Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/erVO_XBm7elZ6pMIke7CAWpZ9Sw.roa
File: erVO_XBm7elZ6pMIke7CAWpZ9Sw.roa (raw, json)
Hash identifier: uraQwSreYGuwXvLN3gYY3PwG+mpqE3Z0Of7zKMfXNQo=
Subject key identifier: 7A:B5:4E:FD:70:66:ED:E9:59:EA:93:08:91:EE:C2:01:6A:59:F5:2C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D06B9BFC3335A1AE79C2C478E2F5EE29
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/erVO_XBm7elZ6pMIke7CAWpZ9Sw.roa
Signing time: Thu 13 Oct 2022 08:17:36 +0000
ROA not before: Thu 13 Oct 2022 08:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.46.171.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.240.0/20 maxlen: 20
84.46.234.0/23 maxlen: 23
84.46.236.0/22 maxlen: 22
86.38.246.0/23 maxlen: 23
86.38.242.0/23 maxlen: 23
86.38.241.0/24 maxlen: 24
86.38.248.0/21 maxlen: 21
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
86.38.204.0/23 maxlen: 23
86.38.214.0/24 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.32.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.178.0/23 maxlen: 23
86.38.184.0/23 maxlen: 23
86.38.186.0/23 maxlen: 23
86.38.180.0/23 maxlen: 23
86.38.182.0/23 maxlen: 23
89.117.228.0/23 maxlen: 23
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 23
89.117.72.0/21 maxlen: 21
89.117.80.0/22 maxlen: 22
89.117.84.0/23 maxlen: 23
89.117.87.0/24 maxlen: 24
89.117.88.0/22 maxlen: 22
89.117.94.0/23 maxlen: 23
89.117.96.0/22 maxlen: 22
89.117.101.0/24 maxlen: 24
89.117.102.0/23 maxlen: 23
89.117.111.0/24 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.116.0/23 maxlen: 23
89.117.118.0/24 maxlen: 24
89.117.16.0/21 maxlen: 21
89.117.12.0/23 maxlen: 23
89.117.24.0/23 maxlen: 23
89.117.28.0/22 maxlen: 22
89.117.27.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.117.36.0/23 maxlen: 23
89.117.32.0/23 maxlen: 23
89.117.40.0/21 maxlen: 21
89.117.48.0/20 maxlen: 20
89.117.64.0/22 maxlen: 22
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 23
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 23
89.117.124.0/24 maxlen: 24
89.117.120.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.132.0/22 maxlen: 22
89.117.139.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.142.0/23 maxlen: 23
89.117.144.0/21 maxlen: 21
89.117.158.0/23 maxlen: 23
89.117.157.0/24 maxlen: 24
89.117.160.0/22 maxlen: 22
89.117.164.0/24 maxlen: 24
89.117.168.0/23 maxlen: 23
89.117.167.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
89.117.172.0/22 maxlen: 22
89.116.108.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 23
89.116.115.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 23
89.116.126.0/23 maxlen: 23
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.146.0/23 maxlen: 23
89.116.148.0/23 maxlen: 23
89.116.150.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.52.0/23 maxlen: 23
89.116.58.0/23 maxlen: 23
89.116.64.0/22 maxlen: 22
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 23
89.116.80.0/21 maxlen: 21
89.116.88.0/23 maxlen: 23
89.116.92.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.224.0/21 maxlen: 21
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.6.0/23 maxlen: 23
89.117.8.0/23 maxlen: 23
89.116.163.0/24 maxlen: 24
89.116.164.0/23 maxlen: 23
89.116.166.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.172.0/23 maxlen: 23
89.116.168.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 23
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:6b:9b:fc:33:35:a1:ae:79:c2:c4:78:e2:f5:ee:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab54efd7066ede959ea930891eec2016a59f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:6e:11:f0:51:d0:70:61:ce:10:cd:3e:1f:
3c:aa:36:42:cc:2a:1a:60:b7:80:d5:f4:36:e1:79:
47:66:ef:d4:24:2d:6c:9e:b1:86:58:32:59:da:7a:
1f:25:be:ec:ad:1c:27:8f:ef:5d:e9:07:03:e3:29:
35:a3:7f:c0:73:8e:fa:da:c9:31:ca:d7:cf:89:8d:
60:ed:5a:24:ff:2d:1d:79:e9:34:48:4f:cc:28:7c:
6e:ac:a6:17:78:9c:d8:c8:51:92:b5:ae:d3:37:6f:
da:f3:0c:dc:ad:ea:3e:4f:0c:35:37:b1:3c:56:3f:
36:c8:c2:ae:db:ac:8b:48:24:0d:27:3d:85:0c:d0:
c5:1c:1a:6c:8e:11:c7:6e:cd:fd:8e:e7:14:42:9a:
f4:48:83:b8:57:2b:0e:42:a1:36:82:f3:18:c0:a1:
ce:c2:2d:5d:91:14:11:d8:74:aa:0f:32:f7:28:f6:
5e:07:98:af:fe:f7:d7:83:51:86:ee:1b:14:ce:7d:
e1:f6:b5:26:63:64:dc:9c:d7:ac:3f:63:62:99:a6:
8e:a5:d5:68:8e:dd:d3:7b:be:0b:5f:7e:42:e9:1e:
a7:37:d5:7f:58:98:b8:ae:b4:9c:89:79:17:b4:33:
52:79:ec:1f:05:1b:1c:3b:ff:92:56:cd:f7:42:1c:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:4E:FD:70:66:ED:E9:59:EA:93:08:91:EE:C2:01:6A:59:F5:2C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/erVO_XBm7elZ6pMIke7CAWpZ9Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.171.0/24
84.46.234.0-84.46.255.255
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.225.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.24.0-89.116.39.255
89.116.52.0-89.116.54.255
89.116.58.0/23
89.116.64.0-89.116.70.255
89.116.80.0-89.116.89.255
89.116.92.0/24
89.116.99.0-89.116.100.255
89.116.103.0/24
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.154.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.198.0/24
89.116.203.0/24
89.116.208.0/22
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0/24
89.116.237.0/24
89.116.239.0/24
89.116.248.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.16.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.36.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.103.255
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.151.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:13:14:2c:a9:87:ba:0d:45:16:8d:12:ff:b2:4e:69:ee:81:
ea:c0:81:68:92:40:67:c1:55:46:7d:08:a6:66:5c:3e:ea:bf:
d7:5b:0f:41:b0:18:ce:e4:8c:7c:6c:f9:7c:81:17:ca:4e:34:
1d:cb:10:7b:13:c6:4c:02:b1:c8:97:0a:b5:d2:dc:93:ca:a0:
0e:3b:00:d1:8c:a9:18:1b:b3:ec:a7:06:ba:a0:35:23:20:e3:
7a:c5:cc:60:35:ea:02:2c:ef:28:01:1a:a8:06:46:f4:c5:18:
4b:cd:37:c0:a1:16:68:f1:85:12:3c:c6:f5:d7:f0:e5:5b:e0:
ef:25:6b:3e:dc:18:0e:6f:1b:02:1a:a2:4a:50:e0:1f:7b:27:
f5:45:7c:75:7b:98:0e:97:52:5d:86:28:52:48:03:a6:4f:11:
8d:c7:4d:d9:77:d4:55:b2:f8:d7:c6:08:e9:7b:1d:bd:42:f2:
81:b5:4b:a1:d2:9d:06:88:bb:1f:27:4b:80:bd:e9:90:55:eb:
95:ec:ad:15:db:77:b0:25:53:89:e6:e1:c8:71:5f:c7:89:a1:
73:a2:b9:c6:c2:6c:58:fe:e1:65:b1:5e:e1:77:83:ae:33:34:
6b:9f:08:b1:74:b8:eb:14:4b:53:13:6a:3f:4a:a0:8e:45:6c:
2e:28:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org