Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6qXadI-7ma31ErJbvLY51Kh3J34.roa
File: 6qXadI-7ma31ErJbvLY51Kh3J34.roa (raw, json)
Hash identifier: gN8Gdm/6IErNEKMUpJqB8eViXlLgOpytd95QFNJb3rQ=
Subject key identifier: EA:A5:DA:74:8F:BB:99:AD:F5:12:B2:5B:BC:B6:39:D4:A8:77:27:7E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193DA220932A1A48C77E1B0CF7CEC550B4C
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6qXadI-7ma31ErJbvLY51Kh3J34.roa
Signing time: Wed 18 Dec 2024 14:18:03 +0000
ROA not before: Wed 18 Dec 2024 14:18:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:22:09:32:a1:a4:8c:77:e1:b0:cf:7c:ec:55:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Dec 18 14:18:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaa5da748fbb99adf512b25bbcb639d4a877277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:45:df:ba:16:2c:06:2f:7d:90:87:1f:9c:
1b:99:dd:41:af:03:07:80:bf:5d:12:50:29:24:9c:
78:73:e2:5c:54:f4:67:6a:4c:13:69:4a:2c:b3:9b:
1c:66:8b:8b:f6:b8:20:29:f5:25:93:15:75:44:49:
c6:fb:c3:62:03:91:bd:ea:ff:21:97:fc:42:d4:f5:
39:5f:8c:69:7b:4e:52:28:79:f9:c1:de:f8:e5:e7:
af:4a:76:b2:11:0a:3f:47:5d:d8:3c:fc:2e:a0:6a:
97:72:9d:6b:7f:33:cf:22:b0:91:af:f1:03:24:08:
87:69:01:50:ed:be:98:72:6d:f1:9f:19:8f:5c:1b:
12:ed:6e:1d:65:eb:c5:5e:bf:45:65:bb:86:f0:9b:
db:32:53:3d:d9:68:86:4a:c1:9f:13:1b:5f:0b:03:
f7:dd:a2:5a:57:8e:75:8b:ed:62:da:dc:73:bb:bf:
f8:d1:c2:c2:d9:3e:d2:d3:07:36:e5:0b:76:36:c9:
44:51:d0:38:11:73:96:e1:8f:93:5a:d6:73:0c:ea:
63:3b:ea:d7:25:c1:19:b4:de:1b:48:ad:5d:ae:35:
08:06:f3:ac:3c:80:74:e5:e9:d3:47:c5:21:dd:d5:
e3:f5:4c:47:9a:17:7b:6b:c8:90:ab:8b:16:14:ef:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:DA:74:8F:BB:99:AD:F5:12:B2:5B:BC:B6:39:D4:A8:77:27:7E
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6qXadI-7ma31ErJbvLY51Kh3J34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::/46
Signature Algorithm: sha256WithRSAEncryption
5e:e9:dd:5e:ab:f9:bc:96:60:29:52:a0:7e:a7:21:ec:6f:6d:
6f:75:b1:0b:43:85:7c:d3:a7:9c:69:33:ae:39:37:31:83:43:
2f:10:65:82:2b:75:c2:9f:6e:86:46:26:2d:d7:84:fa:73:f4:
80:87:fb:24:bb:10:cb:fd:8a:76:da:29:74:c0:64:0f:c9:8f:
00:59:a4:2e:1e:b9:d2:7b:eb:a4:bc:fd:db:48:3d:59:36:5e:
fa:06:8f:63:ff:f0:ce:4d:dc:3f:a4:2e:15:d2:b3:08:29:b8:
63:4d:2d:02:2f:ec:58:3b:e7:4e:da:95:7e:58:67:80:d2:26:
9a:ac:1f:5e:bd:1c:f0:6b:98:af:6f:f2:c1:57:76:72:8f:63:
2d:82:52:cb:cd:7e:dd:bd:70:e6:05:55:00:94:43:a2:a2:ad:
59:d6:34:89:c7:22:33:9b:0f:2d:35:a1:2e:b6:7a:f6:6a:b4:
c9:5a:d0:a1:72:ae:98:4c:e9:30:5a:63:c3:e7:9f:1c:2d:86:
b3:18:94:61:88:68:cd:38:ed:a4:a3:8c:4d:33:06:33:64:38:
79:fd:a3:c1:92:5f:f3:c9:f2:eb:85:2c:8c:b2:ae:c8:57:42:
d0:f7:c7:7f:b3:75:68:c8:f1:78:77:df:be:09:28:ac:f8:7d:
af:0e:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:39:07 2025 by rpki-client