Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/ARwPPGNtk0ORZvR19mlCopldAfE.roa
File: ARwPPGNtk0ORZvR19mlCopldAfE.roa (raw, json)
Hash identifier: EQ13JOfWXNWv+LeKSeNzRCI1ErVY3HonLBova7d0ccg=
Subject key identifier: 01:1C:0F:3C:63:6D:93:43:91:66:F4:75:F6:69:42:A2:99:5D:01:F1
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01FBC3AA
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/ARwPPGNtk0ORZvR19mlCopldAfE.roa
Signing time: Wed 30 Mar 2022 14:26:57 +0000
ROA not before: Wed 30 Mar 2022 14:26:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.128.0/20 maxlen: 20
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
2a00:ca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33276842 (0x1fbc3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Mar 30 14:26:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=011c0f3c636d93439166f475f66942a2995d01f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:38:78:00:7f:f4:c2:20:48:06:c5:1b:42:
b5:26:06:04:9f:4e:db:47:d1:a5:16:46:d5:dc:0f:
3c:10:d1:44:39:ee:ee:5d:78:87:b7:c3:a1:7b:df:
a1:7c:91:d6:f4:f1:09:0a:0a:1e:40:81:17:6b:f1:
ee:33:9a:7c:52:0a:3c:35:90:2f:8a:2a:a4:a7:dc:
96:40:ab:c6:1d:83:35:6c:64:88:b8:ea:6c:fe:c0:
43:64:4c:39:53:59:fa:81:8f:77:bf:b7:97:5b:ab:
b4:b7:b4:9e:8d:04:99:3e:8f:d6:ff:5f:85:06:90:
6e:8a:70:03:42:87:ca:34:81:e3:7d:f9:54:a0:28:
5a:56:20:db:fe:a4:45:ac:6d:53:ab:e2:43:3a:c0:
61:c6:10:82:bb:3d:16:6f:54:11:e9:c9:bc:e8:e5:
c8:24:93:86:c6:5c:86:e8:1b:19:7e:e8:e0:be:50:
f4:4a:5a:50:38:15:39:3b:89:7b:2a:55:04:8e:bd:
ed:52:45:6a:2b:da:05:4d:fe:d6:71:e4:82:fc:6f:
b6:bb:39:07:1d:85:65:8b:a3:da:b9:c2:f8:84:f4:
cc:8d:c3:42:ec:6f:10:2b:f8:10:a4:df:d5:dd:34:
ae:06:39:08:86:d5:31:6e:f7:3a:22:16:f7:e9:1e:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:0F:3C:63:6D:93:43:91:66:F4:75:F6:69:42:A2:99:5D:01:F1
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/ARwPPGNtk0ORZvR19mlCopldAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:eb:bb:c8:fa:cd:dd:25:2c:f4:b6:cd:89:bd:69:c6:a2:1a:
33:6e:cd:80:4b:2a:f1:d9:4f:92:b6:7a:51:0f:0f:ed:b7:73:
49:75:86:52:e8:8a:dd:f8:b4:66:ce:1c:9e:07:c8:12:a8:46:
e2:c1:52:e7:a2:82:10:c6:6a:aa:06:9d:65:04:dc:94:e7:40:
ca:fb:41:a0:bb:e3:33:27:81:6b:79:0a:30:93:7d:45:c3:a5:
44:c9:ad:2d:9f:da:ea:a7:3b:70:65:15:8c:17:30:34:47:ce:
1b:4f:61:09:3c:03:bf:84:15:b4:98:4b:12:3a:20:05:c6:d5:
9c:bb:89:50:dc:26:d9:81:56:95:bd:d0:57:6c:fe:e7:5e:c6:
7d:44:7b:10:38:76:19:02:58:00:fa:d3:b1:19:99:38:82:9c:
e9:fb:b3:77:f2:75:ea:0b:ce:a2:d4:64:af:03:bb:c8:05:b7:
6e:67:78:4f:d2:f1:36:9e:7c:fd:00:12:b6:ee:ce:04:71:a9:
c4:7b:7e:84:e9:11:4f:cc:10:83:3b:87:89:35:da:ed:11:ca:
ae:a8:e3:e3:46:a9:38:a9:d8:ff:cf:b4:31:5c:d4:53:ba:9d:
5a:1c:02:2d:a5:50:53:5d:a4:14:5a:c5:c0:4f:1a:f9:77:f2:
16:a4:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:41 2025 by rpki-client