Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KwcKpT7QE8dgFEPUBqoJaZZ7WMM.roa
File: KwcKpT7QE8dgFEPUBqoJaZZ7WMM.roa (raw, json)
Hash identifier: Z8v0pmxbuBlR2dcAn/z0R4jnGaFm3domyKgVjLwgwsQ=
Subject key identifier: 2B:07:0A:A5:3E:D0:13:C7:60:14:43:D4:06:AA:09:69:96:7B:58:C3
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A5D5B37
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KwcKpT7QE8dgFEPUBqoJaZZ7WMM.roa
Signing time: Sun 17 Apr 2022 08:33:57 +0000
ROA not before: Sun 17 Apr 2022 08:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.46.171.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
84.46.240.0/20 maxlen: 20
84.46.234.0/23 maxlen: 23
84.46.236.0/22 maxlen: 22
86.38.246.0/23 maxlen: 23
86.38.242.0/23 maxlen: 23
86.38.241.0/24 maxlen: 24
86.38.248.0/21 maxlen: 21
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.202.0/23 maxlen: 23
86.38.204.0/23 maxlen: 23
86.38.214.0/24 maxlen: 24
86.38.216.0/22 maxlen: 22
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.32.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.178.0/23 maxlen: 23
86.38.184.0/23 maxlen: 23
86.38.186.0/23 maxlen: 23
86.38.180.0/23 maxlen: 23
86.38.182.0/23 maxlen: 23
89.117.228.0/23 maxlen: 23
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 23
89.117.72.0/21 maxlen: 21
89.117.80.0/22 maxlen: 22
89.117.84.0/23 maxlen: 23
89.117.87.0/24 maxlen: 24
89.117.88.0/22 maxlen: 22
89.117.94.0/23 maxlen: 23
89.117.96.0/22 maxlen: 22
89.117.101.0/24 maxlen: 24
89.117.102.0/23 maxlen: 23
89.117.111.0/24 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.116.0/23 maxlen: 23
89.117.118.0/24 maxlen: 24
89.117.16.0/21 maxlen: 21
89.117.12.0/23 maxlen: 23
89.117.24.0/23 maxlen: 23
89.117.28.0/22 maxlen: 22
89.117.27.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.117.36.0/23 maxlen: 23
89.117.32.0/23 maxlen: 23
89.117.40.0/21 maxlen: 21
89.117.48.0/20 maxlen: 20
89.117.64.0/22 maxlen: 22
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 23
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 23
89.117.124.0/24 maxlen: 24
89.117.120.0/22 maxlen: 22
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.132.0/22 maxlen: 22
89.117.139.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.142.0/23 maxlen: 23
89.117.144.0/21 maxlen: 21
89.117.152.0/22 maxlen: 22
89.117.158.0/23 maxlen: 23
89.117.157.0/24 maxlen: 24
89.117.160.0/22 maxlen: 22
89.117.164.0/24 maxlen: 24
89.117.168.0/23 maxlen: 23
89.117.167.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
89.117.172.0/22 maxlen: 22
89.116.108.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 23
89.116.115.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.123.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 23
89.116.126.0/23 maxlen: 23
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.146.0/23 maxlen: 23
89.116.148.0/23 maxlen: 23
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.52.0/23 maxlen: 23
89.116.58.0/23 maxlen: 23
89.116.64.0/22 maxlen: 22
89.116.60.0/22 maxlen: 22
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 23
89.116.76.0/24 maxlen: 24
89.116.80.0/21 maxlen: 21
89.116.88.0/23 maxlen: 23
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.224.0/21 maxlen: 21
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.0.0/22 maxlen: 22
89.116.255.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.6.0/23 maxlen: 23
89.117.8.0/23 maxlen: 23
89.116.163.0/24 maxlen: 24
89.116.164.0/23 maxlen: 23
89.116.166.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.172.0/23 maxlen: 23
89.116.168.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 23
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.200.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173890359 (0xa5d5b37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 17 08:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b070aa53ed013c7601443d406aa0969967b58c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:b9:15:ad:c6:f9:de:98:7d:f5:8c:b9:ad:
78:a0:cb:3a:42:26:b0:76:bc:35:20:f3:86:22:68:
77:be:fb:24:fb:99:ef:de:4e:82:16:10:31:2c:bb:
5d:4c:87:dd:7c:63:c3:c0:99:71:e3:09:50:23:81:
f8:97:42:69:d9:f6:d4:7a:a4:e8:07:bf:44:d0:b5:
32:8f:81:03:03:0a:63:0d:b3:d2:92:1d:36:e0:7d:
e7:6e:f2:0f:09:be:31:38:5d:93:6c:ef:e3:a1:d0:
f0:08:52:0a:2d:61:55:d5:43:16:94:ec:d9:df:5a:
61:2a:41:de:26:f0:b2:0c:54:30:b2:f6:cc:96:76:
0c:7a:09:fb:64:54:00:5b:9b:ca:ad:59:f7:05:c7:
c0:67:4a:49:2d:2e:43:54:4f:bb:b5:d7:ec:ed:d7:
18:b4:75:f5:81:43:22:80:b9:05:14:4e:8d:e2:92:
d3:55:84:cf:94:02:62:c6:9d:1c:2b:7a:b2:36:3e:
fa:71:52:ca:37:90:d8:2d:a1:3c:47:b7:cb:3b:ef:
5a:d5:8f:4e:45:da:9b:8b:d7:39:21:56:4b:71:22:
08:18:1e:8b:8c:45:f2:1d:19:52:e4:e9:a1:7b:7d:
14:3b:00:e7:4b:22:ee:f1:99:24:a8:c9:d2:d7:3b:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:0A:A5:3E:D0:13:C7:60:14:43:D4:06:AA:09:69:96:7B:58:C3
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KwcKpT7QE8dgFEPUBqoJaZZ7WMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.171.0/24
84.46.234.0-84.46.255.255
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.216.0/22
86.38.225.0-86.38.226.255
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.24.0-89.116.39.255
89.116.44.0-89.116.54.255
89.116.58.0-89.116.70.255
89.116.76.0/24
89.116.80.0-89.116.89.255
89.116.91.0-89.116.92.255
89.116.99.0-89.116.100.255
89.116.103.0/24
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.123.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/22
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0/24
89.116.237.0/24
89.116.239.0/24
89.116.248.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.16.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.36.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.103.255
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.155.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1b:75:43:cf:ed:22:d0:b6:9c:38:da:cf:73:9a:c4:16:59:
1b:79:64:b1:d6:18:fe:49:08:0d:df:62:5c:b9:15:8c:02:5b:
7e:45:44:70:d0:46:8d:0b:63:f5:78:22:a7:12:4d:2d:76:4c:
f8:e7:e6:61:b8:ac:c8:7e:fa:00:65:94:69:12:88:2f:e4:cf:
05:27:ab:5c:91:8f:19:c4:3b:2f:bf:86:c3:58:98:de:d0:67:
39:ef:15:8f:50:85:0b:eb:b1:05:b8:20:21:ab:6f:4f:17:c0:
08:53:d9:ea:fa:1f:94:fb:af:2c:3b:bc:01:be:02:94:74:58:
45:42:0f:17:02:81:b2:93:27:36:9d:b1:79:85:b8:e8:1a:f4:
a6:f2:a4:12:51:4b:bf:e0:e0:8c:25:b7:54:95:a5:de:84:86:
d1:88:4a:72:36:9d:cd:d7:70:de:8a:c3:89:f4:00:b9:97:73:
72:5d:9d:2d:7b:17:01:72:f0:95:d2:b3:c2:cd:2f:4f:ad:7b:
63:51:0f:2f:19:7b:5e:06:2b:a8:b9:52:92:b3:ff:80:7b:15:
fc:5f:5a:4b:95:a9:33:9b:db:d6:a9:58:d9:f0:4e:38:3c:68:
5a:65:7b:ea:4b:5e:a8:b1:5a:86:b2:56:b5:b8:0d:d5:c3:03:
bd:92:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org