Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/gzLs6Xol47tKfjPqLr4RNwy_8T0.roa
File: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (raw, json)
Hash identifier: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=
Subject key identifier: 83:32:EC:E9:7A:25:E3:BB:4A:7E:33:EA:2E:BE:11:37:0C:BF:F1:3D
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 019441DA63DC9BA213C50F5A64CA6540B7A5
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/gzLs6Xol47tKfjPqLr4RNwy_8T0.roa
Signing time: Tue 07 Jan 2025 17:40:18 +0000
ROA not before: Tue 07 Jan 2025 17:40:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8781
IP address blocks: 37.208.128.0/17 maxlen: 24
37.210.0.0/15 maxlen: 24
37.211.96.0/22 maxlen: 24
37.211.100.0/22 maxlen: 24
37.211.104.0/22 maxlen: 24
37.211.108.0/22 maxlen: 24
37.211.112.0/22 maxlen: 24
37.211.116.0/22 maxlen: 24
37.211.120.0/22 maxlen: 24
37.211.124.0/22 maxlen: 24
37.211.192.0/20 maxlen: 24
37.211.208.0/22 maxlen: 24
37.211.212.0/22 maxlen: 24
37.211.216.0/22 maxlen: 24
37.211.224.0/22 maxlen: 24
37.211.228.0/22 maxlen: 24
37.211.232.0/22 maxlen: 24
37.211.236.0/22 maxlen: 24
37.211.240.0/20 maxlen: 24
78.100.0.0/15 maxlen: 24
78.100.2.0/24 maxlen: 24
78.100.3.0/24 maxlen: 24
78.100.6.0/24 maxlen: 24
78.100.16.0/20 maxlen: 20
78.100.28.0/24 maxlen: 24
78.100.29.0/24 maxlen: 24
78.100.32.0/20 maxlen: 24
78.100.32.0/24 maxlen: 24
78.100.48.0/20 maxlen: 24
78.100.48.0/24 maxlen: 24
78.100.53.0/24 maxlen: 24
78.100.59.0/24 maxlen: 24
78.100.64.0/20 maxlen: 24
78.100.80.0/20 maxlen: 24
78.100.94.0/24 maxlen: 24
78.100.112.0/20 maxlen: 24
78.100.128.0/19 maxlen: 24
78.100.155.0/24 maxlen: 24
78.101.0.0/22 maxlen: 24
78.101.4.0/22 maxlen: 22
78.101.8.0/22 maxlen: 22
78.101.12.0/22 maxlen: 22
78.101.32.0/22 maxlen: 22
78.101.36.0/22 maxlen: 22
78.101.40.0/22 maxlen: 22
78.101.44.0/22 maxlen: 22
78.101.48.0/22 maxlen: 22
78.101.52.0/22 maxlen: 22
78.101.56.0/22 maxlen: 22
78.101.60.0/22 maxlen: 22
82.148.96.0/19 maxlen: 24
82.148.96.0/24 maxlen: 24
82.148.97.0/24 maxlen: 24
82.148.98.0/24 maxlen: 24
82.148.99.0/24 maxlen: 24
82.148.101.0/24 maxlen: 24
82.148.102.0/24 maxlen: 24
82.148.105.0/24 maxlen: 24
82.148.106.0/24 maxlen: 24
82.148.109.0/24 maxlen: 24
82.148.110.0/24 maxlen: 24
82.148.113.0/24 maxlen: 24
82.148.117.0/24 maxlen: 24
82.148.120.0/24 maxlen: 24
82.148.124.0/24 maxlen: 24
86.62.192.0/18 maxlen: 24
86.62.192.0/22 maxlen: 22
86.62.196.0/22 maxlen: 22
86.62.200.0/22 maxlen: 22
86.62.204.0/22 maxlen: 22
86.62.241.0/24 maxlen: 24
89.211.0.0/16 maxlen: 24
89.211.3.0/24 maxlen: 24
89.211.4.0/24 maxlen: 24
89.211.5.0/24 maxlen: 24
89.211.6.0/24 maxlen: 24
89.211.7.0/24 maxlen: 24
89.211.12.0/24 maxlen: 24
89.211.13.0/24 maxlen: 24
89.211.16.0/21 maxlen: 24
89.211.24.0/21 maxlen: 24
89.211.32.0/20 maxlen: 24
89.211.34.0/24 maxlen: 24
89.211.48.0/20 maxlen: 24
176.202.0.0/15 maxlen: 24
176.202.240.0/20 maxlen: 24
176.203.0.0/20 maxlen: 20
176.203.16.0/20 maxlen: 20
176.203.32.0/20 maxlen: 20
176.203.48.0/20 maxlen: 20
176.203.64.0/20 maxlen: 20
176.203.80.0/20 maxlen: 20
176.203.96.0/20 maxlen: 20
176.203.112.0/20 maxlen: 20
176.203.128.0/20 maxlen: 20
176.203.144.0/20 maxlen: 20
176.203.160.0/20 maxlen: 20
176.203.176.0/20 maxlen: 20
176.203.192.0/20 maxlen: 20
176.203.208.0/20 maxlen: 20
176.203.224.0/20 maxlen: 20
176.203.240.0/20 maxlen: 20
178.152.0.0/15 maxlen: 24
178.152.32.0/20 maxlen: 20
178.152.64.0/20 maxlen: 20
178.152.128.0/22 maxlen: 22
178.152.132.0/22 maxlen: 22
178.152.136.0/22 maxlen: 22
178.152.140.0/22 maxlen: 22
178.152.144.0/20 maxlen: 20
178.152.160.0/22 maxlen: 22
178.152.164.0/22 maxlen: 22
178.152.168.0/22 maxlen: 22
178.152.172.0/22 maxlen: 22
178.152.176.0/20 maxlen: 20
178.152.192.0/22 maxlen: 22
178.152.196.0/22 maxlen: 22
178.152.200.0/22 maxlen: 22
178.152.204.0/22 maxlen: 22
178.152.208.0/20 maxlen: 20
178.152.224.0/22 maxlen: 22
178.152.228.0/22 maxlen: 22
178.152.232.0/22 maxlen: 22
178.152.236.0/22 maxlen: 22
178.152.240.0/20 maxlen: 20
178.153.64.0/20 maxlen: 20
178.153.128.0/20 maxlen: 20
178.153.144.0/22 maxlen: 22
178.153.148.0/22 maxlen: 22
178.153.152.0/22 maxlen: 22
178.153.156.0/22 maxlen: 22
185.96.224.0/22 maxlen: 24
212.77.192.0/19 maxlen: 24
212.77.192.0/24 maxlen: 24
212.77.199.0/24 maxlen: 24
212.77.202.0/24 maxlen: 24
212.77.204.0/24 maxlen: 24
212.77.207.0/24 maxlen: 24
212.77.209.0/24 maxlen: 24
212.77.210.0/24 maxlen: 24
212.77.211.0/24 maxlen: 24
212.77.217.0/24 maxlen: 24
212.77.218.0/24 maxlen: 24
212.77.220.0/24 maxlen: 24
212.77.221.0/24 maxlen: 24
213.130.96.0/19 maxlen: 24
213.130.112.0/24 maxlen: 24
213.130.113.0/24 maxlen: 24
213.130.119.0/24 maxlen: 24
213.130.121.0/24 maxlen: 24
2001:1a10::/29 maxlen: 48
2001:1a10::/32 maxlen: 64
2001:1a10::/40 maxlen: 48
2001:1a10:1::/48 maxlen: 48
2001:1a10:c1::/48 maxlen: 48
2001:1a10:cd::/48 maxlen: 64
2001:1a10:100::/40 maxlen: 40
2001:1a10:c00::/40 maxlen: 40
2001:1a10:f00::/40 maxlen: 40
2001:1a10:4000::/36 maxlen: 36
2001:1a11::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:da:63:dc:9b:a2:13:c5:0f:5a:64:ca:65:40:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Jan 7 17:40:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8332ece97a25e3bb4a7e33ea2ebe11370cbff13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:20:41:65:72:de:ed:42:1f:6c:4f:b1:6b:
23:42:2c:e0:0b:df:ed:6b:5a:26:f9:3b:33:bc:da:
65:f7:98:99:5d:a9:36:01:c4:c4:5d:c6:c9:06:92:
db:94:83:c2:ca:aa:08:08:57:ff:a0:db:d9:fa:95:
4d:d4:4b:81:c9:e8:e5:f6:51:c4:e7:69:09:83:4b:
7c:33:17:6c:63:5d:c8:24:fd:32:80:fa:48:e8:17:
14:51:19:b8:ff:2e:a4:66:0d:66:d4:8c:51:9e:af:
47:dd:a9:fc:1a:8f:c0:ba:c2:f6:a9:7a:bf:0c:96:
4e:f2:52:8b:01:c1:b3:1f:77:4f:74:72:d8:6a:67:
6d:3d:ed:de:ca:a4:44:2a:16:16:44:1e:a3:07:0f:
6b:03:8a:6b:ef:aa:11:4a:39:4a:28:6e:87:9b:4f:
7c:42:e4:a5:c2:45:84:27:df:72:ed:50:4a:04:d4:
9e:f8:08:54:0d:09:89:79:82:2b:2c:9c:d5:73:12:
f9:2b:c9:3e:3c:5e:e0:36:85:d3:09:e6:97:5d:44:
da:14:05:2c:af:10:a3:ee:11:08:d3:54:a7:54:f4:
08:3c:e8:8a:91:0a:44:04:3e:2a:8e:cd:07:c4:74:
3b:f2:52:8a:df:86:88:f2:cc:25:f5:7d:e6:64:86:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:EC:E9:7A:25:E3:BB:4A:7E:33:EA:2E:BE:11:37:0C:BF:F1:3D
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/gzLs6Xol47tKfjPqLr4RNwy_8T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/17
37.210.0.0/15
78.100.0.0/15
82.148.96.0/19
86.62.192.0/18
89.211.0.0/16
176.202.0.0/15
178.152.0.0/15
185.96.224.0/22
212.77.192.0/19
213.130.96.0/19
IPv6:
2001:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
96:93:ba:db:d5:8e:c6:b9:11:84:40:20:26:24:58:c0:ec:e2:
26:78:d4:48:75:48:eb:71:64:78:d6:52:b2:eb:a4:c1:58:46:
d9:db:be:91:c3:24:b3:20:7d:cf:ce:cf:6f:40:20:f8:89:2e:
57:d4:5b:cf:96:77:60:fd:92:13:a8:68:8d:a6:3e:5e:aa:7f:
39:d1:7e:57:65:06:83:0a:a8:a1:71:a3:8d:24:a5:d6:4f:26:
06:95:24:b2:ae:ed:86:94:04:f0:2c:00:8d:09:a5:58:81:5f:
48:2f:8c:95:5d:10:78:34:7b:60:78:42:1e:57:e4:c0:d8:00:
2e:c7:a1:3c:2d:a7:c3:b0:76:6e:4c:c6:12:35:86:54:5d:b5:
08:16:ce:54:a7:8d:b5:f3:d9:26:ab:98:9c:77:a4:47:25:ea:
99:00:68:0b:d6:94:58:80:89:4f:f9:eb:f7:b8:03:29:58:b9:
97:d2:b1:ea:5d:ae:e5:4e:ba:09:e7:ae:1d:f1:7b:16:7c:52:
fd:13:87:0d:83:b1:c0:c5:26:e3:46:c2:fa:18:09:b8:c7:eb:
81:51:5f:79:be:e7:c9:e3:83:92:ce:cc:4c:c2:62:89:21:85:
55:3a:10:01:21:53:b1:01:5d:19:b9:20:58:52:96:a0:14:a0:
d6:d4:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:03:14 2025 by rpki-client