Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/hOvINcpaZknwxXziWpZHAp6Ex0g.roa
File: hOvINcpaZknwxXziWpZHAp6Ex0g.roa (raw, json)
Hash identifier: p54meIck65l1Lp0+gVNwogm0UOoCTI8cy7Z9iuTTzA0=
Subject key identifier: 84:EB:C8:35:CA:5A:66:49:F0:C5:7C:E2:5A:96:47:02:9E:84:C7:48
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019483CE8E1C958E227695260D3EE2EB65AB
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/hOvINcpaZknwxXziWpZHAp6Ex0g.roa
Signing time: Mon 20 Jan 2025 13:02:19 +0000
ROA not before: Mon 20 Jan 2025 13:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.213.255.0/26 maxlen: 26
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 32
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:f::/49 maxlen: 49
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:f8::/45 maxlen: 49
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:ce:8e:1c:95:8e:22:76:95:26:0d:3e:e2:eb:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 20 13:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ebc835ca5a6649f0c57ce25a9647029e84c748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:90:97:f0:c5:7c:bc:60:d6:c8:21:1b:34:
ac:e5:6c:44:c0:31:04:c4:7e:9d:24:84:eb:38:fd:
88:4c:4d:f7:b7:a4:41:9f:e6:8f:f0:1c:ae:bc:a3:
a9:fe:a0:ae:5e:c4:14:02:2a:13:50:f2:f0:40:a9:
99:86:02:35:24:9c:1f:8a:36:9a:df:70:54:42:32:
64:23:f0:7d:22:8e:b9:7f:5c:01:02:e6:13:d6:a9:
94:97:0b:83:a8:d5:4e:16:98:1f:f3:17:aa:0e:b9:
90:32:1f:8d:69:77:7e:ba:88:bb:d8:b4:6b:79:1e:
53:0e:16:8b:4d:33:3f:21:11:2e:3e:14:2f:d0:fe:
7e:71:2c:a0:35:f5:56:6f:58:9a:ab:db:6a:1c:bf:
2d:80:95:62:ed:75:7d:f0:73:17:90:35:d4:45:5b:
30:ad:aa:40:85:a1:03:14:6d:6f:11:a7:e9:de:c6:
59:c9:0b:d8:40:09:97:38:b8:a4:1e:2b:62:ef:de:
ef:8a:76:31:4d:5f:b0:b4:d4:ae:db:a2:f8:5e:e1:
b4:55:e3:77:a7:09:99:2e:5d:bb:25:c5:d3:8a:29:
99:de:09:12:c4:a3:92:aa:08:78:24:4c:ef:aa:6f:
38:2a:a0:59:71:29:2f:c8:7c:7c:54:76:af:5f:3a:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:C8:35:CA:5A:66:49:F0:C5:7C:E2:5A:96:47:02:9E:84:C7:48
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/hOvINcpaZknwxXziWpZHAp6Ex0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:f8::-2a02:4540:103:ffff:ffff:ffff:ffff:ffff
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
4c:11:e1:25:ae:64:17:46:df:85:0b:48:fe:7a:db:4e:4d:a3:
80:4e:92:bf:5b:f3:e7:4a:b4:40:40:72:f4:f2:42:09:66:5c:
1c:a4:81:f0:56:45:c3:b2:ad:2f:7d:8f:37:39:88:ad:89:ff:
52:cb:70:6e:43:b5:3e:e4:35:5b:70:73:1d:38:1b:d1:24:5a:
97:8c:98:f9:b9:8a:cf:f1:1d:73:19:73:82:8b:3d:47:77:98:
aa:d8:21:9f:c3:41:47:2a:0f:90:56:49:4c:d1:5b:79:c5:14:
1a:bd:cf:93:9f:2f:85:61:95:df:d7:3a:6e:c9:cb:e2:06:7c:
00:d3:58:e2:65:10:fc:af:0e:49:fc:7d:9b:99:d5:f9:59:88:
e4:1d:de:26:1f:23:f0:d5:e4:9b:a7:9f:0c:c2:4b:c5:02:c6:
43:48:7d:cc:69:97:99:b5:69:65:ad:2a:0d:d7:fa:50:2d:6d:
5b:93:5b:1a:56:b5:4d:dc:4e:f5:26:42:1d:77:16:51:8c:6d:
48:fd:a3:77:9c:52:86:a7:68:a7:62:86:dc:ab:fc:58:6b:46:
37:38:b8:c6:ff:28:d2:c2:f0:af:86:35:89:0c:de:b2:bb:db:
ea:52:0c:02:08:6a:61:f9:81:a5:67:8f:4a:7a:5d:da:a5:47:
8d:03:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:15 2025 by rpki-client