Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ClofWW2aMbaXDNA4vOoL4ImQ_-A.roa
File: ClofWW2aMbaXDNA4vOoL4ImQ_-A.roa (raw, json)
Hash identifier: 2yzcVflC/vXFHp8aQi9Vd0Db/NfZXmnSSHI6ye4EOh8=
Subject key identifier: 0A:5A:1F:59:6D:9A:31:B6:97:0C:D0:38:BC:EA:0B:E0:89:90:FF:E0
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018964D55EE011C875990F454AA52A94FC6F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ClofWW2aMbaXDNA4vOoL4ImQ_-A.roa
Signing time: Mon 17 Jul 2023 17:10:52 +0000
ROA not before: Mon 17 Jul 2023 17:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 18
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 19
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:d5:5e:e0:11:c8:75:99:0f:45:4a:a5:2a:94:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 17 17:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5a1f596d9a31b6970cd038bcea0be08990ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:c6:6c:71:72:3a:5d:bd:47:fa:1a:16:20:
ad:e0:ff:a3:60:b8:96:c2:99:75:61:2b:c8:05:9e:
bb:b3:60:6a:c2:8a:05:58:b7:85:5e:46:d2:df:5c:
c7:d2:65:fc:e0:eb:0a:d4:9d:2a:79:81:10:db:22:
e7:80:31:f7:4a:b9:14:47:0e:b1:9f:14:a0:d7:cf:
6b:8f:75:8e:49:63:af:64:90:53:32:3b:63:f4:a9:
cf:fa:0f:f9:20:97:91:94:27:aa:d4:41:4a:f4:fa:
48:6b:1a:29:10:12:34:5b:c0:d3:00:3c:0d:cc:95:
27:72:43:a7:05:bc:f5:f8:18:35:ef:b4:f3:7d:e8:
0f:92:81:07:46:27:48:76:c1:5a:a7:2b:1b:a9:49:
4d:17:2e:e7:c6:33:c6:cd:04:17:46:c0:89:da:ef:
ba:e4:43:6b:b8:f8:58:0f:5c:ef:d9:19:7a:49:a7:
42:d3:ad:c7:ec:d3:2c:39:77:c6:dc:1e:2b:d6:5c:
95:8e:c7:86:c7:97:89:82:83:15:dc:b1:aa:7b:b7:
09:8e:21:36:f2:01:f5:4d:b3:fd:2a:40:01:96:46:
2c:ca:9e:75:05:4d:ba:34:ff:bf:a4:26:e8:c9:fe:
5d:79:08:e3:74:ec:38:9f:a4:02:96:17:55:da:1d:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:1F:59:6D:9A:31:B6:97:0C:D0:38:BC:EA:0B:E0:89:90:FF:E0
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ClofWW2aMbaXDNA4vOoL4ImQ_-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
86:9f:36:67:ec:5b:27:72:dc:c3:b6:d8:e7:f7:21:0d:b7:74:
d0:01:79:5b:a0:6d:c8:5a:27:11:bb:38:1d:23:00:93:24:87:
b5:8a:d9:b6:d1:fa:2a:a4:f8:1f:f7:5c:b6:60:03:e1:2c:a6:
de:56:10:fe:52:1e:fc:6b:78:60:cc:74:3f:f1:e7:03:c1:13:
b3:6f:49:b9:ec:88:7c:c8:24:29:ec:ad:73:c7:a8:03:d7:5d:
a9:2d:14:4c:5a:89:b6:e1:9a:7f:18:62:bb:27:2a:95:31:8b:
94:1e:73:e8:8c:6b:20:f7:03:e9:fa:a3:08:7c:a5:3a:96:a0:
fe:6b:3f:f3:5a:a4:cb:d1:ce:29:6c:37:50:f9:8f:a4:aa:c8:
2a:4b:74:82:2c:56:ed:33:0e:a9:73:b4:98:33:57:d7:94:2f:
dc:a4:e6:75:72:d9:51:76:b9:82:6f:a9:d0:df:44:60:41:8f:
b9:c2:f2:cc:82:40:03:46:8a:05:f6:bf:45:55:f1:a5:c5:89:
22:0b:b8:34:92:13:a0:3a:dd:ee:6f:6d:b2:46:b9:7b:ec:df:
ab:bc:be:6d:6a:0f:17:a0:64:cc:57:d2:a4:26:fb:0f:6f:a5:
f7:a0:7c:8d:84:25:c1:99:fb:2c:58:37:f6:36:d6:ac:f6:0d:
24:47:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:54 2025 by rpki-client