Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCBgJru51GqBHxeqLpsj2J4T-tE.roa
File: oCBgJru51GqBHxeqLpsj2J4T-tE.roa (raw, json)
Hash identifier: 5l90zbqwEDkPXIqKBT0il1+JURjZg3Wfe4IyhLa76eE=
Subject key identifier: A0:20:60:26:BB:B9:D4:6A:81:1F:17:AA:2E:9B:23:D8:9E:13:FA:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195CCF689450D65ED6FE56261598A94B2E9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCBgJru51GqBHxeqLpsj2J4T-tE.roa
Signing time: Tue 25 Mar 2025 11:01:03 +0000
ROA not before: Tue 25 Mar 2025 11:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:f6:89:45:0d:65:ed:6f:e5:62:61:59:8a:94:b2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 11:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0206026bbb9d46a811f17aa2e9b23d89e13fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:4c:34:69:08:09:29:8e:b2:cf:4a:69:c8:
93:3d:1a:20:4a:ae:29:12:a8:0a:0e:85:c7:56:b3:
4c:f1:5e:fc:37:ef:95:30:16:b9:07:32:71:54:c9:
46:2a:4e:5e:0a:06:12:0d:dd:9e:5b:2f:d1:28:2e:
1d:c2:b3:a7:20:3c:fe:22:ed:0e:b9:eb:ee:90:23:
c1:7e:b7:be:95:9c:1a:9b:91:6e:88:59:26:97:03:
f4:a1:fc:e4:09:35:f7:0b:14:05:31:5e:a1:67:7d:
a1:3b:6a:1e:3a:90:d9:55:4a:1c:37:56:a2:37:39:
25:3c:3c:be:1b:17:38:4e:70:a1:96:a9:7a:3b:d8:
6b:4c:2e:25:5e:df:f4:c2:37:16:82:0d:76:e8:e3:
23:5c:f7:fc:f2:58:8e:e3:e1:63:26:ea:46:02:96:
0a:b6:10:b3:02:c8:09:bd:07:af:f1:3a:3d:79:b2:
d7:3f:27:89:4a:49:cb:7a:03:09:21:8e:4e:32:18:
f0:73:c8:60:3e:5b:5b:49:7c:7d:7e:a3:d3:73:5d:
f4:dd:1c:0f:de:20:9d:c9:33:39:4d:be:f2:df:8f:
52:f2:c3:7d:e2:3e:7f:84:e0:d0:59:3f:c9:1d:d8:
2b:99:0b:9a:5c:4b:a0:b9:27:1d:63:ea:87:e8:5a:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:60:26:BB:B9:D4:6A:81:1F:17:AA:2E:9B:23:D8:9E:13:FA:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCBgJru51GqBHxeqLpsj2J4T-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.193.0/24
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:57:23:cf:c5:f8:70:1d:2d:53:05:98:59:4f:61:09:05:2c:
6d:c9:d8:f5:1e:2f:ef:e9:9f:1f:ce:c2:06:8e:f1:35:35:01:
d0:cb:86:e2:e1:a7:43:b2:82:10:be:68:64:39:b2:ec:1c:86:
6b:32:2e:e7:22:d4:88:37:88:74:64:3d:30:a4:9d:d2:48:20:
c0:6f:5f:5d:f1:10:77:27:59:c2:53:44:4d:02:e8:62:55:f2:
cd:18:b6:94:82:06:7d:4f:4a:d1:e7:5a:e2:e6:4f:8d:dd:a0:
8e:89:26:2f:f0:82:37:0b:ee:f8:89:c5:f9:5f:b2:61:a6:00:
fc:f6:9d:74:44:29:98:1c:86:e1:4a:ec:21:f2:dd:1a:f4:c2:
64:76:15:08:ad:ff:9a:4b:8b:a5:c7:a3:02:8c:89:b4:9d:ba:
ff:c4:fe:48:8c:50:ac:34:c4:08:c9:51:51:a6:b0:30:1f:76:
42:82:06:f4:c0:0e:80:c0:c3:a3:75:7f:2d:da:de:26:be:67:
9b:53:d1:fa:a6:12:32:dd:09:f9:61:1c:96:e0:90:50:1a:cf:
f5:d5:28:c1:11:65:bc:7d:0a:f2:e9:9b:49:dc:9d:26:eb:67:
10:ab:b7:55:43:c8:07:b2:d4:66:34:d7:d3:ac:55:da:a0:57:
00:d7:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:23 2025 by rpki-client