9a:1a:
59:7e:b6:26:87:ad:60:14:b5:dc:1e:56:72:92:90:8f:9c:cc:
f0:c5:b8:c4:a9:76:70:8b:65:94:55:5c:8d:72:2b:3a:b0:25:
99:b8:0a:a3:52:63:d8:5e:34:fa:cb:10:f0:c8:2e:1d:5b:d3:
27:7a:6a:fc:99:8f:17:c0:f2:29:b0:0f:94:4e:cf:f2:81:58:
4a:33:fb:e5:69:36:e5:13:25:5f:dd:0f:f0:71:3c:f9:fd:75:
d7:9d:5a:98:78:5d:2b:3d:04:a8:5f:20:3f:fd:20:3d:9f:c7:
03:38:88:b8:99:f4:96:ba:08:13:07:5d:e0:6b:ef:fc:70:2b:
d0:b4:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:33:04 2025 by rpki-client