Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wCKaJexyrHAw4KR-ySIb1H-O66Y.roa
File: wCKaJexyrHAw4KR-ySIb1H-O66Y.roa (raw, json)
Hash identifier: aXHPq7r4OaJIpZBt20ADs6VBCzyaQeAwb6CJfvUd2AA=
Subject key identifier: C0:22:9A:25:EC:72:AC:70:30:E0:A4:7E:C9:22:1B:D4:7F:8E:EB:A6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018978C0794CFCE13DA7AE8150DA2AB08858
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wCKaJexyrHAw4KR-ySIb1H-O66Y.roa
Signing time: Fri 21 Jul 2023 14:00:27 +0000
ROA not before: Fri 21 Jul 2023 14:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 18
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 19
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:c0:79:4c:fc:e1:3d:a7:ae:81:50:da:2a:b0:88:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 21 14:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0229a25ec72ac7030e0a47ec9221bd47f8eeba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:5a:74:82:8f:4b:ae:79:87:db:c6:c9:e9:
b0:08:60:4e:de:37:00:69:07:e2:35:27:7b:c4:d5:
d4:14:9f:fa:15:e5:17:69:15:8e:63:3f:63:66:f9:
74:e7:6f:ac:80:c5:26:b9:0d:47:b3:21:ee:4c:e3:
92:09:2f:81:71:45:ce:6c:0f:e9:10:60:d0:78:6d:
34:29:fc:c6:ad:81:06:92:52:7c:16:e8:f0:b7:1c:
2e:1d:de:12:59:6a:4e:30:50:4c:46:e5:3b:35:dd:
3b:20:72:0e:b7:76:16:6c:ea:da:77:62:4f:8e:27:
d7:3a:bc:f2:d2:dc:2a:4a:ac:13:7c:d8:c3:6a:2d:
13:36:26:05:5b:ed:b7:80:4b:4e:5e:c6:d4:7a:39:
d4:17:eb:82:98:bd:6a:32:00:6d:f8:75:8c:9f:52:
44:f6:75:56:cc:6a:dc:d2:2a:5f:02:27:b5:ae:5a:
f8:65:75:16:63:ec:fe:c8:4c:29:26:7c:32:cc:2f:
d5:4a:2f:04:46:c8:5b:3e:2c:74:83:46:bd:ab:06:
77:84:3a:3f:38:8c:a9:82:fe:87:2a:5a:58:f2:dc:
4d:67:c4:6e:b8:f8:8f:64:08:b4:d4:8e:f3:9f:c5:
37:39:21:b2:31:57:45:49:fb:e4:5d:84:d2:21:22:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:9A:25:EC:72:AC:70:30:E0:A4:7E:C9:22:1B:D4:7F:8E:EB:A6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wCKaJexyrHAw4KR-ySIb1H-O66Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
21:b1:26:d9:17:a8:59:84:3e:37:23:b9:7e:dd:90:e5:f8:ce:
0a:f6:9e:c2:76:89:df:b5:33:a1:eb:28:a6:8d:8e:9e:ad:93:
99:0a:07:79:f9:19:c9:37:e3:68:3d:ee:1c:48:07:48:b5:96:
7d:44:da:47:f7:64:c2:ae:f3:59:ac:1a:cd:bb:d2:01:c8:72:
4b:52:28:84:03:43:d8:06:33:f7:f3:75:bb:08:41:11:54:5e:
73:27:09:a6:7b:0c:c7:0d:f0:ca:78:86:69:4a:80:bd:1b:11:
6e:c1:69:bc:e2:60:8f:8a:60:dd:cb:8d:d3:54:f5:39:76:e9:
bc:3b:37:d5:79:1f:36:26:6f:73:ff:d2:ea:68:af:d0:5c:de:
a5:91:da:e1:6e:c1:ad:62:81:b4:11:b8:c3:16:42:6f:1d:26:
89:c8:de:50:0a:78:c7:01:0f:1b:cd:64:a3:e3:c5:01:7e:10:
09:06:22:ca:c4:f4:18:05:29:5c:ea:77:cb:4a:db:96:cd:df:
ab:d9:77:2f:5b:80:ab:83:f8:c1:00:91:90:0e:24:f1:ba:e8:
eb:8e:56:03:04:d6:91:25:0c:d0:6e:99:5d:98:f8:ea:a6:37:
2f:bb:5e:5f:a8:78:c7:70:62:09:0a:fe:12:fa:d4:0a:b1:b9:
1f:29:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:58 2025 by rpki-client