Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/TN2LzYS3GEAiw1bRXfbjWYvaNJw.roa
File: TN2LzYS3GEAiw1bRXfbjWYvaNJw.roa (raw, json)
Hash identifier: GsL7ytHARu0noxVFuJn5c8wnud+43VD60w0b5tESU1c=
Subject key identifier: 4C:DD:8B:CD:84:B7:18:40:22:C3:56:D1:5D:F6:E3:59:8B:DA:34:9C
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 018451623D6C0F3F1D692D973E3E7CBBE4A1
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/TN2LzYS3GEAiw1bRXfbjWYvaNJw.roa
Signing time: Mon 07 Nov 2022 09:18:23 +0000
ROA not before: Mon 07 Nov 2022 09:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.126.192.0/19 maxlen: 19
188.113.71.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
109.108.216.0/21 maxlen: 21
78.156.0.0/19 maxlen: 24
84.209.234.0/24 maxlen: 24
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:62:3d:6c:0f:3f:1d:69:2d:97:3e:3e:7c:bb:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Nov 7 09:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cdd8bcd84b7184022c356d15df6e3598bda349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:1a:2a:5d:cb:1b:6d:e9:2c:cd:f2:a9:8c:
a0:f8:55:95:3f:b4:e3:b8:d7:cb:bd:cf:0a:d7:55:
df:28:7d:24:b1:72:59:62:ea:ab:83:39:f7:49:1b:
f5:94:f3:b4:93:ce:0d:1c:8a:fc:f0:43:d2:9f:6b:
25:07:a3:c1:ce:09:6e:52:fd:7f:36:42:2f:31:82:
93:a0:b0:99:d6:1c:fc:dc:3d:69:d2:71:85:68:a7:
03:f8:c2:10:ca:4c:71:9c:de:4d:e5:bc:53:cf:09:
20:d6:38:66:ba:c2:0c:8d:8e:bb:10:0c:45:0e:b4:
ca:13:55:a1:7d:bd:5c:87:d8:15:63:ff:a9:67:e1:
48:a8:bc:93:1d:df:7a:cf:5f:f8:87:67:82:63:26:
fe:c6:d1:11:b7:ca:cd:06:e5:1e:74:c6:c0:ce:8e:
29:fb:a0:ea:31:84:7e:da:56:7f:e6:9c:1a:d4:6f:
99:70:19:e7:06:d8:2c:e1:99:9b:6f:d2:1a:81:0a:
92:1f:14:63:f5:3c:b0:b4:4d:b8:2a:61:ca:cc:b2:
e3:93:ea:37:ab:23:9b:9c:cf:6c:13:7d:ad:63:2d:
0a:ec:4a:03:df:56:d5:53:ea:1b:3e:d6:bb:8b:27:
7a:9f:a8:f8:e7:80:c6:25:d7:5d:e6:9e:02:58:10:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:8B:CD:84:B7:18:40:22:C3:56:D1:5D:F6:E3:59:8B:DA:34:9C
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/TN2LzYS3GEAiw1bRXfbjWYvaNJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:03:a8:35:ed:01:ab:06:bf:54:80:ee:f9:41:e2:47:53:83:
69:96:18:e8:0f:4e:04:99:ae:b2:3c:d1:94:56:33:e6:72:45:
9c:ad:04:8b:75:7d:ab:e4:4b:8b:0f:e9:91:9d:5e:3b:d5:7d:
56:92:51:b4:4a:6d:84:93:cc:34:d4:b4:5e:3a:bd:01:16:e3:
6d:39:89:d4:e6:91:68:16:e8:e9:9a:48:13:ee:c5:a4:00:95:
39:1e:d4:f5:32:bf:50:9c:14:a8:6b:e1:5c:d0:be:9f:fe:5a:
1a:13:fe:7f:70:4f:9b:8d:60:34:f8:e3:1a:16:ed:92:08:88:
35:78:06:8f:37:d2:53:a5:8a:cd:96:0f:81:f6:fa:60:48:ab:
ce:dc:08:01:18:b5:7f:ed:e5:77:95:25:5c:33:6d:47:c5:30:
24:f9:2d:87:70:9c:9c:64:6b:de:ce:f9:eb:33:79:9a:f7:cb:
d6:cd:93:bc:dc:54:1f:17:d1:2d:e3:2c:a6:9a:92:79:86:cf:
ca:da:72:d1:d5:22:4c:a3:ae:27:9e:ba:9b:a6:2b:06:7a:52:
2b:99:a7:73:c4:c8:89:5e:eb:3d:3f:13:fc:be:90:7e:6a:f1:
8f:1f:4f:63:59:62:f7:3d:fc:b8:8e:50:89:65:1f:ad:16:44:
57:85:16:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:33 2025 by rpki-client