Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/O_-r6AZIiVVlfZFZ-YEHc0Z0UaI.roa
File: O_-r6AZIiVVlfZFZ-YEHc0Z0UaI.roa (raw, json)
Hash identifier: HQvPmYszPim0o6HOq+UD08ZfUFe24TEf6qmSm4Gtkuc=
Subject key identifier: 3B:FF:AB:E8:06:48:89:55:65:7D:91:59:F9:81:07:73:46:74:51:A2
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0194266B16AB9B8F1F68CE3CA2BCFC5B516B
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/O_-r6AZIiVVlfZFZ-YEHc0Z0UaI.roa
Signing time: Thu 02 Jan 2025 09:48:59 +0000
ROA not before: Thu 02 Jan 2025 09:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.150.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:16:ab:9b:8f:1f:68:ce:3c:a2:bc:fc:5b:51:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 09:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bffabe806488955657d9159f9810773467451a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:e6:66:99:be:d6:b1:a1:4a:27:ba:a6:fd:
e0:5f:90:c1:3c:e3:32:fd:cc:22:e1:09:62:99:f1:
cc:c2:08:5b:68:0b:45:08:11:6b:77:cd:eb:f9:be:
11:3e:93:d9:a3:c0:0f:4e:8a:f9:41:e3:bf:a4:7b:
05:14:18:61:19:ea:3a:32:b9:81:0e:62:b8:3d:cd:
66:3c:0e:c6:6e:39:ba:01:41:b1:62:8f:30:38:fa:
fa:13:b2:a6:92:32:dd:f3:49:57:91:05:76:ca:74:
05:91:7c:be:10:a2:27:72:47:82:95:d4:e9:7d:04:
d1:cb:b2:a0:be:21:49:e0:e6:05:0e:58:7d:05:5e:
bf:af:e9:11:d1:c6:1a:cd:10:90:dd:d2:5d:db:ad:
91:d1:37:27:e2:e9:48:11:dc:5c:1d:5a:1f:5e:1a:
66:2c:29:45:c9:f7:6b:a5:2e:a0:99:0b:71:93:c5:
8e:b9:59:a2:05:1a:7a:10:bd:6f:12:7c:90:57:64:
fd:48:ce:d7:ad:02:ab:eb:c0:9d:0d:b2:16:76:b1:
e4:15:54:df:e3:58:0d:b5:43:47:3b:42:af:db:8d:
ea:75:5a:65:20:73:dd:ad:d9:cd:7d:15:57:08:e9:
c8:3b:43:5b:e1:1d:ad:06:ff:3f:67:b3:ec:86:e7:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FF:AB:E8:06:48:89:55:65:7D:91:59:F9:81:07:73:46:74:51:A2
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/O_-r6AZIiVVlfZFZ-YEHc0Z0UaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
b4:5a:ed:74:df:d5:ef:c4:09:0d:c7:3e:8a:df:3a:7b:4f:e7:
34:57:28:f2:e9:e6:55:c5:a9:6c:1d:e6:07:b7:7e:50:9c:e6:
a6:c3:4d:ad:0c:ef:6e:d6:92:48:b1:82:bd:62:2b:da:b5:a2:
f4:78:b4:e5:6d:9a:d3:82:de:f5:9f:c3:36:9b:f8:da:72:16:
75:75:ea:c6:40:3d:e8:ca:4c:9a:47:b9:8e:5f:7d:9b:e2:8f:
18:d9:0d:72:b1:57:93:76:a1:95:2f:d5:98:0a:e2:f1:50:db:
0d:a9:24:b0:28:53:ee:33:40:91:cf:13:a8:fc:12:9a:cb:a4:
1e:0b:11:b9:32:86:8d:5e:d8:98:a7:c8:a9:68:00:88:99:79:
bf:d0:c8:52:f2:53:46:0c:30:1d:67:b6:16:30:cf:ba:ea:ca:
04:25:f6:c8:33:bb:c7:54:59:7a:8b:c5:0e:85:4e:60:b8:1a:
25:c7:06:c0:15:c4:40:77:02:8e:ca:e9:6e:a8:d2:26:e4:5e:
a2:dc:d8:40:54:e6:d5:7f:77:5c:31:bd:43:9c:97:66:d1:11:
c3:08:4c:2f:44:21:dd:f0:c4:ab:99:65:de:cf:e9:68:1f:c1:
a9:cf:1f:b9:c7:30:67:67:a3:57:08:06:96:5d:47:4f:6b:ee:
f8:47:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:47:52 2025 by rpki-client