Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/wsYm66SFoUMXvTNri2kxSZblzGk.roa
File: wsYm66SFoUMXvTNri2kxSZblzGk.roa (raw, json)
Hash identifier: u8+i5rtaMvk/j21BETlbkPWIXgZCWiyn9sKufTHWpYk=
Subject key identifier: C2:C6:26:EB:A4:85:A1:43:17:BD:33:6B:8B:69:31:49:96:E5:CC:69
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 03E09F67
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/wsYm66SFoUMXvTNri2kxSZblzGk.roa
Signing time: Thu 12 May 2022 17:48:10 +0000
ROA not before: Thu 12 May 2022 17:48:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.10.0/24 maxlen: 32
93.114.11.0/24 maxlen: 32
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
89.19.42.0/23 maxlen: 32
188.241.146.0/24 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
77.95.116.0/22 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 32
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65052519 (0x3e09f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: May 12 17:48:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c626eba485a14317bd336b8b69314996e5cc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:7b:df:16:a9:2f:bd:ac:71:af:99:c7:8b:
d9:a2:26:34:fd:15:be:c5:68:7c:19:12:df:ce:f8:
ee:a9:f5:1c:92:32:29:73:90:a5:04:f9:68:41:00:
4e:72:8c:a2:31:c6:89:ba:1b:54:e1:0c:bd:db:99:
b3:54:ed:9e:3f:35:27:bb:ed:f4:d2:e2:9b:d4:35:
26:3a:05:28:d5:b4:ee:56:2b:37:5b:bb:46:cc:5d:
6c:ca:94:c3:03:e3:a2:55:64:5d:5c:71:0b:d5:29:
79:b6:b9:68:e5:26:dc:61:95:fd:df:b1:a2:19:8c:
fa:5d:1e:6b:7a:77:f2:6b:8b:3f:9c:d7:fc:1a:51:
ef:53:82:a2:49:83:2a:8a:45:1b:ab:0a:88:5b:3b:
cc:3a:62:49:17:cc:be:bc:95:76:48:b6:49:69:67:
52:49:2c:0b:e1:2c:8e:c8:93:cb:8a:4c:1a:29:2f:
41:85:6f:b5:39:5c:d3:0c:a8:f8:39:87:1a:52:00:
79:d2:af:7c:85:60:13:42:78:24:5d:3d:23:7d:e6:
0e:46:40:85:92:13:89:62:12:d7:83:05:c4:f4:7d:
a9:33:44:6c:eb:bc:21:15:75:2f:27:1a:33:f1:8e:
2e:cb:8e:38:63:77:b2:1e:ab:91:b4:af:4d:c0:86:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:26:EB:A4:85:A1:43:17:BD:33:6B:8B:69:31:49:96:E5:CC:69
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/wsYm66SFoUMXvTNri2kxSZblzGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
10:31:76:4a:92:62:90:32:46:bf:36:90:22:17:c2:a3:d7:38:
09:62:e4:29:db:49:34:f0:b5:18:9b:5c:ac:a7:94:db:0a:38:
70:7e:48:91:59:0f:d1:35:42:6e:af:c1:98:2d:3d:5d:d8:cc:
a7:ac:e1:ff:9a:42:60:af:c3:3f:0e:a7:5a:4c:03:5c:a6:af:
b6:d7:c5:bf:4b:af:c8:e5:a1:94:0a:01:41:73:3c:ae:64:14:
cb:dc:f5:58:5b:ce:d3:11:5a:f5:09:c8:84:02:ef:59:cb:e1:
d2:e7:e2:5c:55:d4:98:d8:92:2b:8c:b0:17:5d:13:a6:ba:42:
e0:ae:ef:bb:3c:1e:03:3c:2a:76:fe:64:97:02:c6:ac:08:87:
5e:63:c7:69:68:e2:6e:01:af:06:56:18:56:cf:9e:63:8e:c8:
08:df:19:08:e4:77:30:74:ae:01:8e:9d:7d:99:b8:91:68:59:
6b:2c:54:9d:bb:ab:54:1f:f4:eb:36:dc:6c:8e:cf:07:9c:d8:
f2:58:a8:49:d4:13:b2:6b:95:b8:b3:91:f5:dc:bd:d3:2a:b4:
a4:da:c9:ae:8c:54:35:37:3c:e4:3d:8f:f9:9b:9f:71:2d:a8:
d5:9c:17:e3:0b:f7:3d:3f:b8:2f:9a:59:b4:a1:fc:ca:ce:a1:
61:88:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:20 2025 by rpki-client