Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1kKY4iJe1wYwqDLK7BEqIaVWpzc.roa
File: 1kKY4iJe1wYwqDLK7BEqIaVWpzc.roa (raw, json)
Hash identifier: 42lnIj9ahst2LxQ/xAhWSVsJhrt5pdH2zbCxkHwZH8w=
Subject key identifier: D6:42:98:E2:22:5E:D7:06:30:A8:32:CA:EC:11:2A:21:A5:56:A7:37
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F28DF3
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1kKY4iJe1wYwqDLK7BEqIaVWpzc.roa
Signing time: Sat 01 Jan 2022 13:00:28 +0000
ROA not before: Sat 01 Jan 2022 13:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
95.174.160.0/19 maxlen: 24
93.182.192.0/18 maxlen: 24
77.233.96.0/19 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
159.20.8.0/21 maxlen: 24
86.63.224.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
89.170.0.0/16 maxlen: 24
95.168.0.0/19 maxlen: 24
85.117.128.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
80.185.0.0/16 maxlen: 24
46.165.64.0/18 maxlen: 24
188.7.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
188.224.0.0/17 maxlen: 24
188.141.128.0/17 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
95.136.128.0/17 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
78.159.0.0/19 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
91.88.0.0/16 maxlen: 24
178.19.0.0/20 maxlen: 24
95.175.160.0/19 maxlen: 24
2a00:cc80::/32 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:d780::/32 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:7180:8000::/46 maxlen: 48
2a00:ba80::/32 maxlen: 48
2a00:a580::/32 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:5e80::/32 maxlen: 48
2a00:c780::/32 maxlen: 48
2a00:b280::/32 maxlen: 48
2a00:e080::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670207475 (0x27f28df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d64298e2225ed70630a832caec112a21a556a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:a2:7b:6a:4a:ea:42:b9:29:0f:5e:20:6a:
5b:a0:0a:32:98:7a:20:3e:4d:a1:b0:e0:85:ec:9a:
08:c3:5d:ad:8e:e7:6e:f4:ec:f0:e9:a0:7c:44:77:
e3:e2:35:79:ac:72:1b:71:f5:66:9f:13:8a:30:75:
21:5c:7a:d5:4a:d8:fa:2f:fe:98:50:97:fa:58:f6:
05:4f:b4:8c:01:24:41:ff:0d:16:9d:24:03:00:c1:
2d:03:45:d5:af:7c:2d:c3:8c:fa:bc:e9:7e:66:c7:
8a:ce:38:1f:c0:59:78:d5:a3:9b:ff:b5:ec:43:f6:
74:3d:64:aa:2a:01:77:80:de:2d:4f:fa:93:b5:ec:
a0:d2:bb:f9:a0:8f:3c:ca:a8:40:66:0a:2c:f6:a6:
e7:e5:1c:74:f9:54:94:19:0a:7d:df:e9:44:30:7b:
84:6d:ae:b4:aa:39:4d:f5:b6:c7:71:ee:fd:ac:5b:
15:67:f4:01:52:4b:81:26:de:4a:f8:6c:1f:cc:74:
40:73:bd:a2:c0:97:f9:54:3e:45:5a:f3:76:aa:2a:
bb:4d:77:51:48:05:fa:e3:2d:47:c5:b4:7a:0b:37:
fa:af:3b:b5:a0:71:b8:f3:cb:e8:c9:66:af:a2:c7:
b5:55:fb:d7:7e:bf:be:39:ff:a1:f7:37:e6:70:ce:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:42:98:E2:22:5E:D7:06:30:A8:32:CA:EC:11:2A:21:A5:56:A7:37
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/1kKY4iJe1wYwqDLK7BEqIaVWpzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
77.84.0.0/16
77.233.96.0/19
78.159.0.0/19
79.132.32.0/19
80.185.0.0/16
82.151.0.0/19
85.117.128.0/19
85.192.192.0/18
86.63.224.0/19
87.100.0.0/17
88.219.0.0/16
89.170.0.0/16
89.185.160.0/19
91.88.0.0/16
91.91.0.0/16
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
213.176.192.0/19
IPv6:
2a00:5e80::/32
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:a580::/32
2a00:b280::/32
2a00:ba80::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e080::/32
2a00:e880::/32
2a00:ec80::/32
Signature Algorithm: sha256WithRSAEncryption
38:9c:7f:a5:9e:03:66:2e:58:e7:0d:99:fb:a0:19:32:d7:55:
a0:9d:e1:54:99:08:d7:5f:3d:10:74:f7:0e:23:23:78:1a:84:
c8:5b:f5:7f:e0:88:9f:60:1f:2a:5f:c9:23:f2:65:e5:11:67:
22:c7:43:d9:02:db:8e:a1:ad:95:50:98:69:09:8d:5c:40:7e:
1a:d3:bc:d9:3f:46:50:44:66:6c:33:05:d4:3e:4f:c1:df:d6:
11:a5:9b:04:17:e0:57:f5:61:4c:29:4b:4f:33:2f:95:99:e8:
ba:d4:08:f0:3c:54:50:ec:98:a7:f5:75:03:e2:41:da:34:cd:
92:32:5a:2d:af:ee:21:26:11:01:63:d5:be:8b:22:d6:c7:5e:
1c:ff:f5:f7:cd:d5:3a:46:4a:43:e4:2a:0b:88:2a:6a:9d:73:
49:e2:3b:97:ae:6c:e0:7a:49:14:2b:cd:e1:e7:89:3a:46:48:
5f:60:b2:1d:71:ca:fd:96:72:da:12:9a:f2:ef:6b:af:27:b5:
90:75:5e:db:b1:4c:69:bb:28:00:33:df:b5:5f:9f:01:21:4d:
85:45:46:93:5c:bc:16:a7:68:62:67:59:29:c1:2d:d5:b6:d0:
2a:df:b4:07:7a:ba:e8:a3:7b:b4:9c:b3:7e:4a:22:36:d4:d0:
56:ba:2c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:03 2025 by rpki-client