Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/iDoekYbnPiOIxLiqr48QVJjIZ7I.roa
File: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (raw, json)
Hash identifier: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=
Subject key identifier: 88:3A:1E:91:86:E7:3E:23:88:C4:B8:AA:AF:8F:10:54:98:C8:67:B2
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 01941FFA7D47B4F29A5EBC9638FD16FF1CA2
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/iDoekYbnPiOIxLiqr48QVJjIZ7I.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12392
IP address blocks: 62.197.64.0/18 maxlen: 18
62.197.64.0/20 maxlen: 20
62.197.80.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
78.129.0.0/20 maxlen: 20
78.129.16.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.128.0/20 maxlen: 20
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.26.64.0/20 maxlen: 20
85.26.80.0/20 maxlen: 20
85.26.96.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.27.0.0/17 maxlen: 17
85.27.32.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
85.201.0.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.201.160.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.240.0/20 maxlen: 20
95.182.128.0/17 maxlen: 17
95.182.128.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
95.182.208.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.0.0/20 maxlen: 20
109.88.16.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.48.0/20 maxlen: 20
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.128.0/19 maxlen: 19
109.88.160.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
109.88.224.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
109.89.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
109.89.32.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.128.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
109.89.160.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
185.3.160.0/22 maxlen: 22
212.68.192.0/18 maxlen: 18
212.68.192.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
213.189.176.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.192.0/20 maxlen: 20
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
213.213.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788:600::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:47:b4:f2:9a:5e:bc:96:38:fd:16:ff:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=883a1e9186e73e2388c4b8aaaf8f105498c867b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:6f:b8:91:57:67:5b:f8:82:90:f3:43:b4:
3a:fa:48:69:a9:cd:77:9b:e8:ba:8d:9d:27:4a:dd:
0d:85:13:aa:b0:d9:b6:04:79:39:97:9a:71:15:cf:
48:4a:cc:e7:c6:a6:37:34:ec:e5:71:f4:56:3e:7b:
58:7f:a7:f6:1a:32:b8:1e:da:b7:98:be:b0:85:60:
96:c1:74:35:80:cd:52:f5:dc:57:39:11:83:c7:93:
dc:f6:7c:b6:d6:dd:fe:77:50:0e:ed:c6:a2:d6:20:
0f:c9:fe:fe:bb:86:fa:6a:28:ba:ea:5a:06:ab:a4:
51:79:18:e1:64:ae:b8:69:71:aa:42:c4:ef:7b:ed:
13:69:e7:3f:f0:e3:59:05:2d:d7:c9:06:96:ce:d8:
81:86:45:ec:a4:ab:5d:47:cd:95:dc:46:6d:13:58:
87:e4:66:e8:06:54:88:dd:a7:89:bd:30:02:d2:44:
e7:3f:f3:3f:42:6c:54:ad:38:b0:2e:1b:4f:af:5f:
e0:4f:e7:74:51:8b:c2:fb:7c:4c:51:b5:2d:d6:56:
38:32:4b:3e:dd:cb:b6:4a:6c:02:81:d3:f6:4e:92:
51:88:12:91:07:c2:4f:c4:6f:d5:64:b9:ec:6f:81:
cb:a3:c2:22:30:0b:0c:15:15:fa:2f:a3:61:86:9f:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:1E:91:86:E7:3E:23:88:C4:B8:AA:AF:8F:10:54:98:C8:67:B2
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/iDoekYbnPiOIxLiqr48QVJjIZ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
02:ae:47:93:24:cc:82:7e:cc:44:d2:fb:d6:f8:93:d9:17:22:
0c:9b:64:16:94:91:53:85:7b:ea:9c:ae:37:e9:b1:1c:c2:bc:
98:f7:96:c3:7c:5e:07:93:05:91:ee:ce:d9:9d:1f:30:2a:18:
d5:50:b0:bb:c5:43:18:13:7f:25:7e:3a:a8:67:41:60:be:af:
bc:a6:42:b0:37:76:b5:38:19:f8:ef:a8:fc:58:ef:2a:af:d0:
4a:d4:33:3a:4c:ed:e2:f4:30:be:d1:b2:9c:ee:51:11:62:60:
3b:1b:8a:5f:0d:c1:e3:48:3c:7a:4f:08:18:2f:53:5c:1c:38:
3d:64:f0:95:aa:26:6b:80:a0:a5:9d:34:53:10:d3:ad:55:7d:
08:7d:39:30:98:4a:45:13:b6:24:51:ae:bf:44:cb:8f:5f:e1:
db:8b:3d:e7:e2:8e:33:e1:5c:eb:5b:e0:e2:a1:ee:09:eb:2f:
ee:04:8e:c2:80:4a:b9:f3:84:2d:17:bb:5a:f1:9b:ab:2e:a5:
06:d6:d3:ea:18:d4:57:d8:7a:c3:d4:01:96:36:7e:3f:d9:96:
03:61:f5:3e:d9:b2:ed:5f:53:60:4e:32:b1:c5:e1:0f:93:5b:
5d:56:36:5e:e1:48:54:a5:63:e0:60:78:ee:02:56:07:4a:81:
b0:33:11:ba
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAZQf+n1HtPKaXryWOP0W/xyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUwMTAxMDM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODNhMWU5MTg2ZTczZTIzODhjNGI4YWFhZjhmMTA1NDk4Yzg2N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw9vuJFXZ1v4gpDzQ7Q6+khpqc13
m+i6jZ0nSt0NhROqsNm2BHk5l5pxFc9ISsznxqY3NOzlcfRWPntYf6f2GjK4Htq3
mL6whWCWwXQ1gM1S9dxXORGDx5Pc9ny21t3+d1AO7cai1iAPyf7+u4b6aii66loG
q6RReRjhZK64aXGqQsTve+0Taec/8ONZBS3XyQaWztiBhkXspKtdR82V3EZtE1iH
5GboBlSI3aeJvTAC0kTnP/M/QmxUrTiwLhtPr1/gT+d0UYvC+3xMUbUt1lY4Mks+
3cu2SmwCgdP2TpJRiBKRB8JPxG/VZLnsb4HLo8IiMAsMFRX6L6Nhhp83+QIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFIg6HpGG5z4jiMS4qq+PEFSYyGeyMB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaURvZWtZYm5QaU9JeExpcXI0OFFWSmpJWjdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQGPsVAAwQH
ToEAAwQGUtSAAwQHVRoAAwQHVRsAAwMAVckDBAdftoADAwFtWAMEBpWawAMEArkD
oAMEBtREwAMEBdW9oAMEBtXVwAMEBNkP4DANBAIAAjAHAwUAKgIniDANBgkqhkiG
9w0BAQsFAAOCAQEAAq5HkyTMgn7MRNL71viT2RciDJtkFpSRU4V76pyuN+mxHMK8
mPeWw3xeB5MFke7O2Z0fMCoY1VCwu8VDGBN/JX46qGdBYL6vvKZCsDd2tTgZ+O+o
/FjvKq/QStQzOkzt4vQwvtGynO5REWJgOxuKXw3B40g8ek8IGC9TXBw4PWTwlaom
a4CgpZ00UxDTrVV9CH05MJhKRRO2JFGuv0TLj1/h24s95+KOM+Fc61vg4qHuCesv
7gSOwoBKufOELRe7WvGbqy6lBtbT6hjUV9h6w9QBljZ+P9mWA2H1Ptmy7V9TYE4y
scXhD5NbXVY2XuFIVKVj4GB47gJWB0qBsDMRug==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:52 2025 by rpki-client