Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Th6xnbVLfqKyhx1jrURdFwp44fo.roa
File: Th6xnbVLfqKyhx1jrURdFwp44fo.roa (raw, json)
Hash identifier: 0NLok7c3gOgZrZK1kdpqqbfA6yeWnmbN9DpJkXzhTb4=
Subject key identifier: 4E:1E:B1:9D:B5:4B:7E:A2:B2:87:1D:63:AD:44:5D:17:0A:78:E1:FA
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1526CAC5
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Th6xnbVLfqKyhx1jrURdFwp44fo.roa
Signing time: Fri 18 Mar 2022 12:45:36 +0000
ROA not before: Fri 18 Mar 2022 12:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8315
IP address blocks: 162.248.199.0/24 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/21 maxlen: 24
185.113.224.0/22 maxlen: 24
5.100.224.0/21 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
79.99.184.0/21 maxlen: 24
185.113.52.0/22 maxlen: 24
89.18.160.0/19 maxlen: 24
162.251.32.0/21 maxlen: 24
185.12.132.0/22 maxlen: 24
178.251.192.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
213.214.96.0/19 maxlen: 24
83.98.192.0/21 maxlen: 24
83.98.192.0/19 maxlen: 24
194.105.128.0/23 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
213.247.32.0/19 maxlen: 24
91.216.113.0/24 maxlen: 24
193.34.150.0/23 maxlen: 24
91.216.141.0/24 maxlen: 24
85.92.128.0/19 maxlen: 24
185.38.156.0/22 maxlen: 24
91.200.51.0/24 maxlen: 24
91.200.48.0/23 maxlen: 24
85.158.160.0/21 maxlen: 24
134.0.88.0/22 maxlen: 24
134.0.92.0/23 maxlen: 24
213.189.0.0/19 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.8.0/22 maxlen: 24
185.77.120.0/22 maxlen: 24
194.165.34.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
185.74.77.0/24 maxlen: 24
185.74.76.0/24 maxlen: 24
89.30.128.0/17 maxlen: 24
83.98.128.0/18 maxlen: 24
213.189.16.0/20 maxlen: 24
85.222.192.0/21 maxlen: 24
93.175.176.0/20 maxlen: 24
89.30.224.0/22 maxlen: 24
185.30.236.0/22 maxlen: 24
2a00:1bd8::/32 maxlen: 48
2a02:2858::/29 maxlen: 48
2a02:20b0::/32 maxlen: 48
2001:4198::/32 maxlen: 48
2a02:2858:500::/40 maxlen: 40
2001:16f8::/32 maxlen: 48
2a02:20b2::/32 maxlen: 48
2a02:20b1::/32 maxlen: 48
2a03:5500::/31 maxlen: 48
2a01:40e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354863813 (0x1526cac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Mar 18 12:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e1eb19db54b7ea2b2871d63ad445d170a78e1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:2a:df:8b:9e:d5:42:81:52:f9:0f:83:b1:
77:d4:a8:da:22:be:76:3c:a6:84:5a:c3:a0:83:1d:
5d:04:32:50:95:5b:bd:eb:cc:d7:19:aa:d4:d6:5a:
d3:6f:0a:d5:a6:fc:2c:2f:98:3b:0c:4b:d6:8a:c4:
ce:6f:4f:a9:ee:65:33:73:7e:df:2e:51:d6:e3:a2:
09:c1:93:7e:d5:fe:4a:c4:0f:e0:8f:49:ef:fc:ff:
c6:7c:9c:fb:bd:5f:f6:5c:88:58:b8:db:0e:44:2e:
53:59:15:64:1f:5f:2b:fd:fd:1f:21:c1:d0:62:68:
60:4c:de:3c:99:f5:2e:a7:51:52:2e:d2:9e:3a:5a:
9e:dc:4d:04:0d:54:00:0e:e5:e4:f3:c9:b7:99:78:
ce:c4:6a:69:44:02:b0:6a:4e:82:c6:ad:00:68:7c:
5a:29:48:16:9c:3e:5d:62:b9:8a:c7:78:04:d2:49:
cb:28:82:3a:21:9e:89:32:a0:be:7b:ab:4b:2a:68:
46:c1:1f:e2:c0:d0:0b:41:ea:c4:44:b7:de:8b:b5:
65:b8:d8:e3:7d:bf:34:02:95:67:c9:d2:52:c1:05:
88:00:8c:a4:19:94:43:61:8c:f8:53:4a:50:44:32:
50:14:0a:7d:0e:a6:ce:49:fa:89:24:dd:35:bf:2c:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1E:B1:9D:B5:4B:7E:A2:B2:87:1D:63:AD:44:5D:17:0A:78:E1:FA
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Th6xnbVLfqKyhx1jrURdFwp44fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.223.255
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0/17
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0-134.0.93.255
162.248.199.0/24
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:16f8::/32
2001:4198::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2858::/29
2a03:5500::/31
Signature Algorithm: sha256WithRSAEncryption
38:6b:c5:8c:07:5e:a4:46:bb:c8:02:b3:50:e6:22:1d:bb:64:
e8:eb:1f:76:9a:6c:01:64:37:c4:d2:39:4a:d7:e9:65:30:2e:
55:fd:8f:bf:e4:50:ea:84:e6:a5:1a:26:71:dc:e9:5a:a5:4a:
9a:ec:28:a6:87:23:ee:ec:d0:f7:c3:a3:39:71:10:5c:87:47:
00:73:1a:69:78:22:95:1a:a7:50:4b:72:40:df:10:56:57:5c:
f3:6f:0d:60:b0:bc:e6:28:06:04:1a:b4:06:62:52:03:2c:d9:
a2:ba:b0:ba:a7:41:de:db:75:73:de:53:02:66:11:75:11:28:
03:63:65:04:1e:0e:4d:10:a2:1a:6b:15:0c:0e:9c:7e:be:ae:
40:1c:e0:ec:3d:c9:19:8d:4c:d8:21:2c:ab:53:79:63:07:b3:
da:c6:16:65:d3:2b:92:d5:e0:6b:49:62:92:70:74:65:bf:c4:
1f:2e:38:48:1d:8b:51:ca:58:9a:60:29:b6:1c:07:c7:f1:b4:
0d:42:07:53:16:bd:6f:ec:42:e4:05:97:51:ee:b4:d8:43:29:
7f:84:61:78:02:18:d4:93:c7:39:f8:9b:cb:01:a1:7c:27:50:
b1:38:11:3c:b4:f9:7e:d8:6a:49:ef:f7:c5:2c:bc:5f:9c:75:
a8:61:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org