Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa
File: 9BmgjilKIBwcB7xDx0Xam3ufG7o.roa (raw, json)
Hash identifier: 8s77VCqcVY3D/PZG46OXUG5G2JU6qnTmVOs1u51adlY=
Subject key identifier: F4:19:A0:8E:29:4A:20:1C:1C:07:BC:43:C7:45:DA:9B:7B:9F:1B:BA
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 0186A1C999A8A092CB1794080C7E89D703BF
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa
Signing time: Thu 02 Mar 2023 10:06:29 +0000
ROA not before: Thu 02 Mar 2023 10:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8315
IP address blocks: 162.248.196.0/22 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/21 maxlen: 24
185.113.224.0/22 maxlen: 24
5.100.224.0/21 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
89.18.188.0/22 maxlen: 24
79.99.184.0/21 maxlen: 24
185.113.52.0/22 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.160.0/19 maxlen: 24
89.18.168.0/21 maxlen: 24
162.251.32.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
185.12.132.0/22 maxlen: 24
178.251.192.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
213.214.96.0/19 maxlen: 24
83.98.192.0/21 maxlen: 24
194.105.128.0/23 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
213.247.32.0/19 maxlen: 24
91.216.113.0/24 maxlen: 24
193.34.150.0/23 maxlen: 24
91.216.141.0/24 maxlen: 24
85.92.128.0/19 maxlen: 24
185.38.156.0/22 maxlen: 24
85.92.128.0/20 maxlen: 24
85.92.144.0/22 maxlen: 24
85.92.152.0/21 maxlen: 24
91.200.51.0/24 maxlen: 24
91.200.48.0/23 maxlen: 24
85.158.160.0/21 maxlen: 24
85.158.160.0/22 maxlen: 24
85.158.164.0/22 maxlen: 24
134.0.88.0/22 maxlen: 24
134.0.88.0/21 maxlen: 24
134.0.92.0/23 maxlen: 24
213.189.0.0/19 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.8.0/22 maxlen: 24
185.77.120.0/22 maxlen: 24
194.165.34.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
89.30.128.0/18 maxlen: 24
185.74.77.0/24 maxlen: 24
185.74.76.0/24 maxlen: 24
89.30.240.0/21 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.192.0/19 maxlen: 24
213.189.16.0/20 maxlen: 24
85.222.192.0/21 maxlen: 24
93.175.176.0/20 maxlen: 24
89.30.224.0/22 maxlen: 24
89.30.224.0/21 maxlen: 24
185.30.236.0/22 maxlen: 24
2a00:1bd8::/32 maxlen: 48
2a02:2858::/29 maxlen: 48
2a02:20b0::/32 maxlen: 48
2001:4198::/32 maxlen: 48
2a02:2858:500::/40 maxlen: 40
2001:16f8::/32 maxlen: 48
2a02:20b2::/32 maxlen: 48
2a02:20b1::/32 maxlen: 48
2a03:5500::/31 maxlen: 48
2a01:40e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:c9:99:a8:a0:92:cb:17:94:08:0c:7e:89:d7:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Mar 2 10:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f419a08e294a201c1c07bc43c745da9b7b9f1bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:70:df:3e:1d:52:d8:44:8b:3f:94:6a:80:
69:9c:83:7e:04:c3:ff:d2:60:c4:a8:e8:47:d3:d8:
12:81:64:49:ef:26:d0:06:fd:94:7d:e4:f5:97:a6:
3c:a0:31:b2:db:30:69:bd:19:f4:4e:df:cb:95:48:
cd:c6:2f:f2:37:86:a0:25:b1:0f:3b:e1:c3:3f:de:
98:b9:c3:df:d5:f1:b4:a3:0c:63:56:b8:fa:4b:da:
a6:03:4f:7b:69:b6:c5:18:c7:bc:2d:cc:d7:f3:94:
ea:74:6a:4f:c9:17:69:2a:c6:d8:d1:46:97:61:69:
7c:f4:80:a0:45:fe:01:52:a0:32:d1:17:c1:04:a9:
5d:a7:21:80:a3:76:ca:0b:72:71:27:e6:55:55:fe:
d8:63:77:02:22:f5:d6:66:ee:60:7e:d9:94:e7:37:
57:e1:7b:6a:20:64:d6:a5:b4:99:b9:4a:66:e9:e5:
5e:c8:8a:b7:01:b3:a0:d1:57:ab:c6:b0:d9:c2:fb:
ad:9b:a7:94:6c:7d:6d:56:16:02:c2:47:e4:ab:d3:
8d:29:0b:b5:bb:d4:70:cb:69:bf:6e:0b:f5:60:62:
10:12:0a:4e:1b:08:94:13:f0:3a:f1:2f:e7:29:62:
84:ba:1c:3d:bc:13:87:2b:d2:42:0e:ce:81:87:79:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:A0:8E:29:4A:20:1C:1C:07:BC:43:C7:45:DA:9B:7B:9F:1B:BA
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.203.255
83.98.208.0/20
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0-89.30.231.255
89.30.240.0/21
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0/21
162.248.196.0/22
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:16f8::/32
2001:4198::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2858::/29
2a03:5500::/31
Signature Algorithm: sha256WithRSAEncryption
56:e5:af:ce:e9:0e:86:9e:41:99:d6:a9:fd:0f:78:de:c5:6a:
af:13:6b:7e:de:71:e0:49:80:98:e3:80:d2:bc:2d:3e:34:be:
6e:51:c3:68:6e:d1:bd:8b:49:6f:65:9b:c2:df:20:72:a0:0e:
4a:4e:b1:e1:84:83:53:4e:8c:22:9d:fa:0d:ed:ac:e8:31:d6:
e3:34:6e:c7:68:76:9c:ed:b7:b3:52:ea:ce:a2:ed:92:d8:3f:
d7:1d:19:de:ed:17:1c:d4:e4:41:38:e0:46:ab:1f:23:b7:16:
86:64:83:c3:f7:f3:b0:2d:67:42:b9:bf:f9:f9:41:2c:3d:4f:
be:98:4f:7e:af:bc:a8:57:06:fb:b4:90:ee:0c:6b:06:03:79:
11:28:65:9d:f7:3b:1e:3f:55:30:24:4d:98:12:99:9b:4a:00:
3d:60:34:9c:ee:27:0f:4b:b6:79:53:76:d7:bd:5d:eb:f8:49:
c9:fb:a0:14:f5:a2:6d:55:42:96:54:38:95:98:7b:b5:a1:13:
18:64:92:87:61:fd:ed:11:2b:b3:0a:f4:e4:f3:34:32:77:f8:
40:89:48:8d:11:35:49:28:76:20:42:31:76:53:f9:41:37:68:
68:ba:e9:80:98:79:fe:12:99:c7:b7:e9:2a:84:b9:f9:4e:4e:
a3:4a:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org