Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8eRSPi4ZGN5PZEkCFFym2-fU8U4.roa
File: 8eRSPi4ZGN5PZEkCFFym2-fU8U4.roa (raw, json)
Hash identifier: xd6vWpJTo/8ngGWDjxjJH/uVaX7TKbxjvFa0Wcr8IWk=
Subject key identifier: F1:E4:52:3E:2E:19:18:DE:4F:64:49:02:14:5C:A6:DB:E7:D4:F1:4E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42476B994D795920C87953741C688
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8eRSPi4ZGN5PZEkCFFym2-fU8U4.roa
Signing time: Thu 02 Jan 2025 15:48:24 +0000
ROA not before: Thu 02 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:24:76:b9:94:d7:95:92:0c:87:95:37:41:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e4523e2e1918de4f644902145ca6dbe7d4f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:76:0c:49:c8:eb:fd:d8:d4:fb:53:e3:e5:
a8:c3:c6:34:09:70:f9:f3:c5:82:82:74:de:08:19:
ed:f7:ff:e2:3a:72:a5:e7:b2:ed:c9:78:05:8c:6e:
6f:d0:10:82:34:20:23:70:f5:84:35:18:05:00:b8:
c1:46:20:81:6e:0f:01:63:c5:96:fb:96:9c:d1:c3:
48:55:ff:f5:13:81:e6:a7:c8:27:3a:60:4a:e4:8b:
1b:62:1b:ad:bc:ed:44:9b:ac:ab:73:0c:da:35:90:
99:b6:74:f3:1a:7e:cc:e4:da:a7:22:0a:b0:e1:8f:
5f:4b:f4:63:59:3d:22:89:63:58:62:c4:d2:69:52:
c2:d7:38:0c:95:70:5d:9a:65:57:25:ed:00:b3:c4:
b5:40:1f:5b:7b:01:30:9f:5b:8c:58:8e:d8:6f:17:
ea:5d:04:a6:19:e6:29:a8:d1:b0:09:d6:b3:df:79:
5c:1b:30:fd:56:ab:d4:3b:ef:0b:d7:3f:6b:41:54:
94:d9:28:58:7e:cc:d6:3d:5b:82:39:25:87:e6:61:
63:5b:4d:aa:10:6b:10:6e:7b:3e:cb:03:a9:0c:43:
8d:95:b2:17:6a:c9:46:f5:a0:2b:2b:1a:12:cd:38:
35:04:7e:fe:05:6a:5a:87:5a:07:34:03:83:67:10:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:52:3E:2E:19:18:DE:4F:64:49:02:14:5C:A6:DB:E7:D4:F1:4E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8eRSPi4ZGN5PZEkCFFym2-fU8U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
42:74:d8:98:b5:a7:9d:85:b8:a2:f1:01:cb:9c:8d:e8:84:6b:
9e:98:83:a7:f0:e0:36:f2:e5:01:54:01:a7:1d:32:38:06:59:
de:76:96:05:40:03:23:ef:27:71:4f:3c:1b:98:c0:c0:22:ac:
3d:d4:68:04:b1:8d:0b:0a:cb:70:26:82:6e:f1:d7:60:e6:22:
49:68:9d:e1:58:04:88:75:9a:3c:a8:e6:1c:ec:25:65:12:8d:
7e:20:97:1f:a1:64:93:b2:a3:65:79:97:eb:16:f0:00:66:04:
d6:4c:43:70:aa:5d:5c:58:19:83:33:f6:18:81:fe:6d:03:ec:
51:e6:55:e2:d8:73:56:3c:5d:a0:a1:e9:a5:c0:a8:b7:16:5e:
cd:27:a9:a0:a1:71:39:5e:6c:18:72:50:d4:46:db:5e:69:14:
b0:31:20:76:80:1b:a8:3b:46:d2:13:2b:ef:83:cd:00:5e:89:
b3:93:31:81:97:5b:94:b4:3d:a7:54:ee:a8:7d:7c:ee:1b:02:
7e:67:56:83:8c:56:c2:ea:0d:ff:15:5e:74:11:2c:e8:23:cd:
fd:9b:f2:29:e5:a2:d7:8a:66:87:09:25:ec:7b:44:93:16:a5:
92:92:4b:d0:38:18:9e:f6:6a:cb:7c:0f:56:47:54:ad:db:53:
1f:1c:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:29 2025 by rpki-client