Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NG1xI2_4EGe1OakdRoO31ma9Rfk.roa
File: NG1xI2_4EGe1OakdRoO31ma9Rfk.roa (raw, json)
Hash identifier: 9lbRyY0avec5KrHEOwQssf8RWFSirYokmVK8bbdbgdM=
Subject key identifier: 34:6D:71:23:6F:F8:10:67:B5:39:A9:1D:46:83:B7:D6:66:BD:45:F9
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018A98B62B7EB4B76A4B822D21BB34C85935
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NG1xI2_4EGe1OakdRoO31ma9Rfk.roa
Signing time: Fri 15 Sep 2023 11:59:50 +0000
ROA not before: Fri 15 Sep 2023 11:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
80.118.150.0/23 maxlen: 23
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:b6:2b:7e:b4:b7:6a:4b:82:2d:21:bb:34:c8:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Sep 15 11:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=346d71236ff81067b539a91d4683b7d666bd45f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:a8:2d:cc:3d:6e:83:1c:b4:bc:9b:fe:cb:
9b:66:93:4b:2f:ab:b9:7e:25:8f:ed:98:9f:d2:86:
c2:1c:91:15:d4:17:97:24:e5:2d:4d:e4:a6:67:94:
74:b8:ed:18:58:54:77:74:6b:ec:c5:5b:ed:d3:46:
27:31:ba:d5:96:e7:2c:52:a6:4c:ba:b9:c0:bd:8c:
89:3d:48:b4:0a:20:32:a1:8f:1c:8b:f8:c0:98:52:
47:b0:32:ca:26:4b:0c:a6:39:9f:62:c1:fb:ec:e5:
43:3b:40:0f:82:60:0a:39:85:3b:d2:78:2f:a4:1f:
9b:1f:67:0d:63:f6:f8:0b:24:02:11:9e:37:0d:be:
5e:bc:35:34:0d:46:56:a2:21:5b:27:15:89:4e:8c:
e3:54:f9:b2:dd:96:95:8b:17:78:a5:36:05:94:6a:
d7:23:15:12:70:58:ce:65:db:bc:10:af:d3:0b:58:
3f:48:6d:d4:7f:d7:b9:45:12:36:a2:20:a4:95:ce:
54:2f:3b:bb:5c:89:8b:38:5b:62:3f:5b:f5:bc:46:
30:49:7d:06:80:5f:37:d5:b8:4e:0f:57:07:7b:d6:
bb:44:a3:df:34:b4:e1:39:c3:50:69:96:1a:5b:cd:
dc:c6:ea:76:0e:0e:40:2a:1c:85:33:9a:88:19:7c:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:71:23:6F:F8:10:67:B5:39:A9:1D:46:83:B7:D6:66:BD:45:F9
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NG1xI2_4EGe1OakdRoO31ma9Rfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
10:81:15:96:19:93:51:9c:61:6c:f4:bd:29:fd:86:66:d1:f1:
58:8b:17:41:e0:06:53:6c:f2:4f:c0:18:62:db:2d:37:84:2d:
8b:b9:70:82:99:e3:2b:32:0a:8c:0c:3a:4a:3b:35:c2:70:ea:
78:a3:c3:c7:f0:28:9b:cc:0d:0b:fb:a5:89:6c:ca:16:d1:e0:
33:44:83:d1:48:b0:8d:bf:6e:41:85:7c:a1:cc:15:c7:a3:4f:
79:ff:68:9c:06:39:ad:e7:04:05:b8:c8:42:3c:98:f0:db:5c:
5f:1b:44:9f:1f:87:67:14:39:ec:21:5d:a6:48:30:18:c0:09:
10:34:71:72:01:89:14:36:2e:eb:bc:66:9a:5d:2b:70:b2:4a:
9b:dd:eb:03:ab:30:31:66:ba:9a:3c:72:18:8b:59:27:9c:c6:
95:39:84:ec:e8:2d:69:9a:53:6c:9d:e8:3b:9a:0b:48:f8:06:
7f:b8:13:34:89:3e:ed:ad:f7:f0:23:7f:bb:a9:6a:8e:d1:41:
a7:8a:20:5f:6b:b5:a4:5c:4c:97:d6:54:e2:23:05:65:47:fe:
80:b2:2b:ce:57:92:2f:ca:33:23:b9:c4:9a:83:da:1b:ab:64:
76:b8:74:b4:e3:af:50:86:ce:db:16:01:87:03:e5:5c:51:26:
a1:c1:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:47 2025 by rpki-client