Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JA7tpykotPiDvS_HkAe12yPVXos.roa
File: JA7tpykotPiDvS_HkAe12yPVXos.roa (raw, json)
Hash identifier: J+qlpafpClQIZ5K8Dh8a+s6qB3MiPWIcJfiql9Scd9Y=
Subject key identifier: 24:0E:ED:A7:29:28:B4:F8:83:BD:2F:C7:90:07:B5:DB:23:D5:5E:8B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018BDDC697E7104E9827C35743C50E2E5C6C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JA7tpykotPiDvS_HkAe12yPVXos.roa
Signing time: Fri 17 Nov 2023 14:54:21 +0000
ROA not before: Fri 17 Nov 2023 14:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:c6:97:e7:10:4e:98:27:c3:57:43:c5:0e:2e:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Nov 17 14:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=240eeda72928b4f883bd2fc79007b5db23d55e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:9e:c7:3d:5c:b3:c9:45:8d:48:4b:14:3d:
ea:89:b2:71:74:28:7e:ce:83:47:ca:db:62:05:37:
a5:58:9b:44:19:32:3d:49:d9:71:a8:78:50:01:72:
51:d0:2f:a2:10:4f:f3:22:77:a5:a8:3b:db:24:f6:
93:7c:a8:51:6d:75:9f:66:a8:8f:77:3a:81:63:36:
67:de:ea:54:d6:e9:6d:f0:4a:4c:f5:80:7c:d0:ad:
ae:cc:43:3b:a0:5b:62:e1:b2:21:b8:ca:bb:87:c4:
8c:2b:a1:95:e9:b7:f8:e7:2a:1d:96:74:fd:13:8f:
52:24:88:65:83:d8:7d:c1:87:f4:22:b3:1c:92:ad:
d9:ec:35:35:88:2a:df:e2:83:62:fe:0e:97:c5:45:
eb:59:48:00:68:9b:13:ea:3b:20:a9:9f:40:52:8e:
ad:76:4a:2f:84:a4:f0:5a:81:41:47:39:d6:7c:c7:
40:0d:c2:26:53:34:de:0e:07:f5:c0:d3:f9:e2:ff:
0b:dd:e5:c8:95:ba:97:e7:c3:e3:79:10:94:29:c3:
25:75:73:31:f2:31:f3:ff:c6:86:b6:ec:52:f9:f4:
59:6b:3c:49:cb:63:b7:dd:f4:c5:d2:19:16:80:3d:
2f:ad:f2:7d:71:7e:6d:bf:c0:c1:3a:ea:93:b3:54:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:ED:A7:29:28:B4:F8:83:BD:2F:C7:90:07:B5:DB:23:D5:5E:8B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JA7tpykotPiDvS_HkAe12yPVXos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0/24
86.38.36.0/24
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0/24
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
28:cb:f3:c1:80:7e:e5:55:f6:2d:78:61:7b:f0:92:c4:99:11:
47:07:89:5d:df:b4:ba:94:bb:20:24:45:34:16:42:72:5b:9a:
fd:d2:2e:93:12:24:98:0d:30:77:1b:95:cf:c7:a0:f6:87:37:
f5:2d:c9:eb:5a:a4:7c:5c:03:35:4e:ac:00:82:35:e9:ed:19:
9c:54:c5:b7:f1:eb:e3:6d:86:ca:83:b0:a9:16:a0:cf:ca:74:
57:da:86:09:b4:6f:7d:9f:41:bc:83:a5:42:e5:9d:4d:80:44:
4d:49:13:73:78:19:dc:d4:97:3e:c4:2d:1a:f9:70:0e:3e:68:
9b:30:79:c7:65:46:a2:75:41:4e:50:8b:ec:ad:af:ce:74:8d:
06:cb:ef:19:85:3b:5c:c7:59:7a:0a:bc:1c:02:21:db:6d:18:
eb:34:7d:e6:55:cb:58:0f:93:23:cb:86:08:8b:49:3e:91:b4:
72:cf:cc:6c:c9:2f:24:6e:4d:f2:10:84:d6:22:ab:d6:2e:fd:
4e:7d:ad:d5:1e:9f:90:04:ce:e0:40:57:f0:22:ac:ec:d8:17:
14:a6:79:80:47:b5:d3:52:d1:d4:20:15:f9:72:35:a5:d8:98:
99:5d:55:72:2b:6c:05:7d:09:46:0d:b1:c0:6a:4d:bb:08:5e:
2d:57:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:08 2025 by rpki-client