Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/sXfB_v3RgrHWK-okhwRzrSyVdSg.roa
File: sXfB_v3RgrHWK-okhwRzrSyVdSg.roa (raw, json)
Hash identifier: sew659lQtqf3qwcvt7P5KXdMXGThi5p7CCpDajlGaQQ=
Subject key identifier: B1:77:C1:FE:FD:D1:82:B1:D6:2B:EA:24:87:04:73:AD:2C:95:75:28
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 15353BD8
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/sXfB_v3RgrHWK-okhwRzrSyVdSg.roa
Signing time: Mon 21 Mar 2022 09:16:49 +0000
ROA not before: Mon 21 Mar 2022 09:16:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8315
IP address blocks: 162.248.199.0/24 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/21 maxlen: 24
185.113.224.0/22 maxlen: 24
5.100.224.0/21 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
89.18.188.0/22 maxlen: 24
79.99.184.0/21 maxlen: 24
185.113.52.0/22 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.160.0/19 maxlen: 24
89.18.168.0/21 maxlen: 24
162.251.32.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
185.12.132.0/22 maxlen: 24
178.251.192.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
213.214.96.0/19 maxlen: 24
83.98.192.0/21 maxlen: 24
194.105.128.0/23 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
213.247.32.0/19 maxlen: 24
91.216.113.0/24 maxlen: 24
193.34.150.0/23 maxlen: 24
91.216.141.0/24 maxlen: 24
85.92.128.0/19 maxlen: 24
185.38.156.0/22 maxlen: 24
85.92.128.0/20 maxlen: 24
85.92.144.0/22 maxlen: 24
85.92.152.0/21 maxlen: 24
91.200.51.0/24 maxlen: 24
91.200.48.0/23 maxlen: 24
85.158.160.0/21 maxlen: 24
134.0.88.0/22 maxlen: 24
134.0.92.0/23 maxlen: 24
213.189.0.0/19 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.8.0/22 maxlen: 24
185.77.120.0/22 maxlen: 24
194.165.34.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
89.30.128.0/17 maxlen: 24
89.30.128.0/18 maxlen: 24
185.74.77.0/24 maxlen: 24
185.74.76.0/24 maxlen: 24
89.30.240.0/21 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.192.0/19 maxlen: 24
213.189.16.0/20 maxlen: 24
85.222.192.0/21 maxlen: 24
93.175.176.0/20 maxlen: 24
89.30.224.0/22 maxlen: 24
89.30.224.0/21 maxlen: 24
185.30.236.0/22 maxlen: 24
2a00:1bd8::/32 maxlen: 48
2a02:2858::/29 maxlen: 48
2a02:20b0::/32 maxlen: 48
2001:4198::/32 maxlen: 48
2a02:2858:500::/40 maxlen: 40
2001:16f8::/32 maxlen: 48
2a02:20b2::/32 maxlen: 48
2a02:20b1::/32 maxlen: 48
2a03:5500::/31 maxlen: 48
2a01:40e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355810264 (0x15353bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Mar 21 09:16:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b177c1fefdd182b1d62bea24870473ad2c957528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:46:83:57:0a:8d:7d:22:e9:f2:f0:f0:7d:
9d:76:ad:93:4a:39:97:06:16:01:8c:4b:c5:62:ac:
86:42:a3:b9:4c:20:b8:c7:96:65:9b:64:e5:46:92:
90:5e:16:d5:14:b0:6d:42:00:e0:a2:f5:78:3c:75:
8c:ea:81:5c:dd:71:e3:3d:c0:f4:27:87:ea:8d:f6:
04:60:76:40:65:76:cb:13:f1:78:53:9d:04:44:aa:
9a:bb:08:fb:19:9d:21:ec:75:41:ff:7d:2a:b5:2f:
ba:10:94:5e:ca:5f:5d:70:39:23:2a:97:b0:a5:68:
64:21:b8:6c:30:5f:c8:88:9c:8b:49:b6:99:71:5a:
75:ae:d9:99:00:83:e8:f6:3b:80:9e:59:69:9c:d7:
06:6e:7f:a6:1e:8d:4b:79:5c:8b:ed:1c:5a:a6:0e:
65:d5:23:de:ff:2e:00:a5:10:6d:6e:28:19:fd:00:
e3:e1:a3:cd:22:9e:43:b0:7b:da:af:53:dc:4b:ce:
f1:0f:f5:40:6b:17:65:6f:9c:36:b1:bb:12:a2:7f:
58:7b:74:80:24:52:c2:cf:df:e5:c9:fd:df:dd:5e:
1f:ad:6f:8c:93:26:47:15:93:b4:cd:74:32:a4:79:
86:94:44:6a:49:ba:97:77:dd:f4:03:61:b4:d8:6c:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:C1:FE:FD:D1:82:B1:D6:2B:EA:24:87:04:73:AD:2C:95:75:28
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/sXfB_v3RgrHWK-okhwRzrSyVdSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0-83.98.203.255
83.98.208.0/20
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/19
89.30.128.0/17
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0-134.0.93.255
162.248.199.0/24
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
213.171.128.0/19
213.189.0.0/19
213.214.96.0/19
213.247.32.0/19
217.195.112.0/20
IPv6:
2001:16f8::/32
2001:4198::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2858::/29
2a03:5500::/31
Signature Algorithm: sha256WithRSAEncryption
59:29:65:ee:2d:1e:e3:26:64:8d:fe:3d:b0:8a:c0:d9:b1:0b:
f8:99:b0:d6:a6:8f:d4:aa:12:ac:64:ff:54:e2:a0:a9:a7:8d:
cf:82:ff:04:8b:4e:48:3d:52:f8:9c:15:62:ec:a5:80:f7:90:
4c:f0:3a:ae:8c:53:f0:4e:6e:3a:6e:82:d0:46:23:a3:5a:c5:
ed:0d:f7:3e:8f:67:0a:16:fd:7a:41:0d:3b:7f:f6:ad:df:f9:
84:43:3a:d9:b8:0a:7b:7e:11:c9:af:29:a0:6a:27:bf:0f:51:
31:9c:ef:69:da:43:b8:e2:c7:7a:7f:65:8b:cf:6a:b6:db:ca:
b8:1e:c4:4a:48:67:cb:70:eb:fc:f0:23:5a:06:68:d5:11:ad:
f1:5a:1e:f9:34:6d:de:ca:ca:80:e5:d1:ed:d7:4e:6d:08:25:
92:4b:0c:ce:d8:13:42:7e:04:4a:84:2e:5d:64:81:ff:2e:2a:
62:c3:d0:9c:89:c6:f1:0a:26:d7:56:4f:bb:10:0a:b3:8a:ab:
1b:5d:d3:e1:b2:a4:cc:b9:2b:1d:db:6a:3f:81:1a:3e:9f:96:
5d:c9:83:37:34:b2:15:2c:3e:a9:47:ed:f7:1d:fb:56:1a:b9:
76:8b:ed:54:bb:d3:ed:48:1e:d4:63:af:d3:56:21:2f:42:37:
39:9a:d5:93
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIEFTU72DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjY0MGIwMjMxMTM3NmRjOTZlZWJmZWNhNzU1YzNiMDA2MTE0MGVjMB4XDTIyMDMy
MTA5MTY0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE3N2MxZmVmZGQx
ODJiMWQ2MmJlYTI0ODcwNDczYWQyYzk1NzUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMnRoNXCo19Iuny8PB9nXatk0o5lwYWAYxLxWKshkKjuUwg
uMeWZZtk5UaSkF4W1RSwbUIA4KL1eDx1jOqBXN1x4z3A9CeH6o32BGB2QGV2yxPx
eFOdBESqmrsI+xmdIex1Qf99KrUvuhCUXspfXXA5IyqXsKVoZCG4bDBfyIici0m2
mXFada7ZmQCD6PY7gJ5ZaZzXBm5/ph6NS3lci+0cWqYOZdUj3v8uAKUQbW4oGf0A
4+GjzSKeQ7B72q9T3EvO8Q/1QGsXZW+cNrG7EqJ/WHt0gCRSws/f5cn9391eH61v
jJMmRxWTtM10MqR5hpREakm6l3fd9ANhtNhsFVcCAwEAAaOCAzUwggMxMB0GA1Ud
DgQWBBSxd8H+/dGCsdYr6iSHBHOtLJV1KDAfBgNVHSMEGDAWgBTPZAsCMRN23Jbu
v+ynVcOwBhFA7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3oyUUxBakVUZHR5VzdyX3NwMVhEc0FZUlFPdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDBlYzc4LTdlNDQtNDllNC04NDQzLTlkYjViZTRkMGVmZi8x
L3NYZkJfdjNSZ3JIV0stb2tod1J6clN5VmRTZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDBlYzc4LTdlNDQtNDllNC04NDQzLTlkYjViZTRkMGVmZi8xL3oyUUxBakVUZHR5
VzdyX3NwMVhEc0FZUlFPdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AUkGCCsGAQUFBwEHAQH/BIIBODCCATQwge8EAgABMIHoAwQDBWTgAwQDT2O4MAwD
BAdTYoADBAJTYsgDBARTYtADBAVVXIADBANVnqADBANV3sADBAVZEqADBAdZHoAD
BAFbyDADBABbyDMDBABb2HEDBABb2I0DBARdr7ADBANexhgwDAMEA4YAWAMEAYYA
XAMEAKL4xwMEA6L7IAMEA7A+wAMEA7L7wAMEArkMhAMEArke7AMEArkmnAMEAblK
TAMEArlNeAMEArlxNAMEArlxxAMEArlx4AMEAcEilgMEAcJpgAMEAMKlIgMEBdWr
gAMEBdW9AAMEBdXWYAMEBdX3IAMEBNnDcDBABAIAAjA6AwUAIAEW+AMFACABQZgD
BQAqABvYAwUAKgFA4DAOAwUEKgIgsAMFACoCILIDBQMqAihYAwUBKgNVADANBgkq
hkiG9w0BAQsFAAOCAQEAWSll7i0e4yZkjf49sIrA2bEL+Jmw1qaP1KoSrGT/VOKg
qaeNz4L/BItOSD1S+JwVYuylgPeQTPA6roxT8E5uOm6C0EYjo1rF7Q33Po9nChb9
ekENO3/2rd/5hEM62bgKe34Rya8poGonvw9RMZzvadpDuOLHen9li89qttvKuB7E
Skhny3Dr/PAjWgZo1RGt8Voe+TRt3srKgOXR7ddObQglkksMztgTQn4ESoQuXWSB
/y4qYsPQnInG8Qom11ZPuxAKs4qrG13T4bKkzLkrHdtqP4EaPp+WXcmDNzSyFSw+
qUft9x37Vhq5dovtVLvT7Uge1GOv01YhL0I3OZrVkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org