Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cIRkVDYsfBOYrUHw6TLKphVd7X0.roa
File: cIRkVDYsfBOYrUHw6TLKphVd7X0.roa (raw, json)
Hash identifier: OBeVk0BhSvFHdnJVsLPObutisqiw/Dml2sajfb4cfSw=
Subject key identifier: 70:84:64:54:36:2C:7C:13:98:AD:41:F0:E9:32:CA:A6:15:5D:ED:7D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019096F3BD215DC61A6B6B25A16A918BB1C8
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cIRkVDYsfBOYrUHw6TLKphVd7X0.roa
Signing time: Tue 09 Jul 2024 10:04:34 +0000
ROA not before: Tue 09 Jul 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:f3:bd:21:5d:c6:1a:6b:6b:25:a1:6a:91:8b:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 9 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70846454362c7c1398ad41f0e932caa6155ded7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:0d:06:7f:09:3b:ca:45:77:8c:45:2a:63:
10:32:f0:c3:1b:20:6f:13:c5:57:7c:de:1e:83:8c:
cd:4b:2c:de:a0:c1:35:aa:d3:6f:f5:18:63:1c:57:
d3:5f:43:70:8b:8e:d8:ad:14:d4:c0:29:10:b9:6f:
8d:fa:b1:89:28:0f:ae:84:e6:60:4e:cf:fb:79:7e:
c9:60:9e:ee:7f:c6:5f:df:b2:5b:69:9b:3f:7f:3b:
25:ae:d7:a5:1a:14:e3:40:43:bc:bb:a8:3c:5a:2d:
82:40:dc:99:d6:95:e2:2d:69:cf:7f:3c:eb:a1:f5:
a0:e9:22:79:6d:58:ac:6c:f2:9b:45:d4:2b:51:f7:
2c:51:17:00:bc:70:c3:dc:d7:2a:e7:c7:b7:ac:d9:
65:8e:13:cd:3a:04:e7:0b:ee:72:1f:db:81:0c:d1:
92:95:b5:59:fb:c9:08:29:e8:27:39:56:92:ea:d7:
ea:78:fe:15:77:43:b3:0f:1a:6b:14:5f:49:6a:03:
5b:cf:06:b3:a1:ef:31:7f:8c:91:c0:26:e0:7f:47:
bf:1f:66:20:b5:a5:df:ea:ee:82:e1:80:fd:6b:d7:
3a:1c:43:15:50:e9:7a:b7:06:1e:fd:52:67:95:62:
34:78:30:2d:48:65:64:85:29:89:1a:b0:51:14:53:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:64:54:36:2C:7C:13:98:AD:41:F0:E9:32:CA:A6:15:5D:ED:7D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cIRkVDYsfBOYrUHw6TLKphVd7X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::/46
Signature Algorithm: sha256WithRSAEncryption
8d:db:33:41:a4:9d:fa:7b:11:62:63:87:03:94:80:21:8c:6b:
64:69:ac:ec:1f:9c:21:9f:b1:18:4d:3f:65:ab:af:24:4f:1c:
92:2f:d2:7f:89:4b:12:cc:6d:bb:0a:74:6b:a9:2a:c3:bb:1d:
0f:4a:0a:1b:a9:9b:5a:d7:d3:1f:b6:b4:64:9b:f8:3a:cf:03:
33:cb:b9:5c:02:d0:5d:8c:c5:de:b3:48:61:d9:d8:44:f3:eb:
d4:d5:3d:44:3d:31:32:27:c2:9e:cc:fe:96:7d:a4:92:d4:51:
15:e7:f1:f6:25:f8:f8:e5:ff:54:3c:80:5e:2b:d2:f2:f4:87:
f7:37:26:a7:10:b7:d2:13:0c:02:50:2b:b4:f7:60:81:c3:f1:
34:00:9c:87:d0:fb:89:db:8f:37:c8:fe:ac:c3:5a:26:c9:fb:
d9:2a:b1:c0:a2:7e:ca:e1:94:31:d7:7c:07:eb:95:d9:f0:a4:
99:99:59:b0:05:68:82:c1:a2:d2:09:0b:30:e4:4c:51:33:90:
5c:c2:35:38:6f:63:28:c1:70:fd:97:66:4e:3f:b2:30:e8:30:
7f:f1:f7:1d:5d:4c:d6:70:be:a5:5c:85:31:b6:bd:11:8c:4f:
72:f3:5b:60:92:80:a4:26:0f:01:ae:b3:7f:9a:bc:23:c6:5c:
23:ef:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:36 2025 by rpki-client