Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/N8iuEKXUMp46h76-LrfKhWuvdmE.roa
File: N8iuEKXUMp46h76-LrfKhWuvdmE.roa (raw, json)
Hash identifier: fYbOKjMXE68RBepYS1+5el9wyn2teN1+en3UQ4GwxvQ=
Subject key identifier: 37:C8:AE:10:A5:D4:32:9E:3A:87:BE:BE:2E:B7:CA:85:6B:AF:76:61
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1468A5A2
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/N8iuEKXUMp46h76-LrfKhWuvdmE.roa
Signing time: Sat 01 Jan 2022 03:58:55 +0000
ROA not before: Sat 01 Jan 2022 03:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8315
IP address blocks: 162.248.199.0/24 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/21 maxlen: 24
185.113.224.0/22 maxlen: 24
5.100.224.0/21 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
79.99.184.0/21 maxlen: 24
185.113.52.0/22 maxlen: 24
89.18.160.0/19 maxlen: 24
162.251.32.0/21 maxlen: 24
185.12.132.0/22 maxlen: 24
178.251.192.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
213.214.96.0/19 maxlen: 24
83.98.192.0/19 maxlen: 24
194.105.128.0/23 maxlen: 24
213.247.32.0/19 maxlen: 24
91.216.113.0/24 maxlen: 24
193.34.150.0/23 maxlen: 24
91.216.141.0/24 maxlen: 24
85.92.128.0/19 maxlen: 24
185.38.156.0/22 maxlen: 24
91.200.51.0/24 maxlen: 24
91.200.48.0/23 maxlen: 24
85.158.160.0/21 maxlen: 24
134.0.88.0/22 maxlen: 24
134.0.92.0/23 maxlen: 24
213.189.0.0/19 maxlen: 24
185.77.120.0/22 maxlen: 24
194.165.34.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
185.74.77.0/24 maxlen: 24
185.74.76.0/24 maxlen: 24
89.30.128.0/17 maxlen: 24
83.98.128.0/18 maxlen: 24
85.222.192.0/21 maxlen: 24
93.175.176.0/20 maxlen: 24
89.30.224.0/22 maxlen: 24
185.30.236.0/22 maxlen: 24
2a00:1bd8::/32 maxlen: 48
2a02:2858::/29 maxlen: 48
2a02:20b0::/32 maxlen: 48
2001:4198::/32 maxlen: 48
2a02:2858:500::/40 maxlen: 40
2001:16f8::/32 maxlen: 48
2a02:20b2::/32 maxlen: 48
2a02:20b1::/32 maxlen: 48
2a03:5500::/31 maxlen: 48
2a01:40e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342402466 (0x1468a5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37c8ae10a5d4329e3a87bebe2eb7ca856baf7661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:d8:f2:a0:ae:18:de:ad:bf:65:92:27:04:
da:46:bf:7e:b5:05:8c:d0:16:b6:3c:06:7d:33:35:
b3:4a:75:f6:af:db:80:dd:f8:ac:b7:43:88:86:e1:
c8:19:12:0b:f1:10:c5:62:8d:32:3d:ef:38:50:1a:
f5:fb:23:e4:86:da:39:f9:d3:72:0a:69:0c:cb:77:
4b:1f:c4:4e:e8:40:b6:ab:5d:de:bf:a3:12:b7:8b:
38:50:b5:57:25:b7:51:3a:87:09:b8:78:15:54:0c:
20:b7:2b:3f:57:9c:fa:b1:ad:77:67:be:70:03:14:
b1:6d:1e:8d:93:31:ff:f4:66:b0:5f:31:22:1d:f9:
b1:c0:41:16:8d:44:61:c4:66:c5:70:ea:1d:05:65:
79:05:2a:73:a2:55:82:a8:2e:24:ad:13:61:af:6a:
ce:b2:66:5b:86:6f:d9:e5:65:74:08:5e:a4:78:63:
d6:3a:2e:db:c2:03:8b:1a:17:88:27:61:31:e1:4c:
a4:0f:7d:77:60:94:b0:81:46:11:d6:ef:6a:5f:37:
ee:f5:9d:78:e3:1f:9c:c0:0e:73:11:a3:cf:73:26:
62:25:67:1b:30:f3:7f:de:69:2d:73:40:48:8e:39:
80:de:39:cf:27:1d:8a:a4:e1:87:d4:e7:16:2d:1a:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C8:AE:10:A5:D4:32:9E:3A:87:BE:BE:2E:B7:CA:85:6B:AF:76:61
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/N8iuEKXUMp46h76-LrfKhWuvdmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.223.255
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0/17
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0-134.0.93.255
162.248.199.0/24
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:16f8::/32
2001:4198::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2858::/29
2a03:5500::/31
Signature Algorithm: sha256WithRSAEncryption
03:86:c5:2a:07:af:d1:d3:a7:26:b1:ca:9b:c4:3f:69:2e:90:
a0:9c:06:66:13:6e:7b:16:ee:33:3c:69:30:b6:18:63:d7:9e:
16:42:16:57:32:4c:12:2d:84:bb:1f:7c:74:b8:ae:c1:d5:c0:
37:4f:cf:0a:de:6b:a0:67:c2:ce:c8:c7:bc:63:9f:94:7d:66:
70:ed:a8:7b:b7:15:dd:c8:bb:04:6b:78:8c:13:71:47:96:b8:
d3:4e:64:ff:7a:df:73:fe:cf:42:32:f2:07:76:bf:58:f0:b1:
84:72:7a:01:de:24:42:65:31:ac:39:e8:76:b8:ac:14:1e:6f:
41:b6:32:13:91:7c:b4:50:d0:7e:f3:33:3d:5c:de:0a:d8:3c:
34:1b:4b:1c:51:58:74:23:e1:de:1a:41:7d:1f:c8:ef:d4:22:
5c:71:0e:22:f7:2d:9b:89:75:30:69:88:40:54:26:57:a9:88:
c3:25:e7:b4:a7:99:80:54:e5:ad:dc:b4:4d:a0:00:47:78:fc:
c1:fb:c3:43:26:8b:39:71:dc:bb:4d:e8:39:41:fd:db:c3:cb:
bd:4e:70:f5:da:5c:34:a7:fc:d3:d5:16:76:f2:6e:4f:d1:0b:
9e:74:a6:d9:ae:11:a0:15:83:d4:68:19:ee:51:d4:03:ca:ca:
d1:2b:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org