Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/coV4A9slqlwZOHNEO4m1jktuBT4.roa
File: coV4A9slqlwZOHNEO4m1jktuBT4.roa (raw, json)
Hash identifier: Zx0P3f2B1D19qhD3/KxU3rUEChB4emnMuT+d+87lZ7k=
Subject key identifier: 72:85:78:03:DB:25:AA:5C:19:38:73:44:3B:89:B5:8E:4B:6E:05:3E
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01916B4581CB6EC3B92B6DA955D15000299D
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/coV4A9slqlwZOHNEO4m1jktuBT4.roa
Signing time: Mon 19 Aug 2024 15:33:22 +0000
ROA not before: Mon 19 Aug 2024 15:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 22
61.8.156.0/23 maxlen: 24
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.240.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.0.0/19 maxlen: 19
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/24 maxlen: 24
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.96.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.88.0/22 maxlen: 22
94.134.89.0/24 maxlen: 24
94.134.94.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
94.134.112.0/22 maxlen: 22
94.134.160.0/21 maxlen: 21
94.134.168.0/22 maxlen: 22
94.134.172.0/22 maxlen: 23
94.134.176.0/21 maxlen: 21
94.134.192.0/22 maxlen: 22
94.134.216.0/21 maxlen: 21
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 32
2001:1438:1::/48 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 48
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:45:81:cb:6e:c3:b9:2b:6d:a9:55:d1:50:00:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Aug 19 15:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72857803db25aa5c193873443b89b58e4b6e053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:08:3c:53:bb:5e:a7:bf:92:b3:2e:66:58:
a9:3a:11:c5:80:91:2d:9a:a8:25:0d:16:fe:37:db:
65:02:d3:f1:35:cd:63:03:d4:ac:6b:cf:fa:53:ba:
7e:b0:6a:65:ee:b5:a3:e1:b6:5b:ae:6a:bd:cc:6e:
d5:c3:2e:1f:d2:a1:ea:25:67:54:58:34:48:6a:0c:
22:25:2c:39:cd:06:2f:9f:e5:d5:35:ed:56:cc:87:
fe:e2:23:b0:b6:a4:11:68:b1:ab:14:9b:77:7c:95:
33:e9:24:d4:48:ae:2a:b4:f5:fc:90:e3:3d:50:0f:
55:b9:67:3f:fa:a9:cc:83:46:da:58:da:64:d1:e1:
7b:0e:36:31:d4:71:a3:e3:a3:30:60:e3:d5:37:31:
60:59:28:8d:ef:4d:d8:b1:9c:0d:0a:a3:14:cf:f0:
97:6b:9f:c2:9a:ff:79:5e:34:ed:5b:50:9b:e8:f1:
9c:95:4b:f7:09:ab:95:8e:d2:77:7f:c9:27:ea:b9:
89:07:81:f9:d8:12:2d:f9:80:1e:42:54:e1:13:0c:
73:4e:53:39:b4:0e:e5:f8:90:e8:25:3e:e7:a3:d9:
61:37:16:a0:bd:d4:c2:e3:5a:bc:f9:61:e8:07:27:
bf:41:b7:05:2e:63:57:7f:7e:9a:b6:2c:36:74:26:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:78:03:DB:25:AA:5C:19:38:73:44:3B:89:B5:8E:4B:6E:05:3E
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/coV4A9slqlwZOHNEO4m1jktuBT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
60:dc:a7:d0:35:68:2a:11:a5:2a:d6:4b:05:20:18:13:84:9c:
4b:30:4a:26:8b:cb:49:3d:07:01:ea:3e:e1:39:0b:e2:97:e3:
d3:63:04:17:d3:5c:dc:9d:ba:8e:d0:96:24:14:31:b2:94:20:
a4:94:6e:fd:82:18:54:e4:22:ab:38:5f:ea:91:03:5a:46:b0:
13:73:38:c3:7d:39:61:cc:e8:7a:15:81:a4:5d:b3:ac:71:43:
16:e1:55:df:9d:2b:c2:2f:4e:4c:5f:58:2c:72:1e:b3:f9:86:
14:8e:eb:da:4f:ef:2a:49:80:51:41:97:0c:fd:e3:68:32:24:
df:5c:ea:1e:a0:1f:85:e4:a6:5c:f2:3b:be:43:16:a4:38:7b:
fa:f9:cc:86:ab:83:eb:ae:60:01:1a:65:09:b2:17:65:8d:54:
f2:4f:a3:4b:9e:2e:d3:6f:e6:49:02:3e:f9:e9:cc:dd:2f:4d:
5c:e8:52:31:e5:41:f5:42:03:83:15:eb:70:2f:3a:d1:ac:da:
75:f7:70:6e:34:21:35:db:6a:a8:64:da:36:16:e1:11:99:1c:
88:65:9b:03:80:36:9d:fa:10:81:cc:7c:d2:4f:7c:bc:7e:63:
6b:df:ce:f9:65:60:fd:47:dc:7b:81:b9:82:08:78:6b:30:0c:
3c:ac:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:02:34 2025 by rpki-client