Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa
File: M1rofpvBwV8IMpkO4k4GEm8YFeg.roa (raw, json)
Hash identifier: FDfCcxqfCk+WRW1L6WFAnvdjq/VEFbbHfhcKGY4Vubg=
Subject key identifier: 33:5A:E8:7E:9B:C1:C1:5F:08:32:99:0E:E2:4E:06:12:6F:18:15:E8
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0CA69A04
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa
Signing time: Fri 04 Feb 2022 08:15:58 +0000
ROA not before: Fri 04 Feb 2022 08:15:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8926
IP address blocks: 93.113.244.0/22 maxlen: 22
86.107.64.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.214.200.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
188.214.228.0/22 maxlen: 22
86.107.160.0/21 maxlen: 21
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
92.114.128.0/18 maxlen: 18
92.114.128.0/17 maxlen: 24
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
93.119.200.0/21 maxlen: 21
93.119.232.0/21 maxlen: 21
93.119.228.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
93.113.64.0/21 maxlen: 21
188.213.236.0/22 maxlen: 22
93.119.160.0/21 maxlen: 21
188.213.244.0/22 maxlen: 22
93.119.196.0/22 maxlen: 22
89.39.96.0/21 maxlen: 21
188.214.136.0/22 maxlen: 22
89.32.172.0/22 maxlen: 22
86.106.213.0/24 maxlen: 24
89.39.112.0/21 maxlen: 21
86.106.208.0/20 maxlen: 20
86.106.224.0/19 maxlen: 19
86.106.144.0/21 maxlen: 21
93.113.80.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
178.132.112.0/20 maxlen: 20
89.38.32.0/22 maxlen: 22
178.132.128.0/18 maxlen: 19
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
86.105.172.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
86.105.80.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
93.119.144.0/21 maxlen: 21
89.45.40.0/22 maxlen: 22
86.105.208.0/22 maxlen: 22
109.185.128.0/18 maxlen: 24
89.37.104.0/24 maxlen: 24
86.104.196.0/22 maxlen: 22
109.185.64.0/18 maxlen: 18
89.37.44.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
86.105.56.0/21 maxlen: 21
93.118.176.0/22 maxlen: 22
109.185.192.0/18 maxlen: 18
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
85.204.176.0/21 maxlen: 21
93.117.48.0/20 maxlen: 20
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
89.43.168.0/22 maxlen: 22
188.212.40.0/21 maxlen: 21
93.117.128.0/21 maxlen: 21
93.117.144.0/21 maxlen: 21
93.117.140.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
93.117.156.0/22 maxlen: 22
109.185.0.0/18 maxlen: 18
93.117.160.0/21 maxlen: 21
109.185.0.0/16 maxlen: 24
93.117.168.0/22 maxlen: 22
93.116.128.0/18 maxlen: 18
89.42.104.0/22 maxlen: 22
188.237.192.0/18 maxlen: 18
89.42.128.0/22 maxlen: 22
188.237.128.0/18 maxlen: 18
93.116.64.0/18 maxlen: 18
89.42.64.0/22 maxlen: 22
188.237.168.0/24 maxlen: 24
89.42.72.0/21 maxlen: 21
5.56.64.0/24 maxlen: 24
5.56.64.0/18 maxlen: 19
5.56.73.0/24 maxlen: 24
5.56.72.0/24 maxlen: 24
89.42.224.0/22 maxlen: 22
188.210.240.0/21 maxlen: 21
89.35.200.0/22 maxlen: 22
188.210.248.0/22 maxlen: 22
93.116.192.0/18 maxlen: 24
89.42.180.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
94.176.64.0/20 maxlen: 20
89.34.204.0/22 maxlen: 22
46.55.0.0/18 maxlen: 18
46.55.0.0/17 maxlen: 24
37.75.64.0/18 maxlen: 19
89.34.232.0/22 maxlen: 22
188.237.0.0/18 maxlen: 18
92.115.192.0/18 maxlen: 18
188.237.0.0/16 maxlen: 24
212.0.215.0/24 maxlen: 24
89.41.64.0/18 maxlen: 19
37.75.16.0/20 maxlen: 20
92.115.128.0/18 maxlen: 18
188.209.216.0/21 maxlen: 21
93.115.136.0/21 maxlen: 21
188.237.64.0/18 maxlen: 18
93.116.0.0/18 maxlen: 18
89.35.40.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
46.55.111.0/24 maxlen: 24
89.35.84.0/22 maxlen: 22
89.35.8.0/21 maxlen: 21
46.55.64.0/18 maxlen: 18
185.28.104.0/22 maxlen: 22
92.114.192.0/20 maxlen: 20
92.114.192.0/18 maxlen: 18
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
92.114.144.0/20 maxlen: 20
92.114.160.0/20 maxlen: 20
92.114.176.0/20 maxlen: 20
92.115.64.0/18 maxlen: 18
212.0.192.0/22 maxlen: 22
212.0.192.0/19 maxlen: 32
212.0.199.0/24 maxlen: 24
212.0.195.0/24 maxlen: 24
212.0.193.0/24 maxlen: 24
89.34.112.0/21 maxlen: 21
212.0.198.0/24 maxlen: 24
212.0.196.0/24 maxlen: 24
212.0.200.0/21 maxlen: 24
212.0.203.0/24 maxlen: 24
212.0.208.0/20 maxlen: 24
212.0.210.0/24 maxlen: 24
92.115.0.0/18 maxlen: 18
89.40.228.0/22 maxlen: 22
92.115.0.0/16 maxlen: 24
89.34.64.0/21 maxlen: 21
2a02:a30:1600::/48 maxlen: 48
2a02:a30:172::/48 maxlen: 48
2a02:a30:6330:103::/64 maxlen: 64
2a02:a30:f090::/44 maxlen: 48
2a02:a30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212244996 (0xca69a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 4 08:15:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=335ae87e9bc1c15f0832990ee24e06126f1815e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:49:1d:e1:f2:1b:80:09:bb:be:3e:16:90:
30:00:97:88:7d:1b:d6:34:e5:cf:a3:da:3a:7c:4d:
89:b1:01:7e:5a:42:a7:e4:bb:de:2a:f7:31:61:f8:
b3:27:db:74:ba:16:83:ff:ca:b5:a9:83:39:4c:b1:
a2:7d:ff:58:a2:74:6f:d1:ad:3c:31:70:49:8d:a6:
4e:9d:c1:14:20:db:35:42:92:5f:92:d0:ec:76:17:
0e:c2:c6:bf:6b:5f:9b:db:6d:da:3d:76:8d:f3:ce:
43:93:03:3d:5a:39:48:53:6b:87:b5:64:34:0a:fe:
5a:0c:e8:c1:7b:5b:75:91:48:01:70:40:c4:f7:eb:
66:0a:99:9c:1e:76:63:5a:66:ec:1f:b3:5b:52:13:
2e:b1:29:dd:e4:ae:42:8e:bb:a6:b6:5a:43:fb:ec:
0d:12:20:02:9b:a1:ed:36:79:51:e8:35:27:d3:d5:
c7:c0:0e:07:4b:63:b7:de:30:91:d0:6c:8c:db:b9:
a7:96:a0:59:1a:bd:63:3f:5c:39:57:70:53:fa:14:
ed:60:28:88:c9:df:aa:55:c2:62:e7:45:cc:cb:37:
e8:c4:4c:67:84:ad:2d:ce:4a:81:3b:6d:ba:d1:69:
31:47:56:a5:a5:98:f3:18:7d:51:05:df:fb:b6:ef:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:E8:7E:9B:C1:C1:5F:08:32:99:0E:E2:4E:06:12:6F:18:15:E8
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/M1rofpvBwV8IMpkO4k4GEm8YFeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/32
Signature Algorithm: sha256WithRSAEncryption
2e:a5:a5:93:80:b2:2e:a9:38:22:5e:b6:ee:47:92:27:85:a5:
5c:69:1a:34:59:88:34:f2:f3:cc:c0:35:63:99:7c:d4:e9:33:
21:c7:f4:90:d8:0d:2d:92:48:3a:be:95:ea:e2:69:36:47:29:
67:4e:0e:29:bb:c6:d2:03:f2:3f:a7:70:4c:47:91:21:93:2e:
33:97:b2:c8:fc:7c:4f:24:c4:b9:6c:78:7c:57:4d:65:b5:6f:
dc:84:4f:03:1c:6b:e1:db:5f:61:e5:31:3f:c6:43:7f:e1:78:
87:50:94:c3:20:36:0e:82:d0:e0:ab:17:18:96:67:41:c6:78:
9f:1c:f6:aa:08:57:ba:8a:d8:48:a6:38:bd:d0:9d:e2:a4:01:
c2:c5:80:77:62:32:7d:6c:1c:3e:e3:27:ad:6a:d6:1c:a7:e5:
b4:40:e8:3a:db:da:d4:7f:e6:72:58:ef:62:79:02:42:b9:1f:
e8:e2:fa:ab:41:f0:39:06:bf:4c:71:fa:9f:2b:30:cb:34:13:
37:30:d8:52:9a:87:cf:94:2e:01:2a:db:61:2f:8a:1a:1b:34:
2d:97:2d:c9:c2:7e:88:00:06:69:55:f6:18:1f:9e:24:eb:e0:
1f:35:26:07:91:cd:02:68:b3:97:0e:d8:a1:39:9b:41:c5:65:
2c:21:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:41 2025 by rpki-client