Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/8Hm8ROjjLIcnkEpvxTbdxistuMM.roa
File: 8Hm8ROjjLIcnkEpvxTbdxistuMM.roa (raw, json)
Hash identifier: fivXmXTKalCeG6p4UNgqE3xc6g/JyfUTzfEkAJeo92s=
Subject key identifier: F0:79:BC:44:E8:E3:2C:87:27:90:4A:6F:C5:36:DD:C6:2B:2D:B8:C3
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF5EEC88BE2F51CA9A27B478CEF7A68
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/8Hm8ROjjLIcnkEpvxTbdxistuMM.roa
Signing time: Fri 08 Dec 2023 19:44:40 +0000
ROA not before: Fri 08 Dec 2023 19:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57858
IP address blocks: 37.72.189.0/24 maxlen: 24
37.72.190.0/24 maxlen: 24
37.72.191.0/24 maxlen: 24
37.72.187.0/24 maxlen: 24
37.72.188.0/24 maxlen: 24
5.153.233.0/24 maxlen: 24
5.153.234.0/24 maxlen: 24
5.153.235.0/24 maxlen: 24
5.153.237.0/24 maxlen: 24
5.153.238.0/24 maxlen: 24
130.185.152.0/24 maxlen: 24
130.185.156.0/24 maxlen: 24
130.185.157.0/24 maxlen: 24
130.185.158.0/24 maxlen: 24
130.185.154.0/24 maxlen: 24
130.185.155.0/24 maxlen: 24
130.185.159.0/24 maxlen: 24
185.3.132.0/24 maxlen: 24
185.3.134.0/24 maxlen: 24
185.3.135.0/24 maxlen: 24
185.3.133.0/24 maxlen: 24
46.29.252.0/24 maxlen: 24
46.29.253.0/24 maxlen: 24
46.29.248.0/23 maxlen: 23
46.29.250.0/23 maxlen: 23
46.29.254.0/24 maxlen: 24
46.29.255.0/24 maxlen: 24
151.237.176.0/24 maxlen: 24
151.237.177.0/24 maxlen: 24
151.237.178.0/24 maxlen: 24
151.237.179.0/24 maxlen: 24
151.237.182.0/24 maxlen: 24
151.237.183.0/24 maxlen: 24
151.237.184.0/24 maxlen: 24
151.237.180.0/24 maxlen: 24
151.237.181.0/24 maxlen: 24
151.237.185.0/24 maxlen: 24
151.237.189.0/24 maxlen: 24
151.237.190.0/24 maxlen: 24
151.237.191.0/24 maxlen: 24
151.237.187.0/24 maxlen: 24
5.157.1.0/24 maxlen: 24
5.157.0.0/24 maxlen: 24
5.157.9.0/24 maxlen: 24
5.157.10.0/24 maxlen: 24
5.157.5.0/24 maxlen: 24
5.157.7.0/24 maxlen: 24
37.203.208.0/24 maxlen: 24
37.203.210.0/24 maxlen: 24
37.203.211.0/24 maxlen: 24
37.203.212.0/24 maxlen: 24
37.203.213.0/24 maxlen: 24
37.203.214.0/24 maxlen: 24
5.157.15.0/24 maxlen: 24
5.157.16.0/24 maxlen: 24
5.157.12.0/24 maxlen: 24
5.157.18.0/24 maxlen: 24
5.157.20.0/24 maxlen: 24
5.157.25.0/24 maxlen: 24
5.157.28.0/24 maxlen: 24
5.157.36.0/24 maxlen: 24
5.157.35.0/24 maxlen: 24
5.157.44.0/24 maxlen: 24
5.157.39.0/24 maxlen: 24
5.157.40.0/24 maxlen: 24
5.157.50.0/24 maxlen: 24
5.157.46.0/24 maxlen: 24
5.157.47.0/24 maxlen: 24
5.157.48.0/24 maxlen: 24
5.157.49.0/24 maxlen: 24
5.157.52.0/24 maxlen: 24
5.157.54.0/24 maxlen: 24
5.34.240.0/24 maxlen: 24
91.108.176.0/24 maxlen: 24
91.108.177.0/24 maxlen: 24
91.108.178.0/24 maxlen: 24
91.108.179.0/24 maxlen: 24
176.61.136.0/24 maxlen: 24
176.61.137.0/24 maxlen: 24
176.61.138.0/24 maxlen: 24
176.61.139.0/24 maxlen: 24
91.108.180.0/24 maxlen: 24
91.108.181.0/24 maxlen: 24
91.108.182.0/24 maxlen: 24
176.61.140.0/24 maxlen: 24
176.61.141.0/24 maxlen: 24
176.61.142.0/24 maxlen: 24
176.61.143.0/24 maxlen: 24
5.34.244.0/24 maxlen: 24
5.34.245.0/24 maxlen: 24
5.34.246.0/24 maxlen: 24
5.34.241.0/24 maxlen: 24
5.34.242.0/24 maxlen: 24
5.34.243.0/24 maxlen: 24
5.34.247.0/24 maxlen: 24
178.216.52.0/24 maxlen: 24
178.216.53.0/24 maxlen: 24
178.216.54.0/24 maxlen: 24
178.216.55.0/24 maxlen: 24
178.216.50.0/24 maxlen: 24
178.216.51.0/24 maxlen: 24
178.216.48.0/24 maxlen: 24
178.216.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:ee:c8:8b:e2:f5:1c:a9:a2:7b:47:8c:ef:7a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f079bc44e8e32c8727904a6fc536ddc62b2db8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:0c:88:01:44:2c:b1:6a:f8:ae:0e:60:1f:
2a:72:c5:a4:2a:ad:5e:6b:39:ee:a6:a7:85:50:70:
19:a0:01:ad:bd:ec:45:84:71:37:9a:32:cb:22:a3:
44:47:4f:63:d6:fc:31:99:50:a5:ff:48:3b:21:28:
77:fd:20:e9:dd:b4:43:c2:d6:cb:4f:e3:d9:4f:59:
74:c4:02:10:4f:73:cc:ca:de:42:0d:5f:a9:95:4c:
2f:4a:29:e8:8f:e7:06:47:0a:96:30:c2:13:7e:80:
fb:46:1b:91:e1:03:99:2c:de:2e:ce:a5:96:c5:2d:
1d:87:f2:d0:01:b3:c9:31:8a:f2:a2:8d:a3:10:8f:
ce:bd:16:b3:68:08:30:a3:85:d3:3e:01:59:4c:7c:
65:55:67:99:34:91:97:3b:52:39:1f:7b:3d:f8:de:
50:76:0f:8a:14:e7:42:51:c0:45:ce:f0:52:91:9e:
bc:c5:c8:8c:50:61:f6:1f:d2:d7:69:5c:fe:79:20:
f7:36:69:8f:cf:01:46:33:af:3d:18:fb:9e:5d:c0:
88:4d:8d:05:38:15:9b:1e:52:79:0d:85:ee:c2:02:
04:5f:dd:a9:7f:7e:73:e6:13:d7:69:31:34:b4:b0:
29:d2:4c:32:12:00:5a:d7:6b:bc:0b:a9:aa:a9:74:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:BC:44:E8:E3:2C:87:27:90:4A:6F:C5:36:DD:C6:2B:2D:B8:C3
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/8Hm8ROjjLIcnkEpvxTbdxistuMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.240.0/21
5.153.233.0-5.153.235.255
5.153.237.0-5.153.238.255
5.157.0.0/23
5.157.5.0/24
5.157.7.0/24
5.157.9.0-5.157.10.255
5.157.12.0/24
5.157.15.0-5.157.16.255
5.157.18.0/24
5.157.20.0/24
5.157.25.0/24
5.157.28.0/24
5.157.35.0-5.157.36.255
5.157.39.0-5.157.40.255
5.157.44.0/24
5.157.46.0-5.157.50.255
5.157.52.0/24
5.157.54.0/24
37.72.187.0-37.72.191.255
37.203.208.0/24
37.203.210.0-37.203.214.255
46.29.248.0/21
91.108.176.0-91.108.182.255
130.185.152.0/24
130.185.154.0-130.185.159.255
151.237.176.0-151.237.185.255
151.237.187.0/24
151.237.189.0-151.237.191.255
176.61.136.0/21
178.216.48.0/21
185.3.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:fa:ec:44:d0:87:1f:7a:32:9f:f8:e7:b8:68:06:c0:65:ff:
e7:ed:c3:18:6b:1e:43:4b:f2:5d:2c:a9:2f:ec:3e:e2:1a:94:
9c:d0:9c:21:dc:ac:91:9c:b9:a6:e1:e0:bf:9f:00:08:24:47:
3c:f5:c7:96:e0:7f:a0:fa:bb:49:a8:62:48:5c:63:48:38:2a:
e0:04:51:c7:95:a5:df:33:cd:a2:9d:c9:fc:4b:81:53:a8:ce:
ab:f6:3c:13:2b:3c:08:2b:6d:b9:64:71:de:31:23:85:27:c1:
c1:d3:06:db:8d:c8:38:d5:22:7f:92:91:7d:30:ba:9c:20:13:
67:c4:ba:92:72:67:d4:99:4e:76:74:b5:06:cb:6a:d5:fb:37:
9a:78:3a:4d:36:9b:d3:6c:3c:09:1f:f6:9d:24:97:32:8c:d3:
77:36:b0:ff:a9:54:af:05:84:27:62:ec:bf:9c:94:f0:43:3b:
12:ce:f0:57:5b:6d:70:5a:5b:51:53:86:ea:a9:d6:26:36:29:
c7:a1:77:52:93:c1:ea:80:a6:1d:09:73:bb:3b:8c:40:ee:fa:
3b:91:f6:0f:35:95:ec:40:11:b9:6b:ff:47:48:13:10:b0:32:
53:15:fd:33:df:d7:76:ad:4b:1b:07:54:a3:9e:cb:9b:f5:1b:
9c:d6:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org