Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/9L_1mBjt99zXF40qYr_O6y2QbsE.roa
File: 9L_1mBjt99zXF40qYr_O6y2QbsE.roa (raw, json)
Hash identifier: k7FuYkV59HauSqsnOjmzLVNUp/bLC0YBxaQpGdWAgEo=
Subject key identifier: F4:BF:F5:98:18:ED:F7:DC:D7:17:8D:2A:62:BF:CE:EB:2D:90:6E:C1
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0194228E23BBC914C19C20AE417D02F147F5
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/9L_1mBjt99zXF40qYr_O6y2QbsE.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 23
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 20
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:23:bb:c9:14:c1:9c:20:ae:41:7d:02:f1:47:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4bff59818edf7dcd7178d2a62bfceeb2d906ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:e6:79:73:fe:8a:ab:55:3c:0b:fd:73:9b:
fc:19:e9:a3:9b:e2:c4:a7:ae:da:e7:56:a9:b2:fa:
ea:94:bb:5d:49:f4:e7:6b:17:92:98:b4:c4:6b:10:
a4:06:34:b9:5b:a1:c8:8a:58:4a:e2:6b:81:b1:8e:
e8:2a:b0:a2:71:c5:65:73:3c:17:88:98:a2:5d:07:
a9:17:54:ea:08:bf:ea:ab:97:1e:e1:81:9d:98:f9:
6d:6d:42:10:14:01:c6:7a:86:6c:51:ba:cd:45:d9:
8f:fb:e7:17:38:1a:fa:6f:5b:a8:47:93:df:44:8c:
82:5d:83:b4:05:37:a8:1b:01:7b:67:ab:3e:fa:9e:
df:4b:f2:1f:f4:f6:f1:17:3e:83:53:38:75:30:75:
bc:4a:67:64:14:6d:8d:04:89:95:46:5b:26:f7:0d:
60:b8:32:87:f2:f3:fc:07:64:98:c6:14:f4:49:82:
9b:1a:e6:0c:3c:58:88:92:23:a7:68:44:1c:6e:12:
8d:2e:2c:64:ff:d8:db:0d:29:9f:35:ba:2d:9e:12:
24:7d:df:f3:e9:3c:c5:04:8b:34:31:4d:cd:84:60:
4a:a7:da:c3:b6:e2:db:ae:56:69:35:ce:f0:7c:8d:
18:01:70:28:f6:19:e7:48:9a:3d:1b:8a:17:f3:38:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:F5:98:18:ED:F7:DC:D7:17:8D:2A:62:BF:CE:EB:2D:90:6E:C1
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/9L_1mBjt99zXF40qYr_O6y2QbsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
71:7b:53:e6:10:3d:46:ff:9d:9e:f3:45:54:35:74:22:5c:da:
f1:e9:30:fc:97:30:df:46:58:f1:70:6b:ff:fa:af:27:17:6e:
56:95:d4:0e:79:7e:cb:d7:eb:d9:b5:a7:6f:f4:fe:7b:bc:03:
ca:70:c7:f2:a9:eb:b4:5e:06:64:88:7f:ae:13:54:a5:70:3c:
1a:2c:93:ef:18:29:b9:6f:36:47:ec:44:20:51:b1:80:bd:ab:
fc:88:05:51:95:d0:53:1f:c7:45:67:cc:56:dd:01:ac:8c:c8:
81:c5:ca:7e:5d:d7:b4:6e:4f:e6:94:24:32:07:60:f7:e4:c6:
95:e7:f0:db:44:bc:5f:0b:31:fa:b7:77:be:d5:1f:48:46:d7:
9b:17:26:c7:c9:70:c1:fe:07:65:03:61:e3:97:68:42:a3:32:
56:a6:dc:da:62:29:d0:64:d4:0d:a0:da:ba:1f:bd:5d:f5:c0:
ce:2b:4e:26:d8:1e:6c:9b:87:18:74:08:6e:02:73:d7:7e:02:
26:28:0e:4d:56:89:d5:87:6a:87:c8:58:92:c2:ae:e6:0d:ca:
e4:3f:41:35:89:c0:29:de:21:4e:e7:8c:c3:5a:e0:c5:d8:8b:
a7:1b:b1:40:34:6b:e2:53:9d:20:a4:3c:9e:8b:5a:6f:43:d9:
6d:0e:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net