Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AvfRodkDB4dh42pA8-fhuMOa5xI.roa
File: AvfRodkDB4dh42pA8-fhuMOa5xI.roa (raw, json)
Hash identifier: gApunPiU/4sdTHS9ahpcMPTaPlFlnWjBkb27eqdH4fs=
Subject key identifier: 02:F7:D1:A1:D9:03:07:87:61:E3:6A:40:F3:E7:E1:B8:C3:9A:E7:12
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018B00B4B1757F5CB65DB3AFC8400D7EE731
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AvfRodkDB4dh42pA8-fhuMOa5xI.roa
Signing time: Thu 05 Oct 2023 16:38:43 +0000
ROA not before: Thu 05 Oct 2023 16:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:b4:b1:75:7f:5c:b6:5d:b3:af:c8:40:0d:7e:e7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 5 16:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02f7d1a1d903078761e36a40f3e7e1b8c39ae712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:71:8d:18:65:ad:30:51:ae:df:08:6b:10:
f7:b8:54:c3:cf:c7:ae:87:3f:1b:98:e4:b8:be:4d:
30:d8:cd:cd:b5:9d:48:90:56:b1:15:0a:a4:31:a4:
90:9e:3f:fd:66:13:e4:e8:d8:bb:f5:3c:94:b0:ad:
02:d4:32:a5:0d:5f:38:4a:df:2d:f8:61:6a:76:f5:
a5:2e:24:d8:14:c9:b5:a8:00:8e:8b:18:91:4b:5c:
d5:4d:38:51:fb:1f:1e:f6:a4:ec:ae:f6:e6:0a:23:
29:f6:13:a6:ca:21:30:c7:69:e0:82:ac:59:59:05:
54:d4:72:16:b2:39:40:d2:66:34:5b:48:24:f9:80:
08:05:d7:4a:a3:eb:1b:2d:c0:ce:6b:d9:e8:d8:81:
13:2c:06:c8:65:e5:34:f8:43:25:23:43:bc:5a:7e:
bb:33:0a:b2:e9:66:b0:c7:12:fb:8a:67:d1:03:06:
e2:54:32:b8:e4:5e:68:8e:42:9c:35:48:ea:0b:7a:
d2:5c:50:31:66:ae:e4:7c:cf:29:01:ff:39:5d:28:
c0:6a:b5:5a:eb:ee:fb:44:e4:e2:71:78:e0:50:db:
3e:a6:b6:e7:78:bc:6a:11:c4:3d:9d:80:59:c0:7b:
67:22:64:cd:66:c6:39:19:c3:ba:9c:8d:a8:81:45:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:D1:A1:D9:03:07:87:61:E3:6A:40:F3:E7:E1:B8:C3:9A:E7:12
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AvfRodkDB4dh42pA8-fhuMOa5xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
0f:29:54:35:77:79:6e:bd:74:c6:67:8e:56:ca:59:07:9e:e2:
34:48:f0:eb:b1:59:e8:8e:93:bb:80:81:13:bb:e6:eb:f0:72:
d0:e5:1c:26:04:c2:32:05:33:c6:48:7e:b9:82:17:95:33:ca:
67:3e:63:07:6f:99:95:df:e0:22:a9:38:e7:4f:fc:0e:71:14:
59:b3:52:f0:35:ea:95:fe:59:d4:3c:fa:9f:5a:70:00:3b:87:
4f:c6:ea:5c:b9:17:fa:bf:f0:f1:f6:7a:f5:c8:12:55:51:a2:
a7:04:64:8a:eb:2a:27:c1:9c:4c:43:9a:17:a5:b1:cd:c9:77:
f2:d3:ce:e0:bb:a7:ba:62:85:5b:a2:e9:b7:2a:2b:dd:9b:66:
4b:c9:83:1b:68:c1:ba:16:4f:29:34:41:60:4e:d4:e7:fe:4c:
2b:c4:52:2f:bc:c1:50:68:09:de:b4:e2:47:23:28:38:3e:b2:
e1:0c:12:ea:8c:47:96:15:4c:25:62:bc:3e:fe:ed:5a:78:fc:
f7:83:d6:5e:2d:a7:f4:04:57:58:be:29:44:6a:f2:a2:81:fa:
11:00:1b:14:da:4c:6b:29:9d:3b:63:b0:b8:d5:25:1c:f7:b7:
dc:1b:a8:d9:ff:e7:0e:ba:01:0b:40:ef:c0:cc:2e:1f:a8:7e:
45:98:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:19 2025 by rpki-client