Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xmY_eydrObUafse2SHiLH6RpEAA.roa
File: xmY_eydrObUafse2SHiLH6RpEAA.roa (raw, json)
Hash identifier: tHI34AHo4TXONY0tmCdVo/imPi5u2YdFV/kgd28D/kE=
Subject key identifier: C6:66:3F:7B:27:6B:39:B5:1A:7E:C7:B6:48:78:8B:1F:A4:69:10:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01879F2CBC092E8B958D67753D0839C5AC0E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xmY_eydrObUafse2SHiLH6RpEAA.roa
Signing time: Thu 20 Apr 2023 14:58:41 +0000
ROA not before: Thu 20 Apr 2023 14:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
46.33.64.0/19 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
193.242.80.0/20 maxlen: 20
194.121.52.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
77.67.0.0/17 maxlen: 24
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
134.222.0.0/16 maxlen: 16
212.222.0.0/16 maxlen: 24
194.45.182.0/23 maxlen: 23
212.221.0.0/17 maxlen: 24
194.122.248.0/22 maxlen: 22
213.251.0.0/18 maxlen: 24
185.160.40.0/22 maxlen: 22
194.123.164.0/24 maxlen: 24
194.120.0.0/24 maxlen: 24
213.254.192.0/18 maxlen: 24
194.123.122.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.122.80.0/21 maxlen: 21
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
62.132.132.0/23 maxlen: 23
192.129.32.0/23 maxlen: 23
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
194.45.4.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
194.122.120.0/21 maxlen: 21
62.41.160.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
212.115.128.0/18 maxlen: 24
212.1.0.0/19 maxlen: 19
194.122.76.0/22 maxlen: 22
213.200.64.0/18 maxlen: 18
195.143.0.0/16 maxlen: 24
194.45.98.0/23 maxlen: 23
194.122.224.0/20 maxlen: 20
141.136.96.0/20 maxlen: 20
194.45.12.0/23 maxlen: 23
89.149.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
194.45.47.0/24 maxlen: 24
194.121.123.0/24 maxlen: 24
92.71.0.0/17 maxlen: 17
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
212.189.0.0/17 maxlen: 17
192.67.196.0/24 maxlen: 24
77.77.128.0/18 maxlen: 24
193.141.140.0/23 maxlen: 23
194.121.104.0/23 maxlen: 23
62.41.16.0/21 maxlen: 24
62.132.0.0/22 maxlen: 22
62.41.24.0/22 maxlen: 24
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.132.28.0/24 maxlen: 24
92.71.128.0/18 maxlen: 18
62.41.56.0/21 maxlen: 24
62.132.42.0/23 maxlen: 23
194.41.62.0/24 maxlen: 24
62.41.64.0/20 maxlen: 24
192.54.104.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
62.41.0.0/20 maxlen: 24
194.121.220.0/22 maxlen: 22
2a00:1750::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680::/32 maxlen: 32
2001:680:20::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:668::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:2c:bc:09:2e:8b:95:8d:67:75:3d:08:39:c5:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 20 14:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6663f7b276b39b51a7ec7b648788b1fa4691000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:74:28:66:08:0f:2b:13:0d:7c:9a:eb:b5:
00:61:35:85:9c:68:fa:c9:ab:89:80:b0:ba:10:c2:
f2:1c:44:4c:20:db:df:d2:98:5d:35:10:44:73:a3:
f1:de:f5:48:a9:ee:fa:b8:a3:b6:b5:37:a4:dd:71:
27:ff:fc:89:d5:a7:95:94:9c:59:47:11:9e:5e:c6:
b0:9e:bb:5c:cc:9c:ec:d3:7b:34:91:2b:3d:c5:e1:
71:ac:cc:3f:10:4f:8d:cb:7f:52:16:8f:c4:f5:78:
35:35:e2:6f:6a:62:65:4a:b4:6e:b3:de:6f:89:a4:
fc:dc:b1:84:4f:fe:1e:ce:8a:71:b6:3c:70:93:06:
9c:13:ed:83:3d:9d:08:13:21:08:ab:c1:83:b9:59:
d2:aa:63:45:0d:c8:4e:0d:31:0a:3d:d5:41:84:c4:
3d:63:9a:2c:c8:dd:fb:46:20:72:07:d6:a5:25:19:
7f:f8:9d:a9:8a:87:19:1f:9a:05:b5:7d:53:97:1e:
f6:e8:3b:cc:13:64:6f:b2:61:c3:e1:78:ef:39:dc:
94:3b:48:d9:c9:5e:71:8f:0e:0e:cf:40:06:4c:86:
68:0e:c6:18:17:2f:1f:22:b3:a5:fa:ec:69:80:25:
9e:24:0f:92:c8:13:d1:d1:de:94:c5:2a:7c:ec:53:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:3F:7B:27:6B:39:B5:1A:7E:C7:B6:48:78:8B:1F:A4:69:10:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xmY_eydrObUafse2SHiLH6RpEAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.143.0.0/16
212.1.0.0/19
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
48:a9:ae:40:1c:bd:4d:ad:c9:aa:c5:f1:39:c1:ad:e8:35:32:
1a:42:54:39:4b:3a:8b:3e:c2:37:6f:04:d0:a1:cb:cd:19:82:
b4:1e:f3:7f:91:8e:ef:fc:63:52:4a:13:6b:c8:af:b7:d7:f3:
d9:b0:88:2f:1a:cb:fc:b0:7f:19:d4:35:99:93:cf:27:b1:ec:
c1:63:64:87:e5:cf:5e:d3:12:74:c9:04:d8:f0:f4:5a:98:50:
65:e1:b0:f5:b4:52:6a:05:c7:19:c5:9e:9a:75:b8:97:9f:c7:
2e:f1:d4:5c:4e:70:43:c5:dd:69:89:5e:2a:72:2c:1d:b2:b6:
2b:19:18:22:50:93:22:c0:03:89:f6:14:d6:83:b1:50:b3:18:
cd:e4:33:c5:af:c8:ce:35:34:ba:92:13:31:65:7b:e4:11:ee:
c8:5b:a8:97:96:7f:39:72:68:cf:ba:74:fd:8d:47:d5:a9:44:
1f:30:f4:91:8f:47:b9:26:2c:43:f5:ca:bd:0a:2c:f0:d3:7b:
c9:e0:4f:70:62:bf:86:2f:6f:d9:f2:bc:3c:bc:cb:61:10:e5:
a8:77:6b:0c:4b:4f:a5:2c:e5:a3:76:ef:20:c6:5d:5a:d5:2b:
04:4e:dc:41:28:ad:7d:7f:f8:fd:9d:25:de:f7:fc:65:b0:db:
e8:4a:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:55 2025 by rpki-client