Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/AM_1UEoReJaMtIvpwZnbqB18pIM.roa
File: AM_1UEoReJaMtIvpwZnbqB18pIM.roa (raw, json)
Hash identifier: ks/xozGP8gUKLV0JVVznstqFUqzNIQt3EqGm8QtoMeo=
Subject key identifier: 00:CF:F5:50:4A:11:78:96:8C:B4:8B:E9:C1:99:DB:A8:1D:7C:A4:83
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 0184760B0350BA0CCBFAE0E181EC9EC1AC34
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/AM_1UEoReJaMtIvpwZnbqB18pIM.roa
Signing time: Mon 14 Nov 2022 12:09:03 +0000
ROA not before: Mon 14 Nov 2022 12:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.113.71.0/24 maxlen: 24
188.126.192.0/19 maxlen: 19
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
78.156.0.0/19 maxlen: 24
109.108.216.0/21 maxlen: 21
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:0b:03:50:ba:0c:cb:fa:e0:e1:81:ec:9e:c1:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Nov 14 12:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00cff5504a1178968cb48be9c199dba81d7ca483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:10:fc:a8:16:c9:71:ad:c6:df:ec:94:f0:
50:7f:43:cf:c1:5d:03:18:82:28:7c:57:a7:44:78:
41:02:1f:cd:9e:e4:17:9f:cd:c4:c6:35:74:68:db:
3b:cc:19:32:bb:70:67:5e:4c:39:90:3e:98:16:45:
63:8e:f3:8c:39:7d:4a:4f:31:b5:3e:36:c9:23:35:
f0:54:c0:a2:0d:68:24:a8:8c:6f:7f:2e:51:96:6b:
30:d2:38:9d:77:b8:17:eb:bc:22:32:9d:cf:86:87:
e4:0e:0d:ce:c4:6e:df:65:d1:f3:c1:29:75:88:dd:
2f:af:a0:e4:02:1e:05:be:f2:03:70:1f:7e:3a:20:
5c:bb:29:66:7d:10:a2:98:3b:29:27:8b:74:d0:b8:
a3:e4:9d:be:d1:eb:c5:90:17:60:d8:03:b8:fc:21:
ef:5c:c3:f7:2e:19:c1:7a:a7:c2:bd:57:5b:5a:25:
ba:5f:a3:e8:96:5d:5f:dc:3d:85:73:2f:e1:c2:99:
08:1d:a2:13:b7:37:0f:37:b5:4a:5f:c2:be:ca:cb:
be:10:3a:52:bc:0f:ae:fc:60:11:51:c8:6f:cf:63:
fe:6d:2d:96:7f:58:a5:59:e6:0d:9f:bc:34:3f:65:
f9:b3:35:25:c1:6e:d4:02:f0:c5:93:07:1f:ff:f7:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:F5:50:4A:11:78:96:8C:B4:8B:E9:C1:99:DB:A8:1D:7C:A4:83
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/AM_1UEoReJaMtIvpwZnbqB18pIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
20:ed:d4:b2:1a:30:cd:6a:77:f9:e1:fd:3c:ca:0b:28:9b:e0:
79:80:ac:1b:bb:b7:27:90:39:aa:60:23:e7:09:fb:a7:47:9a:
25:a6:97:4a:e2:f3:cd:6f:9f:40:da:2a:c8:7b:36:74:c9:c5:
0f:9b:c4:d5:dd:6a:d4:76:ad:0c:ad:f1:7b:68:34:61:d2:98:
32:6d:19:66:23:e2:1f:06:02:65:de:38:70:56:a2:a3:2a:ec:
52:a0:ce:47:b0:41:b6:74:fe:14:4c:1f:5a:88:83:a3:73:de:
cb:93:13:77:cb:13:33:10:ed:41:d3:18:96:88:29:08:c8:15:
5f:75:80:04:12:ae:25:43:13:6b:74:fe:df:d4:6d:cf:77:6f:
a4:6b:76:d9:6a:5b:21:51:05:4e:b3:05:45:fc:ca:9c:b7:01:
60:0d:ae:c1:a3:27:e2:c0:e4:87:15:ee:6b:a9:95:dd:e8:88:
0d:f8:8f:ac:9a:d4:a7:2a:83:cd:5e:df:dd:35:ad:6d:96:d2:
2a:c2:bc:59:fc:62:3b:53:db:48:2a:36:ea:45:d4:cd:52:40:
05:44:44:60:b0:48:72:5c:5f:0a:b0:91:6c:82:2a:ff:50:1a:
fc:44:6b:1f:31:0f:36:05:f3:ef:d0:1d:71:74:5c:2b:2e:e6:
92:eb:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org