Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qALIK553Fe7Q0kWi1b_4TAxFsGE.roa
File: qALIK553Fe7Q0kWi1b_4TAxFsGE.roa (raw, json)
Hash identifier: OfawAmEyXRLbhDnilIQyxiz6oAt8qRDYi63Lxp4xECE=
Subject key identifier: A8:02:C8:2B:9E:77:15:EE:D0:D2:45:A2:D5:BF:F8:4C:0C:45:B0:61
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193C0712CD0EC209DBB20AC43AB77F33C5E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qALIK553Fe7Q0kWi1b_4TAxFsGE.roa
Signing time: Fri 13 Dec 2024 14:34:22 +0000
ROA not before: Fri 13 Dec 2024 14:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:a580::/32 maxlen: 48
2a00:ba80::/32 maxlen: 48
2a00:e080::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:71:2c:d0:ec:20:9d:bb:20:ac:43:ab:77:f3:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Dec 13 14:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a802c82b9e7715eed0d245a2d5bff84c0c45b061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:69:d5:3a:5e:c3:18:e5:7e:6d:7b:88:0b:
ac:b4:c1:f4:bb:ab:28:4d:62:91:5b:c3:f3:50:b1:
8d:cc:43:80:47:62:60:b2:fc:07:00:94:dc:23:71:
a4:99:7d:6a:10:2c:6a:34:25:2c:e1:f2:8c:06:36:
4f:ca:99:e0:28:de:02:c5:83:ea:df:f9:e6:00:22:
89:52:38:d9:05:5f:7b:10:f1:cb:7a:c3:08:a8:51:
d2:82:a6:85:bd:5e:52:d1:43:ad:c4:e7:6d:3b:3d:
d6:4a:76:53:c5:1b:36:88:bb:8a:9c:dc:c1:a1:ed:
24:3b:c5:47:f4:bd:b2:01:de:f4:46:42:66:87:16:
c9:ba:b3:bf:81:bc:5e:b5:d4:4c:dd:a6:f9:72:dc:
75:24:01:3d:f2:7e:71:1e:43:e6:10:90:22:91:4a:
d4:1f:17:1a:3c:cf:68:d1:47:ed:ae:d5:1f:99:ee:
67:d7:48:f8:2b:c1:fa:39:2c:e4:3b:a6:45:c9:a9:
4b:69:1a:28:c2:15:e0:d3:d7:59:0c:bc:3a:ff:28:
5d:7e:ad:dd:0e:88:7f:5e:6e:71:d3:ff:f4:51:e5:
a5:af:05:5d:e2:46:a3:aa:75:44:14:3b:7a:a7:2b:
ac:1e:77:93:d9:8f:fd:b7:d5:7e:61:7b:1c:b3:d4:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:C8:2B:9E:77:15:EE:D0:D2:45:A2:D5:BF:F8:4C:0C:45:B0:61
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qALIK553Fe7Q0kWi1b_4TAxFsGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:a580::/32
2a00:ba80::/32
2a00:e080::/32
2a00:e880::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
67:bc:c5:f2:21:8c:7d:e1:8c:50:88:8e:ac:8a:f7:c9:35:98:
9b:83:0f:10:58:a6:db:60:9a:e4:bd:48:b2:7a:26:7a:38:91:
64:bb:68:26:8e:92:63:c5:7a:95:c7:5c:8f:3d:4d:40:e6:32:
ec:f4:14:a6:9a:62:72:86:da:6e:10:aa:ef:0d:f3:6e:ef:3d:
54:2d:97:d0:79:e9:8b:4b:90:95:dc:b1:35:37:11:c5:03:5a:
79:2e:4f:7a:e8:be:cb:45:06:cf:54:59:da:bf:6f:df:f7:4c:
b2:6d:7a:15:ba:97:e1:5e:05:57:97:82:c2:ed:81:f7:fd:d3:
51:dd:24:23:9a:1e:a9:a2:9d:f9:1f:63:f4:7d:cd:ca:53:cf:
da:c1:c0:21:41:01:a7:29:09:e8:bd:0a:19:06:5c:31:96:f6:
ec:9b:2c:c1:0e:f6:3a:ff:49:8a:53:68:34:91:0a:c0:63:3e:
00:dd:b5:d7:66:a0:49:7f:9f:a2:bc:0e:64:7c:7c:c3:41:29:
cd:ee:4a:57:7a:82:82:01:d8:c2:4a:2e:f6:1f:44:87:70:cf:
1d:86:b9:93:7e:6a:b8:59:0d:6f:29:23:59:bf:90:02:8f:b3:
bf:4e:bb:11:48:d2:d2:4c:f7:1f:7c:00:df:ca:82:23:79:af:
af:38:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:32 2025 by rpki-client