Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1BCiAbn3oYBVR0MU1yLa6Hpn_Q.roa
File: S1BCiAbn3oYBVR0MU1yLa6Hpn_Q.roa (raw, json)
Hash identifier: 8TFiVMUW4h3q6AsJq3KsdWXyuVK5/GNj6fZ8jBaKHA0=
Subject key identifier: 4B:50:42:88:06:E7:DE:86:01:55:1D:0C:53:5C:8B:6B:A1:E9:9F:F4
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200BD6C44C42A8024010CB3777FDC2B47
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1BCiAbn3oYBVR0MU1yLa6Hpn_Q.roa
Signing time: Fri 15 Jul 2022 07:23:10 +0000
ROA not before: Fri 15 Jul 2022 07:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
213.222.64.0/18 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
195.3.0.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 24
84.96.0.0/13 maxlen: 24
195.146.192.0/19 maxlen: 24
87.231.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
212.39.128.0/19 maxlen: 24
213.245.0.0/16 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
46.35.0.0/19 maxlen: 24
77.136.0.0/15 maxlen: 24
37.64.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
81.64.0.0/14 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
84.4.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:7180::/32 maxlen: 46
2a02:8400::/25 maxlen: 48
2a00:6200::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:bd:6c:44:c4:2a:80:24:01:0c:b3:77:7f:dc:2b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 07:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b50428806e7de8601551d0c535c8b6ba1e99ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:df:07:f4:ff:d2:20:dd:ce:c6:19:5f:97:
a8:82:55:b0:82:14:de:33:44:a0:93:45:06:1c:ec:
97:ae:57:e5:b6:58:1b:4c:ed:fe:03:8b:87:2e:6f:
d4:9c:4c:11:5c:65:b2:ee:98:da:f1:56:19:49:64:
59:78:01:1b:d1:4f:b0:20:84:71:88:9c:67:cb:07:
54:9e:7c:01:89:ea:a2:34:d8:a1:fa:62:b1:3a:9c:
bc:83:c9:aa:e9:5d:cd:74:a1:92:2d:c3:1f:4f:72:
f0:0c:40:88:0f:51:a7:6d:15:47:49:a6:04:4e:70:
19:82:9e:fc:ae:ef:9f:b1:51:dd:d0:ae:6d:6a:66:
97:f8:09:1c:cf:be:9b:65:15:f5:69:06:32:a7:17:
e2:e1:6c:c5:1d:bd:4f:04:c7:6c:36:94:e3:c9:81:
99:b4:82:2e:1b:f3:44:d1:f8:e8:2f:39:f5:26:67:
09:48:44:0b:65:79:66:da:ac:d3:10:99:0d:80:8a:
fc:ae:78:55:a0:41:ed:2d:35:84:0b:ee:a7:f4:6c:
2b:aa:bc:bd:fe:d7:a2:6c:9c:ab:6f:b1:a9:ac:66:
05:74:a0:e2:e3:b8:d2:49:5e:0d:c8:9e:3e:e2:9f:
b1:cf:79:f7:b1:02:f1:2a:04:cf:ec:9b:e9:80:fe:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:42:88:06:E7:DE:86:01:55:1D:0C:53:5C:8B:6B:A1:E9:9F:F4
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1BCiAbn3oYBVR0MU1yLa6Hpn_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
44:80:16:52:e2:02:76:bf:da:48:0e:ff:f9:f8:75:65:0d:0b:
40:ce:6e:61:16:6b:7d:a8:f4:40:a4:6e:fb:63:3e:a7:9d:9b:
06:bd:83:38:23:20:b3:7a:6f:07:8a:a6:e9:b6:9f:1b:9f:8a:
20:d0:0f:aa:df:df:36:50:57:fe:04:60:a1:3e:de:24:6d:3c:
d1:a6:8d:22:c8:9d:ba:aa:2d:f7:38:b6:84:95:ad:1f:7c:7c:
67:9e:7f:d5:23:e9:44:7c:d1:b1:cd:b9:af:0f:3b:e1:ee:d8:
47:e5:f0:04:e1:0d:0f:2d:4b:bb:5e:49:f5:12:9f:f4:a1:2f:
69:a3:a2:19:f8:21:ed:1e:5c:a8:b0:41:d6:0b:d5:fc:90:a8:
3e:0b:c1:56:49:83:99:85:e7:be:06:b5:cd:7f:ed:9e:71:ac:
4b:d8:1b:d9:b6:a4:74:ea:8a:94:78:0c:ce:41:db:de:3e:5c:
e7:fc:5c:b0:63:66:88:0a:4b:ad:8e:05:74:7c:45:6e:52:ab:
7b:76:5d:bc:94:61:4e:78:f6:56:a3:10:71:fa:88:3e:81:8e:
84:c9:64:71:a7:7d:fa:c9:81:9c:c1:18:72:19:fc:86:84:76:
de:4a:f2:44:96:d0:ff:be:4d:0f:e6:40:e5:7b:58:64:4b:49:
8c:d3:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:26 2025 by rpki-client