Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/yNAuSXHgehPfWcX6eI45MJcRO-A.roa
File: yNAuSXHgehPfWcX6eI45MJcRO-A.roa (raw, json)
Hash identifier: bnxuAa3lMTC9hEoZpk4Ugr3iu+Qqhv7C3NGnq79RuXo=
Subject key identifier: C8:D0:2E:49:71:E0:7A:13:DF:59:C5:FA:78:8E:39:30:97:11:3B:E0
Certificate issuer: /CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Certificate serial: 0F82D049
Authority key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/yNAuSXHgehPfWcX6eI45MJcRO-A.roa
Signing time: Tue 28 Jun 2022 16:02:02 +0000
ROA not before: Tue 28 Jun 2022 16:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8987
IP address blocks: 51.60.0.0/16 maxlen: 24
51.188.0.0/15 maxlen: 24
51.114.0.0/16 maxlen: 24
51.80.0.0/16 maxlen: 24
51.208.0.0/15 maxlen: 24
51.134.0.0/16 maxlen: 24
193.26.64.0/19 maxlen: 24
152.134.0.0/16 maxlen: 24
51.20.0.0/14 maxlen: 24
51.74.0.0/16 maxlen: 24
51.202.0.0/15 maxlen: 24
57.101.0.0/16 maxlen: 24
51.40.0.0/16 maxlen: 24
51.168.0.0/15 maxlen: 24
51.121.0.0/16 maxlen: 24
212.167.0.0/16 maxlen: 24
185.72.192.0/22 maxlen: 24
51.160.0.0/16 maxlen: 24
51.32.0.0/16 maxlen: 24
51.214.0.0/15 maxlen: 24
143.65.224.0/19 maxlen: 24
51.100.0.0/15 maxlen: 24
51.228.0.0/15 maxlen: 24
212.255.0.0/16 maxlen: 24
51.127.0.0/16 maxlen: 24
51.248.0.0/15 maxlen: 24
83.118.240.0/20 maxlen: 24
51.220.0.0/15 maxlen: 24
195.119.0.0/16 maxlen: 24
195.247.0.0/16 maxlen: 24
51.92.0.0/14 maxlen: 24
51.240.0.0/16 maxlen: 24
51.112.0.0/15 maxlen: 24
51.139.0.0/16 maxlen: 24
51.166.0.0/15 maxlen: 24
83.118.228.0/22 maxlen: 24
143.65.0.0/17 maxlen: 24
83.118.234.0/23 maxlen: 24
57.65.0.0/16 maxlen: 24
143.65.128.0/18 maxlen: 24
194.52.0.0/16 maxlen: 24
51.180.0.0/15 maxlen: 24
193.186.210.0/24 maxlen: 24
83.119.128.0/17 maxlen: 24
194.234.0.0/15 maxlen: 24
194.133.0.0/16 maxlen: 24
213.72.0.0/17 maxlen: 24
51.72.0.0/15 maxlen: 24
51.200.0.0/15 maxlen: 24
57.99.0.0/16 maxlen: 24
195.254.0.0/17 maxlen: 24
83.119.64.0/18 maxlen: 24
51.172.0.0/15 maxlen: 24
51.44.0.0/14 maxlen: 24
51.226.0.0/15 maxlen: 24
193.57.169.0/24 maxlen: 24
51.125.0.0/16 maxlen: 24
193.57.170.0/23 maxlen: 24
51.192.0.0/15 maxlen: 24
51.118.0.0/15 maxlen: 24
145.17.0.0/16 maxlen: 24
195.17.0.0/16 maxlen: 24
51.24.0.0/13 maxlen: 24
193.57.254.0/23 maxlen: 24
85.213.0.0/16 maxlen: 24
57.85.0.0/16 maxlen: 24
193.57.182.0/23 maxlen: 24
130.24.0.0/16 maxlen: 24
193.57.181.0/24 maxlen: 24
51.152.0.0/15 maxlen: 24
51.78.0.0/16 maxlen: 24
51.206.0.0/15 maxlen: 24
51.151.0.0/16 maxlen: 24
85.151.0.0/16 maxlen: 24
51.50.0.0/16 maxlen: 24
193.218.122.0/24 maxlen: 24
51.16.0.0/15 maxlen: 24
194.198.0.0/16 maxlen: 24
51.70.0.0/16 maxlen: 24
57.104.0.0/13 maxlen: 24
51.212.0.0/15 maxlen: 24
159.239.0.0/16 maxlen: 24
51.84.0.0/14 maxlen: 24
51.232.0.0/15 maxlen: 24
51.3.0.0/16 maxlen: 24
51.131.0.0/16 maxlen: 24
51.76.0.0/16 maxlen: 24
51.204.0.0/15 maxlen: 24
200.224.0.0/16 maxlen: 24
51.224.0.0/15 maxlen: 24
51.96.0.0/14 maxlen: 24
51.150.0.0/16 maxlen: 24
51.164.0.0/15 maxlen: 24
51.90.0.0/16 maxlen: 24
51.117.0.0/16 maxlen: 24
51.184.0.0/15 maxlen: 24
51.110.0.0/16 maxlen: 24
51.156.0.0/15 maxlen: 24
145.55.0.0/16 maxlen: 24
51.82.0.0/16 maxlen: 24
159.109.0.0/16 maxlen: 24
151.176.0.0/16 maxlen: 24
51.48.0.0/15 maxlen: 24
51.176.0.0/15 maxlen: 24
62.230.0.0/16 maxlen: 24
51.102.0.0/16 maxlen: 24
83.129.0.0/16 maxlen: 24
51.129.0.0/16 maxlen: 24
159.244.0.0/16 maxlen: 24
83.116.0.0/15 maxlen: 24
51.244.0.0/15 maxlen: 24
185.143.16.0/22 maxlen: 24
200.197.0.0/16 maxlen: 24
51.69.0.0/16 maxlen: 24
84.48.128.0/17 maxlen: 24
80.203.128.0/17 maxlen: 24
51.108.0.0/16 maxlen: 24
51.0.64.0/18 maxlen: 24
51.236.0.0/15 maxlen: 24
51.34.0.0/15 maxlen: 24
195.61.0.0/16 maxlen: 24
51.0.0.0/16 maxlen: 24
51.128.0.0/16 maxlen: 24
51.0.32.0/19 maxlen: 24
193.202.192.0/19 maxlen: 24
51.196.0.0/15 maxlen: 24
57.95.0.0/16 maxlen: 24
51.122.0.0/15 maxlen: 24
51.88.0.0/16 maxlen: 24
51.216.0.0/15 maxlen: 24
51.0.128.0/17 maxlen: 24
2a11:47c0::/29 maxlen: 48
2a01:578:1080::/41 maxlen: 48
2a01:578:1010::/44 maxlen: 48
2a01:578:1020::/43 maxlen: 48
2a01:578:1040::/42 maxlen: 48
2a01:578::/32 maxlen: 48
2a01:578::/36 maxlen: 48
2a01:578:1400::/38 maxlen: 48
2a01:578:1100::/40 maxlen: 48
2a01:578:1200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260231241 (0xf82d049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Validity
Not Before: Jun 28 16:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8d02e4971e07a13df59c5fa788e393097113be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:be:ab:1b:6f:d2:ea:0b:63:1c:ec:22:9f:
b6:91:53:11:5a:34:ab:ac:51:10:b9:5c:fb:34:d8:
ed:ac:be:ab:82:63:54:db:32:7f:d3:47:84:7c:fc:
67:1c:3e:35:bd:1d:1a:34:e2:1c:d8:5b:6c:cd:36:
4f:e3:41:0f:06:66:b8:58:ad:fa:dd:c1:9e:27:84:
ea:56:38:aa:e6:f6:a4:90:7b:9b:dd:bc:44:9b:da:
30:40:f8:1d:10:94:4b:a3:0d:bc:be:f5:2f:45:65:
21:a1:59:bb:9c:2e:33:48:d0:98:73:e2:bd:bc:f2:
e2:88:a8:a8:a4:d7:91:97:42:3b:82:3f:14:93:a0:
3c:15:cd:83:f9:ac:18:8c:ba:f0:7c:fe:f8:f5:8d:
81:ee:35:18:54:20:da:ee:5c:fc:d5:22:03:24:08:
e5:6b:5f:68:8f:b9:6c:a7:b9:b9:14:a7:f0:ce:5d:
b0:47:98:c9:70:6a:fe:52:33:9c:41:b5:77:db:ce:
a8:ee:91:ef:af:ac:24:69:4e:63:dd:b1:c2:84:e5:
65:70:db:ec:c7:d4:55:b8:aa:6e:9c:c7:94:b0:1c:
8c:0e:9d:da:50:08:ca:9c:8e:57:8d:d1:4b:72:ef:
74:25:6b:ed:8c:55:f2:48:80:f0:be:6b:22:78:0d:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D0:2E:49:71:E0:7A:13:DF:59:C5:FA:78:8E:39:30:97:11:3B:E0
X509v3 Authority Key Identifier:
keyid:A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/yNAuSXHgehPfWcX6eI45MJcRO-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
51.3.0.0/16
51.16.0.0/15
51.20.0.0-51.32.255.255
51.34.0.0/15
51.40.0.0/16
51.44.0.0-51.50.255.255
51.60.0.0/16
51.69.0.0-51.70.255.255
51.72.0.0-51.74.255.255
51.76.0.0/16
51.78.0.0/16
51.80.0.0/16
51.82.0.0/16
51.84.0.0-51.88.255.255
51.90.0.0/16
51.92.0.0-51.102.255.255
51.108.0.0/16
51.110.0.0/16
51.112.0.0-51.114.255.255
51.117.0.0-51.119.255.255
51.121.0.0-51.123.255.255
51.125.0.0/16
51.127.0.0-51.129.255.255
51.131.0.0/16
51.134.0.0/16
51.139.0.0/16
51.150.0.0-51.153.255.255
51.156.0.0/15
51.160.0.0/16
51.164.0.0-51.169.255.255
51.172.0.0/15
51.176.0.0/15
51.180.0.0/15
51.184.0.0/15
51.188.0.0/15
51.192.0.0/15
51.196.0.0/15
51.200.0.0-51.209.255.255
51.212.0.0-51.217.255.255
51.220.0.0/15
51.224.0.0-51.229.255.255
51.232.0.0/15
51.236.0.0/15
51.240.0.0/16
51.244.0.0/15
51.248.0.0/15
57.65.0.0/16
57.85.0.0/16
57.95.0.0/16
57.99.0.0/16
57.101.0.0/16
57.104.0.0/13
62.230.0.0/16
80.203.128.0/17
83.116.0.0/15
83.118.228.0/22
83.118.234.0/23
83.118.240.0/20
83.119.64.0-83.119.255.255
83.129.0.0/16
84.48.128.0/17
85.151.0.0/16
85.213.0.0/16
130.24.0.0/16
143.65.0.0-143.65.191.255
143.65.224.0/19
145.17.0.0/16
145.55.0.0/16
151.176.0.0/16
152.134.0.0/16
159.109.0.0/16
159.239.0.0/16
159.244.0.0/16
185.72.192.0/22
185.143.16.0/22
193.26.64.0/19
193.57.169.0-193.57.171.255
193.57.181.0-193.57.183.255
193.57.254.0/23
193.186.210.0/24
193.202.192.0/19
193.218.122.0/24
194.52.0.0/16
194.133.0.0/16
194.198.0.0/16
194.234.0.0/15
195.17.0.0/16
195.61.0.0/16
195.119.0.0/16
195.247.0.0/16
195.254.0.0/17
200.197.0.0/16
200.224.0.0/16
212.167.0.0/16
212.255.0.0/16
213.72.0.0/17
IPv6:
2a01:578::/32
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:26:c1:00:7e:3f:64:8a:cf:9b:79:1c:a7:89:d7:df:09:05:
9b:f7:c3:79:a4:b8:99:66:e9:7b:96:20:d8:ad:85:99:c2:21:
9c:a3:b7:18:c9:18:48:2e:ef:7b:0e:a4:6b:b0:8f:ec:20:24:
28:63:ae:75:1e:89:46:23:c9:53:7e:f4:75:d7:d7:b2:0f:af:
6b:8b:48:77:f8:d8:5f:a8:5a:bf:e3:d9:b8:e4:0e:10:90:15:
36:4a:72:2e:7c:a8:ce:e2:db:43:46:99:20:7e:0f:0a:2a:aa:
2d:dc:de:bf:25:1e:f1:77:49:8a:e4:ac:3a:cb:f8:05:15:9f:
26:ba:70:38:5d:c6:42:4f:b3:05:c8:fa:40:07:e8:78:83:c6:
1a:b6:ea:22:98:0b:4e:28:af:8a:3a:b6:9d:36:aa:bf:16:2e:
28:43:16:5f:59:6b:c0:ad:9b:fe:3f:73:fd:85:c5:45:fc:18:
08:3f:a3:89:e8:6a:2b:68:af:98:88:40:96:31:8e:cf:17:45:
97:99:89:33:55:f8:52:19:f2:bd:fe:96:09:f8:bf:c6:a4:46:
d7:f5:81:63:f3:41:db:3a:51:90:f0:e3:51:57:b0:e7:61:24:
dc:f8:5a:9f:a0:8c:1c:51:a4:5b:1d:d5:e2:62:ef:39:c1:3e:
fb:42:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org