Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K7LFwSMcqm92L9pzHZ6D6ujaCTQ.roa
File: K7LFwSMcqm92L9pzHZ6D6ujaCTQ.roa (raw, json)
Hash identifier: rsf1ByIZLYXWNwlSE7tJDB/A+hY4dpdwyfOnyhAxoA8=
Subject key identifier: 2B:B2:C5:C1:23:1C:AA:6F:76:2F:DA:73:1D:9E:83:EA:E8:DA:09:34
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192928B8E247CD229DA4DB8A45C42550C2F
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K7LFwSMcqm92L9pzHZ6D6ujaCTQ.roa
Signing time: Tue 15 Oct 2024 23:37:52 +0000
ROA not before: Tue 15 Oct 2024 23:37:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.156.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
82.140.188.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.23.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.60.0/24 maxlen: 24
86.38.64.0/24 maxlen: 24
86.38.66.0/24 maxlen: 24
86.38.69.0/24 maxlen: 24
86.38.77.0/24 maxlen: 24
86.38.78.0/24 maxlen: 24
86.38.79.0/24 maxlen: 24
86.38.90.0/24 maxlen: 24
86.38.94.0/24 maxlen: 24
86.38.95.0/24 maxlen: 24
86.38.96.0/24 maxlen: 24
86.38.98.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.103.0/24 maxlen: 24
86.38.104.0/24 maxlen: 24
86.38.109.0/24 maxlen: 24
86.38.110.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.137.0/24 maxlen: 24
86.38.142.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.162.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.172.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.209.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.240.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.117.176.0/24 maxlen: 24
89.117.178.0/24 maxlen: 24
89.117.179.0/24 maxlen: 24
89.117.184.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.187.0/24 maxlen: 24
89.117.192.0/24 maxlen: 24
89.117.200.0/24 maxlen: 24
89.117.204.0/24 maxlen: 24
89.117.206.0/24 maxlen: 24
89.117.207.0/24 maxlen: 24
89.117.211.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/24 maxlen: 24
89.117.238.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:92:8b:8e:24:7c:d2:29:da:4d:b8:a4:5c:42:55:0c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 15 23:37:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb2c5c1231caa6f762fda731d9e83eae8da0934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:c1:f6:a3:07:dc:22:3b:d9:df:1e:64:58:
d9:66:4d:10:f3:4c:85:25:f2:83:64:66:1b:02:8b:
f2:e7:fa:e7:67:f6:51:8b:2e:bf:58:85:37:b7:83:
9a:51:76:e8:d5:8e:ad:74:e1:9b:38:f5:4f:c5:72:
1e:2c:f5:8d:37:4d:7f:8c:2c:b5:f6:62:b9:78:63:
ed:30:8d:97:fe:65:39:dc:29:64:35:bc:fd:3e:6b:
3f:d2:7e:51:a1:37:d3:ba:53:e4:a4:8d:c4:a9:38:
ce:7e:12:28:9b:70:b5:21:4f:06:d8:27:47:43:1a:
12:3f:6d:99:6c:70:d0:5c:43:78:f1:bf:1b:c2:66:
76:9c:1f:0b:a7:93:17:91:e7:b0:b8:6c:7c:5d:da:
10:15:01:2b:a8:75:41:44:00:1b:ee:bc:0c:9c:90:
13:e5:12:13:13:d5:05:59:28:9c:c0:f2:39:b4:27:
fc:73:44:3b:ec:5c:cf:15:b9:0b:42:ab:2e:4b:32:
c1:89:af:62:4a:5d:a4:88:8d:24:05:d9:86:58:1d:
bc:85:13:90:99:3d:2c:2e:a5:0c:25:b6:c6:b0:5b:
56:a4:c5:09:a8:59:1c:d9:6f:dc:b4:e3:79:db:90:
07:09:f4:52:85:92:ac:c1:20:4a:1d:01:c9:11:a4:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:C5:C1:23:1C:AA:6F:76:2F:DA:73:1D:9E:83:EA:E8:DA:09:34
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K7LFwSMcqm92L9pzHZ6D6ujaCTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.156.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
82.140.188.0/24
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.23.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.60.0/24
86.38.64.0/24
86.38.66.0/24
86.38.69.0/24
86.38.77.0-86.38.79.255
86.38.90.0/24
86.38.94.0-86.38.96.255
86.38.98.0/24
86.38.100.0/24
86.38.102.0-86.38.104.255
86.38.109.0-86.38.110.255
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.137.0/24
86.38.142.0/24
86.38.152.0-86.38.154.255
86.38.161.0-86.38.162.255
86.38.165.0-86.38.169.255
86.38.171.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.209.0/24
86.38.215.0/24
86.38.229.0/24
86.38.234.0/24
86.38.236.0/24
86.38.239.0-86.38.240.255
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.69.0/24
89.117.108.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.170.0/24
89.117.176.0/24
89.117.178.0/23
89.117.184.0/23
89.117.187.0/24
89.117.192.0/24
89.117.200.0/24
89.117.204.0/24
89.117.206.0/23
89.117.211.0/24
89.117.219.0/24
89.117.223.0-89.117.224.255
89.117.238.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:c7:76:c7:12:1a:bb:b3:5f:9a:fe:82:a3:cc:d7:d8:db:
82:2e:21:4a:1b:e1:b1:56:d2:95:d2:62:69:ad:7a:8f:db:72:
53:c8:04:7e:29:45:90:ea:67:46:62:8b:4d:5e:e1:a9:fb:dd:
bb:1b:ba:61:a2:53:bf:59:cb:bf:d1:2a:21:fc:b9:c5:3a:b1:
36:5e:df:ca:ad:31:49:7c:a8:54:a4:f5:a8:a3:a5:34:25:18:
0c:3d:84:f3:46:a6:52:fb:02:4e:31:4a:2d:87:eb:f5:aa:4f:
a4:7f:d6:94:07:36:a9:2a:a9:82:71:87:a0:83:83:84:bc:c3:
98:f4:0f:57:b0:10:f0:42:fa:47:84:1a:6a:8b:92:a3:62:88:
1b:9f:53:69:2f:df:1a:07:11:f6:48:e9:b8:b9:d8:9f:5d:29:
99:e1:76:c3:fd:07:e9:cf:67:62:ed:b5:c6:77:7a:8b:35:27:
7a:ce:fe:31:94:cd:90:df:0e:47:37:de:b8:d4:c8:fb:8c:74:
a2:09:e9:de:1c:7b:84:a6:5b:20:5d:2e:11:46:0c:5e:e1:87:
83:2d:dd:5e:a6:79:21:08:2a:28:98:dc:42:3a:d5:ec:94:e7:
55:74:4b:08:8a:04:c1:cf:8f:9b:8f:05:84:b4:1d:5a:6a:81:
2d:47:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:59 2025 by rpki-client