Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/IE_0owT2tzmk1IhhDhUrN2dvYhM.roa
File: IE_0owT2tzmk1IhhDhUrN2dvYhM.roa (raw, json)
Hash identifier: MRM/dubltJqA7JOd5nKw58YAynmlHh9BWTfV75De26c=
Subject key identifier: 20:4F:F4:A3:04:F6:B7:39:A4:D4:88:61:0E:15:2B:37:67:6F:62:13
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 018BC9917DDD96F9BB48FA6971B8426FA442
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/IE_0owT2tzmk1IhhDhUrN2dvYhM.roa
Signing time: Mon 13 Nov 2023 16:43:57 +0000
ROA not before: Mon 13 Nov 2023 16:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3212
IP address blocks: 213.172.224.0/19 maxlen: 19
185.66.148.0/22 maxlen: 22
77.38.0.0/17 maxlen: 17
77.73.104.0/22 maxlen: 22
46.182.224.0/21 maxlen: 21
217.72.64.0/19 maxlen: 19
77.111.0.0/18 maxlen: 18
78.153.32.0/19 maxlen: 19
87.119.128.0/19 maxlen: 19
185.97.68.0/22 maxlen: 22
92.53.128.0/19 maxlen: 19
185.85.148.0/22 maxlen: 22
212.85.160.0/19 maxlen: 19
91.132.208.0/22 maxlen: 22
185.30.136.0/22 maxlen: 22
185.65.228.0/22 maxlen: 22
176.76.0.0/16 maxlen: 16
46.150.32.0/19 maxlen: 19
84.52.128.0/18 maxlen: 18
31.15.128.0/17 maxlen: 17
95.143.144.0/20 maxlen: 20
91.237.132.0/22 maxlen: 22
213.143.64.0/19 maxlen: 19
176.57.92.0/22 maxlen: 22
82.192.32.0/19 maxlen: 19
84.20.224.0/19 maxlen: 19
193.111.220.0/22 maxlen: 22
185.79.228.0/22 maxlen: 22
92.63.16.0/20 maxlen: 20
94.140.64.0/19 maxlen: 19
2a00:b2a0::/32 maxlen: 32
2a00:fc0::/32 maxlen: 32
2a00:13d8::/29 maxlen: 29
2a00:1da8::/32 maxlen: 32
2a00:1c80::/29 maxlen: 29
2a05:acc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:91:7d:dd:96:f9:bb:48:fa:69:71:b8:42:6f:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Nov 13 16:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=204ff4a304f6b739a4d488610e152b37676f6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:be:1e:f3:f2:57:05:0a:de:5b:31:4f:9d:
4b:3f:01:2d:27:e1:d9:82:19:38:1a:c2:39:08:3c:
fc:99:13:bf:2b:16:22:3b:a8:68:3b:7e:11:8c:29:
1a:a5:6c:52:84:e7:be:ca:1f:ef:14:49:c6:c9:67:
56:f2:2d:9a:fc:b2:6b:79:12:f3:31:6e:f0:f5:be:
1e:01:0c:be:89:67:fb:d8:83:40:5c:a3:85:b0:78:
02:a9:3c:22:e9:e3:ab:f2:71:7c:95:b6:46:61:98:
99:90:09:df:07:e6:b4:70:13:3d:bf:83:99:95:dc:
55:9e:22:6f:af:a2:93:b4:9c:e1:5e:c1:bf:bf:4f:
a7:0a:b6:a8:f3:cc:03:a8:df:b2:7b:74:4b:22:26:
23:bb:6a:92:59:6f:b8:72:da:b7:b7:5f:26:1c:7f:
20:c2:19:b0:33:f5:21:43:f3:b2:f6:cb:af:6e:66:
83:8a:97:f3:ce:2c:ef:d6:2c:db:a3:02:8b:29:75:
28:df:da:4c:51:f3:48:92:c5:66:e8:fb:04:18:38:
1a:b3:24:81:7b:99:7d:78:15:fa:dd:da:1b:63:33:
c4:c6:92:62:43:18:74:e1:68:be:7f:ab:4c:cc:09:
e5:c7:b8:5f:bf:1d:02:30:cc:fa:76:48:58:61:01:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4F:F4:A3:04:F6:B7:39:A4:D4:88:61:0E:15:2B:37:67:6F:62:13
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/IE_0owT2tzmk1IhhDhUrN2dvYhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.128.0/17
46.150.32.0/19
46.182.224.0/21
77.38.0.0/17
77.73.104.0/22
77.111.0.0/18
78.153.32.0/19
82.192.32.0/19
84.20.224.0/19
84.52.128.0/18
87.119.128.0/19
91.132.208.0/22
91.237.132.0/22
92.53.128.0/19
92.63.16.0/20
94.140.64.0/19
95.143.144.0/20
176.57.92.0/22
176.76.0.0/16
185.30.136.0/22
185.65.228.0/22
185.66.148.0/22
185.79.228.0/22
185.85.148.0/22
185.97.68.0/22
193.111.220.0/22
212.85.160.0/19
213.143.64.0/19
213.172.224.0/19
217.72.64.0/19
IPv6:
2a00:fc0::/32
2a00:13d8::/29
2a00:1c80::/29
2a00:1da8::/32
2a00:b2a0::/32
2a05:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
36:2d:96:bb:dc:a1:25:df:14:34:e2:c0:75:22:88:e0:30:46:
22:4a:15:77:c4:67:98:cb:2e:f3:01:c9:d0:55:25:50:09:1d:
2b:60:a0:9b:5d:0b:8c:fa:39:66:fb:95:a0:5e:df:f9:c5:cb:
a0:86:29:38:38:bc:4e:02:44:78:5a:59:9e:3e:24:9d:e9:1a:
9c:97:37:c2:3a:0c:b3:bc:82:92:61:e5:65:a2:06:1a:fd:84:
64:ad:8a:ca:0b:b6:b5:2c:42:20:46:e0:2a:46:32:27:ee:eb:
ca:48:a1:00:46:61:19:3c:0e:c3:38:1a:28:d9:e9:db:3a:4f:
6e:9d:c1:46:26:13:51:3d:9e:20:50:4b:79:62:9d:75:c4:02:
13:5c:18:ba:c5:44:38:ca:6a:46:ab:27:2e:ce:1e:4e:0b:a9:
c8:4a:2c:49:ac:fa:75:a5:04:2d:fa:1b:ba:6a:47:86:5b:6b:
e9:87:1c:d2:9b:a0:2d:4e:02:93:73:86:a9:b2:b8:26:f1:71:
6b:1a:9a:b9:9c:c6:89:6d:71:c9:38:c6:ac:b4:2f:38:b0:72:
b0:47:bd:f8:ea:d4:dc:13:38:b2:35:45:97:69:6e:77:76:43:
7e:89:82:44:cd:bc:29:1c:f7:cb:7a:2a:28:f5:09:47:17:a0:
47:2b:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:32 2025 by rpki-client