Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/XzjOeDAX6BBmigtOxOr0yvUwewA.roa
File: XzjOeDAX6BBmigtOxOr0yvUwewA.roa (raw, json)
Hash identifier: 92RHPm0FsnhYOmh6SxZQwvhD1Lv5KQoNE9f2CfdGI8E=
Subject key identifier: 5F:38:CE:78:30:17:E8:10:66:8A:0B:4E:C4:EA:F4:CA:F5:30:7B:00
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 0186A1A9907AA968D260A0CA743D0853C68C
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/XzjOeDAX6BBmigtOxOr0yvUwewA.roa
Signing time: Thu 02 Mar 2023 09:31:29 +0000
ROA not before: Thu 02 Mar 2023 09:31:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8315
IP address blocks: 162.248.196.0/22 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/21 maxlen: 24
185.113.224.0/22 maxlen: 24
5.100.224.0/21 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
89.18.188.0/22 maxlen: 24
79.99.184.0/21 maxlen: 24
185.113.52.0/22 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.160.0/19 maxlen: 24
89.18.168.0/21 maxlen: 24
162.251.32.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
185.12.132.0/22 maxlen: 24
178.251.192.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
213.214.96.0/19 maxlen: 24
83.98.192.0/21 maxlen: 24
194.105.128.0/23 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
213.247.32.0/19 maxlen: 24
91.216.113.0/24 maxlen: 24
193.34.150.0/23 maxlen: 24
91.216.141.0/24 maxlen: 24
85.92.128.0/19 maxlen: 24
185.38.156.0/22 maxlen: 24
85.92.128.0/20 maxlen: 24
85.92.144.0/22 maxlen: 24
85.92.152.0/21 maxlen: 24
91.200.51.0/24 maxlen: 24
91.200.48.0/23 maxlen: 24
85.158.160.0/22 maxlen: 24
85.158.160.0/21 maxlen: 24
85.158.164.0/22 maxlen: 24
134.0.88.0/22 maxlen: 24
134.0.92.0/23 maxlen: 24
213.189.0.0/19 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.8.0/22 maxlen: 24
185.77.120.0/22 maxlen: 24
194.165.34.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
185.74.77.0/24 maxlen: 24
185.74.76.0/24 maxlen: 24
89.30.128.0/18 maxlen: 24
89.30.240.0/21 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.192.0/19 maxlen: 24
213.189.16.0/20 maxlen: 24
85.222.192.0/21 maxlen: 24
93.175.176.0/20 maxlen: 24
89.30.224.0/22 maxlen: 24
89.30.224.0/21 maxlen: 24
185.30.236.0/22 maxlen: 24
2a00:1bd8::/32 maxlen: 48
2a02:2858::/29 maxlen: 48
2a02:20b0::/32 maxlen: 48
2001:4198::/32 maxlen: 48
2a02:2858:500::/40 maxlen: 40
2001:16f8::/32 maxlen: 48
2a02:20b2::/32 maxlen: 48
2a02:20b1::/32 maxlen: 48
2a03:5500::/31 maxlen: 48
2a01:40e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:a9:90:7a:a9:68:d2:60:a0:ca:74:3d:08:53:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Mar 2 09:31:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f38ce783017e810668a0b4ec4eaf4caf5307b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:43:51:dd:2d:28:f7:90:b8:df:f4:f2:9e:
16:00:63:34:f6:f1:68:d4:39:3a:a3:ae:01:21:e7:
4a:19:78:f8:67:77:6d:74:45:60:c9:8e:ea:14:b5:
84:12:e6:ab:10:7e:d5:f9:6a:05:64:ff:c7:1d:a4:
14:82:41:50:c9:8e:99:c9:04:52:d5:77:4a:e3:db:
40:9a:5b:88:03:83:0b:6e:35:44:ff:b6:e1:bf:e9:
df:fd:82:9e:08:22:99:4b:ee:bf:8e:fd:49:a7:31:
b6:1f:4a:fe:d7:ec:ff:76:5d:b9:c9:88:4b:df:38:
14:95:20:44:f4:8b:a9:fb:2c:cf:ce:0d:09:c1:29:
db:4d:58:9c:f3:0f:1a:09:a6:c7:e1:48:a7:b7:99:
da:d4:fa:8f:b0:9e:50:47:d0:23:f9:63:78:a1:b1:
67:e8:d6:33:88:24:d9:4c:22:86:37:68:2e:35:a1:
24:65:a8:71:04:44:00:8d:82:b3:0e:ca:39:eb:1f:
76:6e:1a:1b:ba:e3:ff:a1:db:22:44:3a:ec:96:9d:
7a:2c:32:67:42:f1:8c:b1:dc:f7:67:33:04:52:78:
63:13:7f:25:a9:f6:d0:0e:20:38:67:e9:c8:a1:24:
c9:a3:1d:0e:76:4d:a1:89:33:78:45:00:79:23:e3:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:CE:78:30:17:E8:10:66:8A:0B:4E:C4:EA:F4:CA:F5:30:7B:00
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/XzjOeDAX6BBmigtOxOr0yvUwewA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.203.255
83.98.208.0/20
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0-89.30.231.255
89.30.240.0/21
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0-134.0.93.255
162.248.196.0/22
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:16f8::/32
2001:4198::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2858::/29
2a03:5500::/31
Signature Algorithm: sha256WithRSAEncryption
3b:3d:00:f3:fd:a5:5e:e2:f2:27:59:21:23:ae:fe:3a:18:84:
2f:cd:fb:4e:d6:c2:56:c8:ba:5e:34:64:c2:fc:36:61:47:56:
8a:5a:bc:00:32:fa:dc:76:fa:ee:f2:ac:ea:a6:11:b0:71:8d:
d5:42:cb:6a:5c:73:61:28:3f:26:80:62:14:8a:73:b0:bb:e1:
59:ce:80:87:d0:13:3b:09:43:f0:c4:15:e4:2a:54:dd:f8:be:
8a:1f:4a:c0:5a:d9:ec:aa:ca:b4:77:e1:ba:25:80:02:a2:a0:
e1:b6:34:67:7c:1f:10:7c:7a:15:fa:5b:79:ba:42:38:5a:a5:
67:78:a3:4b:aa:c5:7b:89:26:98:ea:2e:db:f9:87:63:17:3d:
1b:71:bc:67:c8:a2:a4:f6:81:53:d9:74:45:2d:5f:f0:db:0d:
69:16:58:5e:51:09:2f:f3:13:e1:eb:e8:f9:f3:5c:c3:d7:62:
37:5a:80:c9:b6:fe:a6:6f:e8:d1:af:b7:ce:34:29:bc:21:4b:
c0:19:fc:a6:a5:7f:86:de:4f:cc:27:35:c9:99:6f:87:d3:32:
c6:34:09:02:96:2c:8b:b6:59:e5:ec:b1:ab:f1:16:a5:62:f0:
b7:e8:81:ef:3b:41:cc:92:6f:6a:12:fb:de:5d:55:26:41:97:
19:39:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org