Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/xnOa4tzD-Okd7XTkwB65ln1AJUE.roa
File: xnOa4tzD-Okd7XTkwB65ln1AJUE.roa (raw, json)
Hash identifier: AWqvlYCWzqEY1tm6EJgbj4z+zl5qImUvSfd3k8HucQU=
Subject key identifier: C6:73:9A:E2:DC:C3:F8:E9:1D:ED:74:E4:C0:1E:B9:96:7D:40:25:41
Certificate issuer: /CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Certificate serial: 0186EF2E7ED2A475C5FEA337E13E90DE5432
Authority key identifier: C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/xnOa4tzD-Okd7XTkwB65ln1AJUE.roa
Signing time: Fri 17 Mar 2023 10:47:27 +0000
ROA not before: Fri 17 Mar 2023 10:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12392
IP address blocks: 85.26.80.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.128.0/19 maxlen: 19
85.26.96.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.201.160.0/19 maxlen: 19
85.201.160.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.96.0/19 maxlen: 19
85.26.64.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
149.154.192.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
85.201.240.0/20 maxlen: 20
149.154.208.0/21 maxlen: 21
149.154.208.0/20 maxlen: 20
149.154.216.0/21 maxlen: 21
149.154.224.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/19 maxlen: 19
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.224.0/19 maxlen: 19
213.213.240.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/19 maxlen: 19
85.201.32.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.64.0/19 maxlen: 19
85.201.0.0/19 maxlen: 19
85.201.0.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
213.213.192.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
185.3.161.0/24 maxlen: 24
185.3.162.0/23 maxlen: 23
185.3.160.0/24 maxlen: 24
185.3.160.0/22 maxlen: 22
82.212.128.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
62.197.64.0/18 maxlen: 18
109.89.128.0/20 maxlen: 20
109.89.128.0/19 maxlen: 19
62.197.80.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
109.89.160.0/19 maxlen: 19
109.89.160.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.96.0/19 maxlen: 19
62.197.64.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/19 maxlen: 19
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.224.0/19 maxlen: 19
78.129.16.0/20 maxlen: 20
109.88.160.0/20 maxlen: 20
109.88.160.0/19 maxlen: 19
213.189.176.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.192.0/19 maxlen: 19
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
109.88.112.0/20 maxlen: 20
95.182.209.0/24 maxlen: 24
95.182.208.0/20 maxlen: 20
109.88.128.0/19 maxlen: 19
109.88.128.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
109.88.144.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
78.129.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
109.89.32.0/19 maxlen: 19
109.89.32.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.64.0/19 maxlen: 19
109.88.224.0/19 maxlen: 19
109.88.224.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
212.68.192.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
212.68.192.0/18 maxlen: 18
109.89.0.0/19 maxlen: 19
109.89.0.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.27.64.0/21 maxlen: 21
85.27.64.0/20 maxlen: 20
85.27.80.0/20 maxlen: 20
149.154.240.0/20 maxlen: 20
85.27.0.0/20 maxlen: 20
85.27.0.0/21 maxlen: 21
85.27.0.0/17 maxlen: 17
85.27.8.0/21 maxlen: 21
85.27.16.0/20 maxlen: 20
85.27.16.0/21 maxlen: 21
85.27.24.0/21 maxlen: 21
85.27.32.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
109.88.64.0/19 maxlen: 19
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
95.182.160.0/20 maxlen: 20
95.182.176.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.96.0/20 maxlen: 20
109.88.0.0/20 maxlen: 20
109.88.0.0/19 maxlen: 19
85.27.96.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.16.0/20 maxlen: 20
85.27.112.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.32.0/19 maxlen: 19
95.182.128.0/17 maxlen: 17
109.88.48.0/20 maxlen: 20
95.182.128.0/20 maxlen: 20
2a02:2788:600::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:2e:7e:d2:a4:75:c5:fe:a3:37:e1:3e:90:de:54:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Validity
Not Before: Mar 17 10:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6739ae2dcc3f8e91ded74e4c01eb9967d402541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:ac:a5:4c:a3:8f:14:76:5e:c3:88:da:cf:
45:50:d4:86:66:f6:92:8a:08:d2:e8:a0:1e:d3:45:
c9:d7:c4:15:85:66:09:0c:56:ea:42:88:fe:81:ca:
a8:47:f3:ae:aa:1c:ed:8c:50:3c:73:14:2d:77:07:
d4:30:26:5f:b9:ba:a5:df:46:0e:36:26:4c:79:ca:
ef:db:9d:6d:a2:7e:70:84:70:8c:7d:ac:6b:4a:b7:
f7:11:d4:7d:ee:7c:79:9f:98:d9:ad:2a:8d:b2:3f:
b9:c0:a1:d4:a2:12:5d:40:1d:d9:6d:1b:d8:56:95:
4a:1f:9b:30:b7:aa:42:98:e7:4f:45:30:89:1c:01:
1d:95:10:95:5d:e5:39:af:5a:67:c1:62:6e:60:71:
7f:50:90:a9:bb:16:7d:e1:79:16:f7:bd:98:e3:7c:
52:99:c7:8f:8c:9a:6c:26:a4:5f:97:99:65:07:2d:
97:43:c7:d6:09:df:95:2b:7b:e7:7c:db:48:a2:ad:
ea:07:9c:c9:17:ca:14:23:ca:c8:b8:ed:75:9e:1e:
44:bb:8b:45:f8:b5:b0:b2:ca:8a:19:05:1a:b3:ec:
16:35:30:70:73:f1:f6:c7:0a:e6:0a:48:91:20:de:
ca:ae:53:b1:3a:60:3b:56:3c:4e:33:47:76:d2:85:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:9A:E2:DC:C3:F8:E9:1D:ED:74:E4:C0:1E:B9:96:7D:40:25:41
X509v3 Authority Key Identifier:
keyid:C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/xnOa4tzD-Okd7XTkwB65ln1AJUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
75:ce:57:e2:f8:e4:fe:2e:ed:1b:2b:cb:77:43:2c:24:f9:df:
79:57:06:03:e8:a6:72:be:4a:96:a8:42:c3:89:30:88:6a:6f:
93:d6:21:4e:dc:d9:e5:54:62:73:46:28:6b:d5:1e:68:62:c5:
a8:f4:0c:34:6a:98:7b:6d:23:f1:c3:76:93:f7:45:4c:b1:23:
ff:99:94:a6:66:40:db:6e:d1:8f:e1:94:7c:5b:96:73:f8:bf:
90:14:f0:ea:a4:08:27:b1:23:37:ea:72:90:9b:26:9c:ec:0b:
21:f7:06:76:3a:6a:ea:0d:7e:a2:2a:90:09:a6:34:4b:4b:52:
0c:f1:c4:06:0b:2e:e3:2b:7f:83:e6:76:18:c9:88:69:ac:20:
e1:da:e8:fa:93:5a:5d:32:59:7c:ce:d4:9d:1d:15:4d:fe:8f:
2a:aa:dc:8d:4d:b7:ad:68:4d:17:ca:27:6d:3b:92:35:34:ee:
1d:da:40:c9:ed:12:9d:51:c1:04:49:53:bb:c9:f8:37:33:c5:
04:4d:55:64:27:bd:7d:02:eb:e7:c5:50:cf:b4:62:bb:14:4f:
fc:e6:b3:8e:ab:1d:97:56:6e:dd:0b:08:f0:4b:2d:e8:5e:da:
e7:b0:fe:27:6e:ce:5f:5e:22:c8:b5:ff:c6:f0:e4:c7:cd:d6:
86:02:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:37 2024 by rpki-client on console-fra.rpki-client.org