Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/smHepFWDRojITxiKyRkfdQAT-gA.roa
File: smHepFWDRojITxiKyRkfdQAT-gA.roa (raw, json)
Hash identifier: Be7MlNTbaN7P1RfUH1jPo8t93jxb39p8iL8wD+Mm0gA=
Subject key identifier: B2:61:DE:A4:55:83:46:88:C8:4F:18:8A:C9:19:1F:75:00:13:FA:00
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01879FDAAE465724E9601E2727FBBCC701D4
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/smHepFWDRojITxiKyRkfdQAT-gA.roa
Signing time: Thu 20 Apr 2023 18:08:41 +0000
ROA not before: Thu 20 Apr 2023 18:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
80.70.32.0/20 maxlen: 20
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 24
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
93.0.0.0/11 maxlen: 11
109.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 14
37.64.0.0/13 maxlen: 24
77.128.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/21 maxlen: 21
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
195.115.0.0/16 maxlen: 16
78.155.128.0/19 maxlen: 19
88.142.0.0/16 maxlen: 16
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:da:ae:46:57:24:e9:60:1e:27:27:fb:bc:c7:01:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 20 18:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b261dea455834688c84f188ac9191f750013fa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:ae:76:41:26:89:9c:32:c9:4c:00:86:d8:
f4:1e:6e:2f:ed:ee:bf:3f:52:77:65:32:97:71:d0:
53:57:b0:6f:a0:cd:01:1b:a6:9b:52:11:ce:32:ea:
ad:a0:e2:e8:34:2b:fa:68:05:c3:69:ce:31:eb:a7:
af:a0:d7:06:5c:34:1b:37:ff:d0:e7:ac:5c:2f:da:
25:a3:4b:a0:57:f4:d3:0b:ec:33:51:d9:79:05:0a:
6a:51:ed:0b:19:d5:04:47:79:4c:17:32:7c:94:50:
5b:5e:4b:bf:36:24:09:fa:de:6e:36:4a:5f:75:1a:
57:4a:6e:f1:ff:44:95:7d:1b:72:95:a3:34:ae:a7:
43:d6:86:3e:51:f6:b9:85:61:90:49:70:f2:a6:1d:
29:b9:c0:5b:5a:b8:62:62:4c:27:0e:33:06:78:b4:
d3:03:fd:d9:76:87:4e:44:e3:8a:21:d4:56:f6:90:
36:5e:ba:ef:16:7d:90:17:aa:0a:1e:50:63:b8:6d:
17:bd:bb:37:b1:92:2c:02:b6:6d:66:3d:18:08:7f:
7e:b8:16:fe:31:f5:a1:f0:d4:ff:8e:fc:09:9f:b6:
b6:5d:a0:58:5f:4e:1d:63:cf:3e:ca:73:33:99:59:
8b:68:e1:74:8e:8c:51:ac:5a:30:c8:8f:45:89:fd:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:DE:A4:55:83:46:88:C8:4F:18:8A:C9:19:1F:75:00:13:FA:00
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/smHepFWDRojITxiKyRkfdQAT-gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
0b:26:e0:0e:bc:86:bb:93:8d:d9:31:17:a2:56:17:2e:5d:fa:
e8:e1:15:1c:a7:22:74:ee:66:a7:a0:ad:5e:b7:86:76:30:72:
73:a2:8d:8f:25:04:02:81:04:e3:1e:8e:29:ed:87:ac:46:97:
96:c2:90:95:dd:f1:4b:15:72:2b:9d:4f:bb:4c:9c:1f:21:64:
fd:f7:b5:a5:d0:46:10:3e:8e:3a:91:f2:72:2c:19:da:2a:f8:
d5:39:01:45:4f:00:8e:31:5a:72:f6:2a:38:d2:18:ef:7a:bc:
e4:09:43:05:97:72:df:d9:ae:36:ce:73:b2:1c:6c:e8:65:0a:
cc:73:03:47:1c:e3:dc:75:87:2d:76:a6:d1:fd:a3:13:7d:fa:
4a:54:bb:a2:0d:c0:22:69:05:78:f8:19:5a:6e:8d:0d:6c:5a:
94:55:8f:84:f1:55:18:76:01:6a:b6:02:13:b9:df:d5:6a:51:
1e:c1:01:e6:cf:03:35:cb:6f:60:80:88:48:6c:16:6e:84:88:
a2:9b:5d:31:9c:8e:f7:b9:75:02:5f:c2:f7:0e:f6:23:8a:60:
85:a1:55:8b:de:22:67:6c:a3:ce:21:bb:90:e6:91:ed:4c:61:
18:a0:d3:1a:ce:b4:e8:29:f4:c9:65:ff:a7:44:8e:92:7b:2b:
a7:b4:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:37 2025 by rpki-client