Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/sqgH8inQ1vCy_Vff5X_xtHppVeg.roa
File: sqgH8inQ1vCy_Vff5X_xtHppVeg.roa (raw, json)
Hash identifier: loDhxKNcB2eJ0wsJBztCmaOwbNCyJ97VJyqruZ/Toic=
Subject key identifier: B2:A8:07:F2:29:D0:D6:F0:B2:FD:57:DF:E5:7F:F1:B4:7A:69:55:E8
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 01856CCAEB66893A098BC045AA0A0D4F7052
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/sqgH8inQ1vCy_Vff5X_xtHppVeg.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.113.71.0/24 maxlen: 24
188.126.192.0/19 maxlen: 19
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
78.156.0.0/19 maxlen: 24
109.108.216.0/21 maxlen: 21
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:eb:66:89:3a:09:8b:c0:45:aa:0a:0d:4f:70:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a807f229d0d6f0b2fd57dfe57ff1b47a6955e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:1d:af:f1:b9:32:38:5b:0f:03:7a:f9:56:
47:0c:a8:be:4c:d6:19:09:48:08:11:5a:93:95:d4:
0b:65:21:10:37:01:6d:f8:a3:69:78:b5:72:28:8e:
f3:d6:f2:11:b0:97:4d:a7:16:05:ce:ae:20:65:5f:
3c:c8:73:88:7a:08:e1:3e:bb:d3:1c:85:c1:49:f4:
35:a6:62:7a:d8:bc:cb:e5:00:52:ee:5b:db:ef:81:
02:de:66:a1:f4:b5:89:7b:a5:b8:3a:26:05:56:9f:
84:91:a3:86:0f:9e:40:5e:2c:a7:e5:c0:e1:3c:04:
6f:ad:9b:22:38:b3:1e:88:a7:56:3f:d0:ce:09:bd:
ad:fa:9f:04:aa:71:51:b3:36:b2:83:7f:8d:b1:79:
80:ec:95:d1:b7:93:68:ee:d2:a0:aa:cc:cb:08:d1:
03:55:1b:d3:d2:a3:ca:3c:30:78:2f:5f:17:f3:4d:
f4:d2:01:50:81:d7:f6:68:82:2d:0a:15:e1:b5:d6:
c0:85:e4:cb:a2:96:44:3f:2b:aa:c7:c3:cb:36:b5:
9d:9e:87:15:32:26:d0:53:71:60:bc:e6:8c:fc:8d:
b1:8b:db:57:7a:7d:47:12:f3:ef:a0:5e:69:12:d9:
53:2e:1e:37:f0:a1:58:52:91:33:86:99:d1:f7:ab:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:07:F2:29:D0:D6:F0:B2:FD:57:DF:E5:7F:F1:B4:7A:69:55:E8
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/sqgH8inQ1vCy_Vff5X_xtHppVeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
53:91:d1:0a:4d:a2:4f:ca:c3:b7:af:f7:92:2e:15:63:38:b3:
d1:f8:90:57:b1:9b:7b:64:3d:1f:42:82:a8:c7:0a:6a:aa:8b:
fd:9c:41:60:57:7d:b1:55:85:67:61:61:87:28:22:fd:f8:f1:
8e:60:69:d0:7b:fb:3f:3e:64:03:1d:84:56:1d:64:78:79:e1:
42:a7:b0:94:f0:25:cb:95:25:84:2e:6c:25:00:3b:98:d2:65:
2e:43:4b:31:63:2a:cc:92:df:36:f1:12:b8:0e:5e:e7:1e:21:
0f:e0:cf:36:55:68:28:45:fa:df:5d:65:4f:f1:7b:da:09:14:
97:8b:3f:95:68:a1:58:ff:e7:85:a9:f0:37:82:1d:fa:0f:f4:
02:31:f8:4c:b0:f9:f2:22:6f:60:0a:83:6b:a0:fd:04:d4:d8:
5b:00:33:b1:e4:ae:d7:38:6e:d5:e4:ea:5d:79:7e:a9:b1:0d:
ba:d3:97:db:88:fb:17:50:b7:8c:ba:7f:16:32:f9:e2:ab:82:
71:01:ea:47:90:6f:b9:8d:29:95:b3:2d:e2:3a:fe:97:8e:9e:
9e:8c:a2:33:16:ee:5e:b0:63:ec:5f:e8:d4:a0:e6:58:84:f2:
fa:db:1e:e2:96:7f:dd:22:db:ab:76:f6:ef:62:70:d7:5a:57:
6e:f1:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org