Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/udpDVmRl2vWtmXLi9ZwuaRV9KbI.roa
File: udpDVmRl2vWtmXLi9ZwuaRV9KbI.roa (raw, json)
Hash identifier: pE1pl1hey8Xmv1HDAWOMB30meqRS9oSOEPb6ipRzvHs=
Subject key identifier: B9:DA:43:56:64:65:DA:F5:AD:99:72:E2:F5:9C:2E:69:15:7D:29:B2
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 01856C1CAC4C83435AB613CD7697A9D55F85
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/udpDVmRl2vWtmXLi9ZwuaRV9KbI.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1836
IP address blocks: 193.73.120.0/23 maxlen: 24
193.73.124.0/24 maxlen: 24
193.73.123.0/24 maxlen: 24
193.73.128.0/18 maxlen: 19
193.73.126.0/23 maxlen: 24
81.6.48.0/20 maxlen: 21
80.86.192.0/20 maxlen: 21
146.228.64.0/24 maxlen: 24
193.73.80.0/20 maxlen: 20
81.6.0.0/19 maxlen: 20
193.73.96.0/21 maxlen: 21
193.73.96.0/22 maxlen: 22
195.130.160.0/19 maxlen: 20
193.73.104.0/23 maxlen: 24
193.73.100.0/22 maxlen: 22
193.73.112.0/24 maxlen: 24
193.73.108.0/22 maxlen: 23
193.73.115.0/24 maxlen: 24
193.73.116.0/22 maxlen: 23
193.73.232.0/22 maxlen: 23
193.73.240.0/23 maxlen: 24
193.73.239.0/24 maxlen: 24
193.73.236.0/23 maxlen: 24
193.73.244.0/22 maxlen: 23
193.73.252.0/22 maxlen: 23
193.73.248.0/23 maxlen: 24
193.73.192.0/20 maxlen: 21
193.73.212.0/22 maxlen: 23
193.73.209.0/24 maxlen: 24
193.73.210.0/24 maxlen: 24
193.73.216.0/21 maxlen: 22
193.73.224.0/21 maxlen: 22
193.72.164.0/23 maxlen: 24
193.72.160.0/22 maxlen: 23
193.72.168.0/21 maxlen: 22
193.72.167.0/24 maxlen: 24
193.72.176.0/21 maxlen: 22
193.72.184.0/23 maxlen: 24
193.72.192.0/20 maxlen: 21
80.254.160.0/19 maxlen: 20
193.72.187.0/24 maxlen: 24
193.72.188.0/22 maxlen: 23
81.221.0.0/16 maxlen: 17
193.72.208.0/21 maxlen: 22
193.72.128.0/20 maxlen: 21
195.49.0.0/17 maxlen: 18
193.72.152.0/21 maxlen: 22
193.72.148.0/22 maxlen: 23
195.49.6.0/24 maxlen: 24
146.228.0.0/16 maxlen: 17
194.191.0.0/16 maxlen: 17
193.73.64.0/19 maxlen: 20
193.72.218.0/23 maxlen: 24
193.72.217.0/24 maxlen: 24
193.72.224.0/19 maxlen: 20
195.49.78.0/24 maxlen: 24
193.72.220.0/22 maxlen: 23
195.49.79.0/24 maxlen: 24
212.59.128.0/18 maxlen: 19
193.73.0.0/18 maxlen: 19
195.48.0.0/16 maxlen: 17
193.72.64.0/21 maxlen: 21
193.193.128.0/19 maxlen: 20
193.72.78.0/24 maxlen: 24
193.72.76.0/23 maxlen: 23
193.72.72.0/22 maxlen: 22
193.72.84.0/22 maxlen: 23
193.72.81.0/24 maxlen: 24
193.72.82.0/23 maxlen: 24
193.72.88.0/21 maxlen: 22
193.72.96.0/19 maxlen: 20
193.72.0.0/18 maxlen: 19
80.253.80.0/21 maxlen: 22
82.195.224.0/19 maxlen: 20
2001:1b50::/29 maxlen: 29
2a01:2a8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ac:4c:83:43:5a:b6:13:cd:76:97:a9:d5:5f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9da43566465daf5ad9972e2f59c2e69157d29b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:98:40:1a:8c:d1:fe:19:e6:5f:20:f2:7c:
81:d3:77:45:39:13:06:2c:f7:bd:b0:c2:c5:fc:69:
39:57:24:b1:2b:99:04:1c:24:5c:d1:6f:5e:dd:fb:
a3:5a:12:6d:b7:04:5c:3c:a7:ec:20:0b:bf:b9:c4:
e2:33:09:51:25:e5:e2:ce:d8:cd:e0:0d:e3:cc:96:
a6:5f:bd:5d:be:34:81:b0:fd:83:37:b3:01:b3:5a:
a8:e0:9e:be:15:3b:8c:0e:fd:68:4f:dd:5c:ab:47:
f6:92:8b:07:cd:0f:e7:f3:9a:b5:63:a8:69:f3:6f:
7b:d0:8a:66:e6:59:23:8f:ff:a8:aa:e7:f9:06:8f:
6d:6d:51:ae:80:10:40:09:08:a9:13:53:57:52:c6:
e7:51:5c:4d:3e:0e:83:ca:18:de:ca:33:ba:b0:53:
07:c4:9d:a9:17:f3:9d:54:15:0b:89:94:24:41:bc:
17:aa:3f:ad:26:3e:59:c0:cd:d2:5b:d7:4d:cb:e5:
10:08:50:00:e8:66:40:f4:5a:f5:40:c0:6f:3d:66:
e4:05:ab:db:e1:7f:b6:02:93:b6:a8:71:1b:f3:c0:
33:07:04:60:ba:92:6a:5c:fe:27:56:3d:9f:84:8d:
a9:c0:36:10:14:96:3e:5f:03:a0:47:1a:94:68:b9:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:43:56:64:65:DA:F5:AD:99:72:E2:F5:9C:2E:69:15:7D:29:B2
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/udpDVmRl2vWtmXLi9ZwuaRV9KbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
Signature Algorithm: sha256WithRSAEncryption
80:65:bf:17:79:b3:e2:64:3a:1d:da:99:af:30:43:55:ca:f9:
3e:c4:50:33:f0:a6:6e:e3:cf:4e:12:57:80:b0:80:e1:cd:71:
e5:8d:ad:af:8c:b0:47:1c:96:db:53:f1:63:c0:b5:22:79:04:
2c:6a:5c:14:d9:df:62:37:0d:eb:33:d0:fd:b3:5e:da:6d:29:
8a:36:2c:0c:b4:8a:f2:b0:73:bc:ca:4d:2b:bb:59:e8:25:f9:
0c:ef:4c:8b:49:db:1a:41:8b:28:7b:7d:91:bb:53:b9:f1:97:
6b:ed:28:34:e0:e7:7e:45:80:40:44:57:3b:48:b7:c3:ec:e3:
f4:18:a3:e1:6a:3c:a7:26:60:61:84:40:1f:1e:43:f3:2d:5f:
fe:f7:ea:59:89:65:02:26:c5:09:53:58:4b:67:18:c4:b1:f6:
9d:57:11:93:8d:55:42:2a:75:3c:0c:ca:0a:95:21:bb:d1:7d:
87:4f:c7:b9:27:0e:c3:e6:ed:b9:98:53:f0:be:18:60:bd:ce:
19:1f:a7:6c:65:90:59:ff:4f:8b:ae:b7:9b:7c:f4:ca:4d:d1:
f5:e8:8a:cd:6c:01:27:a8:90:a7:62:89:f8:85:69:d1:12:af:
4a:94:5c:16:99:46:cd:9c:d6:e3:ff:69:e2:af:d3:a4:d4:32:
c9:0b:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:10 2025 by rpki-client