Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/mu308GPdlmtLKyODlx3TAhTbC_o.roa
File: mu308GPdlmtLKyODlx3TAhTbC_o.roa (raw, json)
Hash identifier: xNA+deLXSd4DNHWqx08PjvSJ+RZlJfGZBjGu+eEU1cc=
Subject key identifier: 9A:ED:F4:F0:63:DD:96:6B:4B:2B:23:83:97:1D:D3:02:14:DB:0B:FA
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 018A0834133DFD4AA1446A1998E0412584A9
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/mu308GPdlmtLKyODlx3TAhTbC_o.roa
Signing time: Fri 18 Aug 2023 10:32:25 +0000
ROA not before: Fri 18 Aug 2023 10:32:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9146
IP address blocks: 195.222.32.0/19 maxlen: 21
195.222.32.0/21 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.40.0/21 maxlen: 21
109.175.0.0/17 maxlen: 21
109.175.4.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
195.222.49.0/24 maxlen: 24
195.222.48.0/20 maxlen: 20
109.175.6.0/23 maxlen: 23
195.222.48.0/21 maxlen: 21
109.175.12.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
195.222.56.0/21 maxlen: 21
109.175.24.0/24 maxlen: 24
109.175.22.0/23 maxlen: 23
109.175.20.0/23 maxlen: 23
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
85.92.226.0/24 maxlen: 24
85.92.224.0/19 maxlen: 21
85.92.227.0/24 maxlen: 24
85.92.230.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
80.65.64.0/19 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.64.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
80.65.68.0/22 maxlen: 22
80.65.72.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.76.0/22 maxlen: 22
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.92.0/22 maxlen: 22
92.36.128.0/17 maxlen: 21
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.192.0/21 maxlen: 21
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.146.0/24 maxlen: 24
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.170.0/24 maxlen: 24
109.163.168.0/23 maxlen: 23
109.163.168.0/21 maxlen: 23
109.163.172.0/22 maxlen: 22
109.163.171.0/24 maxlen: 24
109.163.176.0/21 maxlen: 21
109.163.176.0/20 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.184.0/21 maxlen: 21
109.163.190.0/23 maxlen: 23
109.163.188.0/23 maxlen: 23
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
109.163.128.0/22 maxlen: 22
109.163.128.0/19 maxlen: 19
109.163.128.0/18 maxlen: 18
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
37.203.64.0/18 maxlen: 21
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
31.176.128.0/20 maxlen: 20
31.176.128.0/17 maxlen: 21
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
31.176.144.0/20 maxlen: 20
109.175.98.0/23 maxlen: 23
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.102.0/23 maxlen: 23
109.175.100.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.106.0/23 maxlen: 23
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0::/32 maxlen: 32
2a02:27b0:5500::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:34:13:3d:fd:4a:a1:44:6a:19:98:e0:41:25:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Aug 18 10:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aedf4f063dd966b4b2b2383971dd30214db0bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:09:9b:1f:44:26:e0:13:a3:09:a9:93:77:
35:40:dc:47:e3:5f:6f:eb:46:35:32:2d:68:eb:61:
bb:be:d7:f3:8c:90:72:49:e8:b6:4c:6b:98:0e:dc:
7b:20:c1:de:81:e7:64:9a:21:a3:d6:59:1b:e8:4a:
a4:03:c1:be:d6:c9:48:6b:b4:c0:12:01:c6:44:7b:
6f:6e:6e:60:ad:b9:14:e2:ee:3c:0f:a7:69:52:d0:
f0:1c:a1:35:7c:45:41:7b:39:b6:6c:65:8b:08:c9:
50:ee:5a:7c:72:88:00:91:7e:6e:6b:b3:e0:07:f0:
88:04:59:7e:fc:22:da:1f:fc:b8:cf:f2:da:f0:51:
4b:ec:f6:a4:de:a4:bf:65:cf:51:80:94:4e:12:fa:
da:d3:01:d0:2c:e2:f0:1e:a8:2e:10:c7:4c:12:35:
9b:bf:00:36:7c:5b:a0:f8:29:9a:86:c4:5f:dd:fa:
1d:3a:7b:22:6e:77:5e:9c:80:88:d5:26:31:5e:fa:
d2:8e:c0:ef:49:43:8c:f3:b9:2b:32:3f:9d:4a:c1:
bb:2a:63:14:25:97:5e:1f:1f:a8:ca:3f:19:04:10:
30:4b:d5:f2:e8:50:94:e6:7d:44:c0:97:92:4a:a2:
73:5b:76:33:22:a4:18:38:37:9c:aa:7c:ce:96:cc:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:F4:F0:63:DD:96:6B:4B:2B:23:83:97:1D:D3:02:14:DB:0B:FA
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/mu308GPdlmtLKyODlx3TAhTbC_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
02:62:01:82:5f:35:61:8c:56:f7:61:9f:23:10:34:87:e3:13:
4e:bf:03:6f:de:f2:e1:c1:12:f4:ec:9a:92:8c:3f:96:8d:24:
18:bb:24:2f:ad:ab:08:3c:a7:5f:6c:6b:56:0b:7d:4c:09:66:
33:a9:1c:3e:77:db:b6:82:2c:60:10:e8:48:15:e4:d2:58:53:
52:2d:a5:90:66:98:fc:42:c1:7c:95:ce:a9:02:d1:d7:0c:b3:
dd:dc:dc:b7:c1:32:20:be:2a:aa:ef:26:a8:8c:99:07:3a:45:
36:02:bd:08:e0:e1:12:05:fa:85:b4:b0:08:a0:a4:15:08:92:
32:e7:70:f0:4d:51:98:d4:1f:1b:95:da:a3:48:fb:8b:75:5d:
78:6a:74:d9:9a:65:43:36:d0:26:cf:c5:82:de:22:13:ad:e8:
38:33:fc:43:1e:f6:e2:1c:ef:a3:51:c2:d9:1c:43:42:56:c4:
66:21:38:fa:52:e7:6e:e3:5d:e0:b6:3a:42:e5:fc:23:a5:ca:
23:05:50:1e:fc:a6:bc:f0:6c:a3:e8:e4:0d:62:d0:bd:2c:40:
29:40:c9:e6:0a:a3:9c:28:e8:bb:77:69:e0:5f:26:4f:2c:5f:
72:bd:f5:39:f6:8c:97:f2:00:d7:36:82:85:de:a5:55:bb:8f:
4c:f9:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:05 2025 by rpki-client