Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/InC4YshiUdnfkFu5VtePvz0B8AM.roa
File: InC4YshiUdnfkFu5VtePvz0B8AM.roa (raw, json)
Hash identifier: BrsvEXtr/mLj0ErydhKz8TAWXtHAgUq3CkU0WA/FyRY=
Subject key identifier: 22:70:B8:62:C8:62:51:D9:DF:90:5B:B9:56:D7:8F:BF:3D:01:F0:03
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 06F12B97
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/InC4YshiUdnfkFu5VtePvz0B8AM.roa
Signing time: Fri 17 Jun 2022 06:00:44 +0000
ROA not before: Fri 17 Jun 2022 06:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34244
IP address blocks: 94.46.136.0/22 maxlen: 22
45.152.172.0/22 maxlen: 22
178.236.65.48/29 maxlen: 29
178.255.112.0/22 maxlen: 22
178.236.73.80/29 maxlen: 29
178.236.73.112/29 maxlen: 29
178.236.73.176/29 maxlen: 29
193.221.219.0/24 maxlen: 24
141.98.236.0/22 maxlen: 22
193.221.120.0/24 maxlen: 24
193.221.123.0/24 maxlen: 24
185.186.32.0/22 maxlen: 22
185.176.28.0/22 maxlen: 22
185.216.152.0/22 maxlen: 22
5.180.0.0/22 maxlen: 22
178.236.74.88/29 maxlen: 29
185.121.44.0/22 maxlen: 22
185.223.236.0/22 maxlen: 22
185.240.208.0/22 maxlen: 22
45.93.232.0/22 maxlen: 22
195.210.52.0/23 maxlen: 23
128.127.184.0/21 maxlen: 21
94.46.240.0/22 maxlen: 22
81.92.220.0/22 maxlen: 22
178.236.73.128/29 maxlen: 29
178.236.73.160/29 maxlen: 29
178.236.73.224/29 maxlen: 29
185.247.236.0/22 maxlen: 22
45.131.188.0/22 maxlen: 22
92.39.32.0/20 maxlen: 20
81.92.196.0/22 maxlen: 22
45.8.152.0/22 maxlen: 22
85.30.128.0/18 maxlen: 18
155.137.24.0/21 maxlen: 21
185.4.8.0/22 maxlen: 22
178.236.73.200/29 maxlen: 29
193.221.93.0/24 maxlen: 24
37.221.104.0/22 maxlen: 22
185.197.224.0/22 maxlen: 22
188.66.48.0/22 maxlen: 22
45.14.4.0/22 maxlen: 22
2a02:80::/32 maxlen: 32
2a02:80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116468631 (0x6f12b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jun 17 06:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2270b862c86251d9df905bb956d78fbf3d01f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:42:0c:9a:5c:22:ff:9f:80:5a:40:b7:bf:
96:42:31:5e:d0:a2:1d:1d:14:eb:23:61:fa:66:5b:
7d:4a:3e:67:10:af:a0:21:2a:46:7e:a6:d2:6f:fb:
0f:92:67:82:43:ca:04:ee:0a:7a:c7:62:f0:6b:ba:
40:85:fc:22:45:b9:42:ce:f2:d0:1d:d9:f7:a8:f1:
f6:f6:2c:e8:a6:0e:22:e7:b7:6f:fc:e7:10:33:95:
24:e1:39:e0:b8:52:76:18:7b:cc:d2:04:05:cc:da:
6f:6e:49:b2:20:c8:d3:d2:4d:7d:de:78:e1:cc:a0:
1e:e1:1d:32:64:21:bc:2d:9c:82:66:12:a9:8c:2f:
8c:bb:f7:e2:cc:30:f9:a7:82:4c:ec:b8:45:78:14:
f0:81:8c:7b:2c:c7:0e:a6:de:ab:3b:9e:69:9f:53:
6b:08:97:c2:c9:ee:6a:46:fa:ea:35:e2:cb:ce:f6:
7b:ec:fd:ca:0d:ce:c8:82:c2:ab:e9:30:ff:b7:b9:
6a:ec:82:5d:8d:01:dc:a3:ad:6f:63:02:f1:01:99:
66:b9:c9:2d:b2:5d:e1:72:92:92:65:a4:59:8c:3d:
61:e8:3d:af:66:13:f8:1a:d4:91:95:c0:f3:29:b7:
f4:58:f2:6b:a8:03:5f:ae:73:63:1f:70:e1:85:2e:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:B8:62:C8:62:51:D9:DF:90:5B:B9:56:D7:8F:BF:3D:01:F0:03
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/InC4YshiUdnfkFu5VtePvz0B8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.0.0/22
37.221.104.0/22
45.8.152.0/22
45.14.4.0/22
45.93.232.0/22
45.131.188.0/22
45.152.172.0/22
81.92.196.0/22
81.92.220.0/22
85.30.128.0/18
92.39.32.0/20
94.46.136.0/22
94.46.240.0/22
128.127.184.0/21
141.98.236.0/22
155.137.24.0/21
178.236.65.48/29
178.236.73.80/29
178.236.73.112/29
178.236.73.128/29
178.236.73.160/29
178.236.73.176/29
178.236.73.200/29
178.236.73.224/29
178.236.74.88/29
178.255.112.0/22
185.4.8.0/22
185.121.44.0/22
185.176.28.0/22
185.186.32.0/22
185.197.224.0/22
185.216.152.0/22
185.223.236.0/22
185.240.208.0/22
185.247.236.0/22
188.66.48.0/22
193.221.93.0/24
193.221.120.0/24
193.221.123.0/24
193.221.219.0/24
195.210.52.0/23
IPv6:
2a02:80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:31:ef:0c:a8:90:ea:d6:5a:b1:58:8a:bb:b2:cc:f8:b1:0d:
b8:6c:af:20:d7:d6:ae:88:25:1a:b6:06:77:ff:15:1b:af:58:
cf:2d:fd:cb:89:58:cb:6d:46:51:37:9e:dd:09:2d:52:17:b8:
d7:7b:95:31:c1:63:b3:78:27:b7:bd:c8:32:7b:11:df:cc:31:
46:49:eb:a3:60:3c:26:ca:75:f3:3d:49:8a:35:11:9c:9f:ef:
32:0a:c3:63:80:70:49:44:35:b6:1a:3d:70:42:1e:ba:b9:aa:
6b:4d:66:07:5d:93:57:bb:6a:4b:f8:34:dd:d7:c6:5e:8d:9c:
eb:39:fd:95:45:9c:24:0b:4a:b5:eb:50:a9:df:fc:05:9b:ca:
ac:a5:93:63:07:70:d7:1b:c9:d1:86:8e:35:ad:10:90:c7:3f:
a9:3e:0c:8a:a7:77:83:07:7a:5d:43:6d:68:36:be:8f:c6:da:
5f:88:bd:84:0a:22:3e:f1:0d:03:0b:3e:dc:e8:f5:ca:4f:b4:
6b:a5:4e:16:0e:42:1f:29:af:91:4d:0a:38:e6:fd:5c:d8:94:
f3:7c:e4:da:dd:6c:de:a5:8c:4b:53:16:df:5e:84:99:66:41:
c0:f8:5d:8c:92:ee:b5:51:30:cd:12:60:7d:5d:b3:24:cb:04:
b6:75:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:01:23 2025 by rpki-client