Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/h-guP7Zk1mLCauvKU52WPz-gERo.roa
File: h-guP7Zk1mLCauvKU52WPz-gERo.roa (raw, json)
Hash identifier: U4acwJM/AAwvBI96mt4/XQCfrTL+9Jck0ZXXq01t7bs=
Subject key identifier: 87:E8:2E:3F:B6:64:D6:62:C2:6A:EB:CA:53:9D:96:3F:3F:A0:11:1A
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42D00016FA799F9730275375BCF01
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/h-guP7Zk1mLCauvKU52WPz-gERo.roa
Signing time: Thu 02 Jan 2025 15:48:26 +0000
ROA not before: Thu 02 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.171.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.100.0/24 maxlen: 24
86.38.102.0/24 maxlen: 24
86.38.122.0/24 maxlen: 24
86.38.124.0/24 maxlen: 24
86.38.125.0/24 maxlen: 24
86.38.126.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.185.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:2d:00:01:6f:a7:99:f9:73:02:75:37:5b:cf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e82e3fb664d662c26aebca539d963f3fa0111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:0d:6f:da:23:b5:b2:7a:a0:11:75:4b:5e:
fe:b6:b6:c1:39:a4:28:96:f0:66:75:4b:d2:dd:a8:
4c:60:33:6b:37:8e:0e:cb:ac:14:2e:e2:89:47:b6:
76:ac:28:b0:d9:e9:c3:71:0d:d8:55:62:43:dc:ba:
9f:56:67:91:28:28:7b:d0:39:8e:81:6e:a0:b1:9f:
59:38:ee:cd:f6:c5:6a:c2:47:21:3a:ac:a2:ef:cd:
a4:61:a3:5e:fc:9b:a8:1e:e1:57:e4:36:67:97:a4:
8d:c5:2f:50:72:42:9e:61:6b:fd:16:80:58:75:67:
e3:44:e3:9f:8e:05:02:9d:e0:6a:6c:04:67:dd:e1:
74:2f:84:38:74:01:f0:c2:e5:50:dd:bb:5e:af:d0:
2a:55:e1:ff:b8:95:5a:d2:af:97:72:a8:00:05:27:
aa:fd:81:50:6e:8a:3e:2b:72:5a:c2:01:80:b5:ad:
2a:48:76:23:1f:cf:e9:0d:4c:17:00:30:9a:af:62:
cf:fe:60:bc:36:89:e3:1d:0c:91:89:6f:01:4e:a0:
eb:18:a5:9a:13:54:58:5d:e1:b8:2f:5c:31:af:06:
69:84:bb:c2:fc:d6:64:fc:76:bb:db:e8:77:44:9d:
75:86:1c:2b:e4:9f:88:3d:1d:ed:cf:67:d5:d0:78:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:2E:3F:B6:64:D6:62:C2:6A:EB:CA:53:9D:96:3F:3F:A0:11:1A
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/h-guP7Zk1mLCauvKU52WPz-gERo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.171.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.204.0/23
84.46.207.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.36.0/24
86.38.38.0/23
86.38.100.0/24
86.38.102.0/24
86.38.122.0/24
86.38.124.0-86.38.126.255
86.38.152.0-86.38.154.255
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
86.38.215.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.185.0/24
89.117.219.0/24
89.117.223.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
31:53:97:19:13:08:0c:c7:d7:77:21:69:f6:1b:48:cb:15:24:
78:e8:a7:ea:c1:ec:2c:31:d7:b7:2d:59:5b:79:5a:0c:dd:27:
ac:16:7d:3b:24:fa:8a:8e:9a:e4:a5:33:d2:eb:35:75:6f:33:
49:0b:b9:4b:af:ce:a2:b0:10:eb:44:04:48:8f:fd:83:63:5c:
3a:5f:d6:69:48:25:4c:74:44:7e:81:d6:57:f8:4a:33:e6:35:
16:0d:40:7a:6e:d6:7c:29:03:b0:2a:81:37:dd:42:a5:cb:6d:
9d:16:e7:fb:60:9e:8d:2d:36:c2:97:bb:22:42:44:81:7b:2d:
11:d7:7d:d2:aa:54:e5:bb:5f:f1:8b:6a:05:f0:66:b2:4e:12:
1e:20:19:4f:bd:c7:df:2e:2b:0e:16:c7:7b:89:e7:25:fe:5b:
14:3c:8d:2f:7d:42:8a:02:f8:48:56:44:52:b1:19:10:8c:37:
19:bd:84:f8:01:6f:b6:5e:76:d4:b1:ef:7f:da:35:f3:b9:9f:
33:f2:0e:cc:c3:43:a0:41:0e:1e:c6:6e:73:65:1b:8e:fa:42:
15:28:b5:c1:ee:56:09:76:77:d1:66:ba:74:64:4f:81:1e:c0:
8e:bc:80:98:7a:40:5b:2f:57:cc:3d:c3:06:02:a7:8f:44:d5:
31:32:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:27 2025 by rpki-client