Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rhHMKDcEE-3B2KN8Kzv0R6xFrXY.roa
File: rhHMKDcEE-3B2KN8Kzv0R6xFrXY.roa (raw, json)
Hash identifier: GfIFEJP+ADHLh8HaZH4OcJHMvpCV5un6yQ67pHvb0Xk=
Subject key identifier: AE:11:CC:28:37:04:13:ED:C1:D8:A3:7C:2B:3B:F4:47:AC:45:AD:76
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018DA1F6FA60202AC99F5528CCA2588AA2AA
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rhHMKDcEE-3B2KN8Kzv0R6xFrXY.roa
Signing time: Tue 13 Feb 2024 10:15:34 +0000
ROA not before: Tue 13 Feb 2024 10:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 20
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.246.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.166.0/23 maxlen: 23
193.247.166.0/24 maxlen: 24
193.247.167.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.193.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
193.247.255.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:f6:fa:60:20:2a:c9:9f:55:28:cc:a2:58:8a:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Feb 13 10:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae11cc28370413edc1d8a37c2b3bf447ac45ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:7c:9d:d9:05:91:48:1d:57:11:4a:8d:d8:
5d:1f:36:4d:e3:c4:5e:93:76:7a:6a:8b:1d:69:9d:
ef:c7:f2:40:bf:52:cc:22:cc:95:c2:f7:b7:a5:f9:
30:ba:cd:32:79:75:9e:8a:33:8d:25:fe:7d:35:29:
ab:9a:c9:db:ad:ec:fe:c5:ed:21:6a:f0:30:b5:4d:
89:51:04:ba:0d:8b:e3:2c:8c:18:ad:bd:61:6e:5a:
d0:2d:93:8b:4f:0b:ae:ce:5b:71:c8:33:42:0b:58:
a1:e7:9d:6d:b8:1d:ec:84:6c:b3:55:af:42:34:f6:
df:d9:04:04:66:66:fb:4f:09:21:ad:57:c4:d6:1d:
e8:0a:76:27:f3:78:a6:b1:89:2f:84:e2:78:f3:f8:
89:34:b3:8e:5f:38:8a:0b:c2:7c:54:d0:85:bc:4c:
33:bd:bb:e9:84:14:6b:92:0c:d1:7f:a7:30:80:1e:
c2:06:0c:24:44:84:e1:18:fa:88:38:49:ed:87:7f:
48:14:79:95:d5:7a:8f:89:bb:9a:7c:f4:50:f8:de:
2d:21:b7:8f:cb:4d:18:71:53:db:88:bb:cb:7b:2f:
c4:11:11:d5:8b:38:13:b0:1f:71:ed:d3:e8:c4:a9:
43:5e:d5:0c:af:76:18:d3:b5:4f:ba:ac:54:02:f7:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:CC:28:37:04:13:ED:C1:D8:A3:7C:2B:3B:F4:47:AC:45:AD:76
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rhHMKDcEE-3B2KN8Kzv0R6xFrXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/24
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.246.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.166.0-193.247.175.255
193.247.193.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
193.247.255.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
be:ce:6b:23:8f:02:44:92:66:2e:94:3a:5c:a2:28:8c:93:46:
e0:bb:d9:f1:35:f9:91:40:a6:70:23:53:ea:27:80:40:e5:5d:
59:9e:20:08:43:66:f0:30:af:35:54:60:1e:ca:f3:38:b2:36:
ad:34:be:e5:5d:be:04:5d:79:26:0d:df:78:f5:36:97:02:37:
29:08:f7:ea:b1:c3:91:4d:c5:d6:ad:43:5c:c8:92:23:63:01:
ce:8d:b8:c0:1f:23:61:07:5c:a5:af:85:6b:3c:88:fc:bd:ae:
d9:82:20:02:dd:0d:63:15:2c:27:24:7c:54:41:11:39:f5:76:
02:87:a6:cf:25:17:05:dc:99:82:67:9c:cd:fa:cb:df:1f:e0:
ef:a7:e2:28:f9:40:b3:3b:e4:97:83:88:ff:c6:3d:a4:29:cb:
78:01:0a:66:d0:66:c7:e7:9d:94:68:7f:21:6d:04:3b:6f:89:
d9:8f:5d:5d:f1:ee:ab:39:a1:7d:96:a1:33:78:cc:06:84:95:
a1:38:a0:ed:93:72:76:b4:7c:ff:08:a0:12:67:c1:41:39:c1:
4b:8a:c1:94:90:a7:33:f1:e3:24:cb:d8:47:03:4f:23:ff:27:
73:63:0d:51:d5:3e:22:6a:7f:ba:ff:0b:b3:3e:3c:dd:4c:6d:
9a:22:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:29 2025 by rpki-client