Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pDyn0LsGn7Lh7VcuelSeeX0nak.roa
File: 8pDyn0LsGn7Lh7VcuelSeeX0nak.roa (raw, json)
Hash identifier: vt/v0cZeHnzDq9sI5bvDf6KIo9W7tsYmwp49M13gEHo=
Subject key identifier: F2:90:F2:9F:42:EC:1A:7E:CB:87:B5:5C:B9:E9:52:79:E5:F4:9D:A9
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01943ADC88E41C211663D7873D12481426BB
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pDyn0LsGn7Lh7VcuelSeeX0nak.roa
Signing time: Mon 06 Jan 2025 09:05:18 +0000
ROA not before: Mon 06 Jan 2025 09:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8895
IP address blocks: 45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.19.20/30 maxlen: 30
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 25
212.26.39.0/24 maxlen: 25
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.250.0/24 maxlen: 24
2001:1490::/32 maxlen: 32
2001:1490::/48 maxlen: 48
2001:1490:0:800::/64 maxlen: 64
2001:1490:0:a00::/64 maxlen: 64
2001:1490:0:c00::/64 maxlen: 64
2001:1490:0:1000::/64 maxlen: 64
2001:1490:1::/48 maxlen: 48
2001:1490:1:800::/64 maxlen: 64
2001:1490:1:a00::/64 maxlen: 64
2001:1490:1:c00::/64 maxlen: 64
2001:1490:1:e00::/64 maxlen: 64
2001:1490:1:1000::/64 maxlen: 64
2001:1490:1:1200::/64 maxlen: 64
2001:1490:1:1600::/64 maxlen: 64
2001:1490:1:1a00::/64 maxlen: 64
2001:1490:1:2000::/64 maxlen: 64
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:dc:88:e4:1c:21:16:63:d7:87:3d:12:48:14:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 6 09:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f290f29f42ec1a7ecb87b55cb9e95279e5f49da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:91:9c:df:2c:d2:35:a1:61:3b:0b:bc:4d:
e3:38:36:31:52:d1:3a:31:4b:d0:2e:4b:11:62:bb:
61:a2:d5:27:d7:a6:dd:8b:8a:7a:5b:6c:5d:2b:32:
85:78:7a:a7:86:96:ec:74:a3:5b:42:52:4e:04:87:
35:b0:bc:c5:c5:33:db:62:ce:dc:a2:3d:07:37:a6:
de:be:bb:44:12:bc:83:1e:62:c1:e3:19:9f:c0:77:
81:6a:6d:14:ed:fe:c5:05:02:73:f2:9c:64:bc:77:
fb:9b:e5:6b:af:2a:68:31:eb:25:ec:f7:aa:14:50:
ae:eb:93:a3:eb:03:32:90:5c:0e:eb:34:c6:23:81:
25:4e:4c:01:4a:97:4e:ce:b9:a6:a8:9a:ac:5e:a7:
2a:d8:c9:d9:01:dc:d8:9f:4f:e8:13:c5:53:85:a1:
d0:c0:c3:46:c4:21:7d:ae:58:7a:ea:8e:fc:9d:60:
b4:19:ae:60:82:c2:5d:0b:64:c0:52:72:61:75:a9:
5f:23:b8:61:0b:cd:f6:a0:5d:42:19:d0:c3:08:d1:
b4:bf:10:f6:9e:d7:7b:03:40:6a:eb:2c:98:a8:97:
59:43:a9:d6:a2:32:17:e3:d6:40:b4:e8:66:ee:01:
a5:a5:00:9a:4d:62:17:ca:88:45:f4:44:02:20:5b:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:F2:9F:42:EC:1A:7E:CB:87:B5:5C:B9:E9:52:79:E5:F4:9D:A9
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pDyn0LsGn7Lh7VcuelSeeX0nak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.15.0/24
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
09:5e:6a:5b:8f:3d:0b:83:ef:be:1a:65:12:3d:9b:2a:58:99:
c5:a8:ed:f1:5c:f3:71:7b:c1:71:a7:d4:bf:cc:ef:6f:99:c9:
5f:aa:3d:77:14:0a:68:c6:35:37:ee:03:29:03:cc:ad:29:b1:
91:41:0b:91:bb:12:d0:fa:87:d1:05:33:ac:1a:33:5c:36:c2:
bc:1b:88:7a:6c:d3:3e:55:39:ad:2a:a0:93:d0:3b:a1:d7:7d:
1a:08:32:5c:0a:7e:bc:90:a6:23:95:5f:17:7a:2e:95:93:f4:
16:36:f6:dd:0d:32:d8:65:a0:44:9f:d5:73:08:f4:35:bf:b4:
59:ee:b8:f9:db:a8:16:fa:e1:a5:68:66:a3:75:a4:56:1a:e2:
fd:1f:45:b8:72:d3:ff:34:da:24:78:66:b8:f4:87:a4:63:75:
dc:99:ef:7f:4c:55:96:50:18:67:11:76:4b:9f:c4:32:47:a5:
5d:f8:bc:d3:c1:5f:41:b9:d6:da:7f:0c:b4:a1:6a:7d:66:7e:
fc:0a:c7:89:93:05:22:c2:c6:57:c0:88:47:f6:eb:eb:dd:ab:
09:f1:91:eb:bb:85:62:05:bf:43:27:0c:aa:60:2f:c3:f2:dc:
52:93:2a:ab:42:8a:31:c3:84:d8:a4:dd:d4:af:ef:69:c7:ca:
6d:cf:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:07:03 2025 by rpki-client