Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/isHpX7GLtlbGTEkyeV6_603EJb0.roa
File: isHpX7GLtlbGTEkyeV6_603EJb0.roa (raw, json)
Hash identifier: qT7USR0XzMN0YyV//C74MXNQD3/xKlvDsdV9ruloj9Q=
Subject key identifier: 8A:C1:E9:5F:B1:8B:B6:56:C6:4C:49:32:79:5E:BF:EB:4D:C4:25:BD
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0190FD81DD1F73473419269CDDEBC3C981B8
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/isHpX7GLtlbGTEkyeV6_603EJb0.roa
Signing time: Mon 29 Jul 2024 08:01:04 +0000
ROA not before: Mon 29 Jul 2024 08:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.34.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.64.0/18 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.237.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:81:dd:1f:73:47:34:19:26:9c:dd:eb:c3:c9:81:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 29 08:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ac1e95fb18bb656c64c4932795ebfeb4dc425bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:f6:2b:5c:45:e7:2d:1a:99:16:7e:45:5f:
c8:17:c4:91:45:6f:27:b6:66:36:9d:ad:0d:f9:c7:
f9:8d:27:69:b9:25:42:1d:16:ef:aa:94:c1:01:67:
e8:2a:d9:ae:15:99:5c:d6:32:70:1c:a5:41:c7:de:
8d:18:44:33:47:38:ca:86:b0:76:1f:32:b0:9d:b2:
b7:f3:e7:e6:4e:5c:36:99:fb:f5:fb:a1:6a:f2:05:
9c:62:84:6e:3c:38:80:d8:94:28:af:ba:93:28:85:
0b:07:2c:c4:88:7d:c4:7d:17:eb:2b:fb:d8:9e:21:
62:12:91:ec:77:be:ec:58:f2:49:8d:80:33:73:68:
f6:fc:25:4a:9d:5c:cf:66:24:ee:12:f0:bd:c6:87:
f3:8f:b9:e6:15:7d:a6:70:f4:36:0e:91:eb:66:cf:
81:15:6a:b2:6c:96:eb:66:e9:fd:81:cb:71:cf:dc:
c3:fe:f9:23:38:67:65:fc:98:42:d6:b0:cf:e7:0a:
54:be:77:ee:c8:3b:40:d6:88:bd:f3:89:fb:f7:6e:
df:a6:d4:ea:2f:c2:2d:cc:e9:3e:9b:5e:a7:74:a2:
d1:22:42:68:e1:12:5a:7c:ca:ca:53:45:4c:8d:57:
4a:d9:c7:e5:bc:f1:0c:f5:a1:4e:22:9b:29:6b:84:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:E9:5F:B1:8B:B6:56:C6:4C:49:32:79:5E:BF:EB:4D:C4:25:BD
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/isHpX7GLtlbGTEkyeV6_603EJb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.34.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.64.0/18
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.237.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
32:ad:4b:4a:0b:d8:1a:cd:b6:85:8b:6c:b5:e5:b8:50:06:de:
c8:dd:71:2a:24:05:55:67:98:db:ab:e8:0d:21:9b:84:4f:eb:
01:b3:da:db:f3:53:ad:43:42:9e:ca:44:f5:04:c7:82:eb:50:
20:51:39:97:af:73:1f:c8:f8:17:c6:81:ec:a9:33:bc:f9:b0:
33:14:e4:9a:7c:eb:1d:46:9b:9e:cf:54:03:08:3a:6a:cb:c6:
7e:3e:65:e6:42:4c:60:f8:14:48:d8:a0:64:9a:db:f4:e9:f0:
ac:85:0d:af:48:58:32:09:67:2e:01:e5:61:c8:7d:2d:7f:c5:
4e:c4:0b:23:2b:81:0e:d3:05:92:a8:6b:65:d7:f5:c5:19:55:
8d:d5:c4:6e:71:db:32:98:1a:cc:ab:11:fc:c6:4c:93:78:c3:
ab:fe:92:dd:c7:ee:b1:b8:db:d4:f4:f2:ff:b2:38:db:65:21:
88:c3:60:e9:75:31:53:7e:ce:9f:b6:b1:23:8f:c7:f7:7e:20:
25:ad:58:d6:0a:34:b0:e1:f6:a8:fb:8b:1b:3e:a6:db:fc:2a:
bf:c3:20:97:77:8a:05:69:92:ed:53:59:44:52:ac:35:ee:50:
9d:73:d5:64:fc:9d:b2:83:3a:eb:77:95:ed:ea:61:28:ce:8e:
75:1a:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:36 2025 by rpki-client