Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BIFBN6BhxInV3AeKHhIMO7Cg2zA.roa
File: BIFBN6BhxInV3AeKHhIMO7Cg2zA.roa (raw, json)
Hash identifier: MDg0mCbui8OrRSURERsxcjs1BuIjaMHXW1hWZTgfb5E=
Subject key identifier: 04:81:41:37:A0:61:C4:89:D5:DC:07:8A:1E:12:0C:3B:B0:A0:DB:30
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0187A484886AE2221D90F3AEE9C5224BE644
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BIFBN6BhxInV3AeKHhIMO7Cg2zA.roa
Signing time: Fri 21 Apr 2023 15:52:41 +0000
ROA not before: Fri 21 Apr 2023 15:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
77.144.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
85.168.0.0/14 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
37.64.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 24
84.205.128.0/19 maxlen: 24
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
213.128.32.0/19 maxlen: 24
80.118.0.0/15 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 24
85.68.0.0/15 maxlen: 24
195.98.96.0/19 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:84:88:6a:e2:22:1d:90:f3:ae:e9:c5:22:4b:e6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 21 15:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04814137a061c489d5dc078a1e120c3bb0a0db30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:bb:9a:c5:c4:d5:74:43:b7:58:8d:fe:c3:
58:f7:3e:e2:61:1f:8d:f3:86:5f:a1:17:f8:ac:17:
90:91:a8:1d:7f:6d:9c:09:a3:c9:62:0c:14:65:aa:
98:7e:0a:7b:6b:5a:e4:d9:93:6d:d2:2c:23:9d:2d:
87:0c:cd:6e:eb:eb:59:f7:f7:09:9c:01:79:17:2f:
06:87:3b:4b:6a:73:97:8e:0a:1f:92:86:7e:77:aa:
a7:98:0d:d7:c0:58:56:66:11:8c:24:ae:1f:93:21:
29:36:a4:18:27:47:94:ca:4e:b9:a3:be:d4:5b:a9:
fc:44:3c:28:5b:af:41:7f:f8:ee:fb:18:6d:45:24:
ca:a0:4d:23:74:30:bd:36:85:b6:a3:67:a0:a2:46:
8f:ef:e5:6e:d4:6d:41:72:04:98:5c:b3:a2:97:d2:
94:e2:e0:f7:78:00:1d:d9:76:bb:1f:a6:39:44:1b:
3d:c5:7f:a5:f5:d3:bd:ab:41:a7:05:9b:9a:4c:6d:
88:eb:a3:d7:77:ef:b2:05:6e:d3:60:30:d3:42:bf:
97:22:d7:40:45:8d:28:8a:f8:06:6c:aa:59:d4:c3:
ce:94:c2:a9:79:95:38:8e:82:36:07:30:e0:fa:f6:
b2:81:d3:58:d4:23:7a:09:83:2c:63:2b:4c:b1:82:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:41:37:A0:61:C4:89:D5:DC:07:8A:1E:12:0C:3B:B0:A0:DB:30
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BIFBN6BhxInV3AeKHhIMO7Cg2zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
2d:be:20:6d:34:b4:b0:ff:84:6d:3f:de:81:76:e6:d6:40:c8:
62:d5:15:80:2c:39:4d:08:d9:a7:5d:8d:6f:32:4d:37:03:d1:
f6:fd:64:06:96:f4:0d:fa:d9:0d:86:4b:97:4f:56:7b:3d:2c:
f0:18:77:12:d9:b4:90:35:ed:c2:13:00:18:cf:b0:3f:f6:ca:
96:85:9e:c7:42:27:66:e4:9f:9c:4d:be:0f:71:c2:7b:3b:2d:
e2:71:9a:52:1f:59:f7:af:35:7e:bc:bd:f0:b3:e3:15:46:ee:
16:cd:67:8b:db:31:35:de:20:0a:0c:b1:f7:f9:11:27:2d:d6:
5e:d2:4d:8f:f4:16:af:ef:8e:ae:ad:f3:7f:fc:5a:91:80:0a:
7d:da:3a:74:1d:1d:7f:00:0a:d1:58:65:75:72:eb:4f:14:33:
ed:d5:9c:b5:3b:a5:15:13:74:0b:bf:76:8e:8b:27:c5:c8:87:
f6:09:7a:97:69:f8:ff:17:f1:c5:13:aa:eb:b9:87:df:c8:86:
07:55:09:b2:a9:e3:ab:be:85:a0:44:6b:ad:48:da:dc:f5:27:
c7:47:e0:cb:c9:6f:5d:9d:46:2d:ca:27:fd:df:b9:26:f2:d2:
e3:1b:f2:14:c8:73:ec:a7:68:91:61:be:16:13:4d:06:79:50:
88:cd:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:32 2025 by rpki-client