Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m82CZiRjlGLym_2Lmvb6mtuSxfY.roa
File: m82CZiRjlGLym_2Lmvb6mtuSxfY.roa (raw, json)
Hash identifier: iRSzAtZ+v+mlIBHdwd6iXc2WI96zULxcTDvnSR3k6WM=
Subject key identifier: 9B:CD:82:66:24:63:94:62:F2:9B:FD:8B:9A:F6:FA:9A:DB:92:C5:F6
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF5BD9B3068123D7439C86B0C5BF1
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m82CZiRjlGLym_2Lmvb6mtuSxfY.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31287
IP address blocks: 46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
46.55.254.0/24 maxlen: 24
77.78.152.0/21 maxlen: 21
77.78.153.0/24 maxlen: 24
77.78.154.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
151.237.29.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
185.46.160.0/22 maxlen: 22
185.46.163.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
185.200.40.0/22 maxlen: 22
195.85.215.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f5:bd:9b:30:68:12:3d:74:39:c8:6b:0c:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcd826624639462f29bfd8b9af6fa9adb92c5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:48:a0:40:77:6f:f6:b2:fc:65:93:04:0b:
23:f3:c9:3b:6e:59:fc:a8:88:dc:7b:20:26:27:97:
15:be:9b:92:1e:f8:00:2e:52:9d:32:be:0c:53:44:
55:70:41:10:74:e8:e3:49:98:81:5e:28:70:10:2b:
cb:75:a1:5a:90:07:8c:28:a9:17:63:59:2a:57:2d:
d8:c1:92:8c:69:cd:86:47:15:68:72:1b:3e:4b:61:
b0:42:33:3f:02:ac:1b:a7:e8:43:eb:88:3f:57:54:
11:3a:a8:4f:19:62:c3:f3:58:88:7a:f2:d0:13:0c:
4c:be:95:86:37:a9:ba:02:7c:4a:69:5e:08:a8:20:
6e:85:d4:6c:f4:35:d5:5d:99:0e:08:0b:b1:2f:f3:
f8:20:8f:f6:ef:9f:71:51:9a:39:24:5c:b5:4c:46:
73:26:c1:20:de:82:c6:8e:48:48:e6:cd:85:f2:e9:
37:61:01:fd:fe:cf:30:37:63:98:f0:bf:b8:09:f7:
dc:d9:45:46:ac:e7:9d:c2:0a:67:87:9a:61:22:60:
a5:44:db:93:4a:f8:c4:a9:81:dd:1e:83:9e:3a:cb:
2c:b9:64:77:e7:36:ff:85:72:cf:e1:21:2d:38:fb:
9a:f7:ab:93:ca:05:92:95:9a:8c:25:9d:6e:c3:be:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:82:66:24:63:94:62:F2:9B:FD:8B:9A:F6:FA:9A:DB:92:C5:F6
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m82CZiRjlGLym_2Lmvb6mtuSxfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.10.0/23
85.187.15.0/24
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.222.0/24
85.187.232.0/24
85.187.248.0/24
151.237.29.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
185.200.40.0/22
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
a8:98:2b:d4:95:60:2e:87:4f:d1:38:9d:4e:a5:fd:5f:49:3c:
5c:55:28:4c:b5:c5:f9:8f:06:38:87:39:0d:c5:8b:36:e8:f9:
a4:c3:23:85:ed:f0:73:9f:40:70:24:82:a9:ce:c3:df:83:04:
30:49:d9:95:ed:e7:a5:46:39:26:67:e5:a2:98:43:34:71:98:
dc:89:b4:39:ca:64:94:bc:06:b8:4a:0b:9d:69:c6:c2:b6:01:
d2:52:22:fc:aa:76:61:8b:9a:25:d5:d1:2d:ba:03:02:17:d2:
89:04:3b:9f:f4:d1:65:9f:2c:9a:99:81:5a:6c:22:fe:a3:cd:
c9:b6:75:a2:24:27:fa:d1:b1:ae:82:dc:a2:61:ff:77:fb:7f:
65:42:78:a3:06:87:78:7a:d5:da:4e:cc:fb:60:ac:60:37:2b:
0f:b0:db:f0:4b:6c:06:e3:b7:dd:28:ed:fb:23:fc:d4:a3:90:
5b:4d:94:da:dc:e8:7d:b3:4f:8c:83:bf:bc:1b:4a:1b:21:de:
19:58:4c:5b:7c:7a:80:d5:bf:1f:4f:59:17:ec:c6:89:28:ff:
1c:8e:ee:af:28:52:31:a5:ed:9a:c3:b2:79:d3:2a:8e:c1:c6:
37:75:46:06:7e:45:3a:7a:ab:54:63:82:ca:b4:20:67:c6:f6:
f5:53:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:25 2025 by rpki-client