Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tCLfNgix4tP_V8A6nMeJydQuNF4.roa
File: tCLfNgix4tP_V8A6nMeJydQuNF4.roa (raw, json)
Hash identifier: l1RWT6JrhQfnPs1IttMvpunkYT6LyNsJ3Z9oTTd5L40=
Subject key identifier: B4:22:DF:36:08:B1:E2:D3:FF:57:C0:3A:9C:C7:89:C9:D4:2E:34:5E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019504E0981D706967E6E41D5496372BB835
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tCLfNgix4tP_V8A6nMeJydQuNF4.roa
Signing time: Fri 14 Feb 2025 14:33:02 +0000
ROA not before: Fri 14 Feb 2025 14:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:e0:98:1d:70:69:67:e6:e4:1d:54:96:37:2b:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 14 14:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b422df3608b1e2d3ff57c03a9cc789c9d42e345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:e9:1a:70:da:91:92:73:ac:de:a6:59:db:
1c:f0:b0:25:90:4b:a1:9a:a9:5c:85:1b:67:99:c5:
6f:15:a2:0c:b7:14:49:5f:a6:65:38:10:58:06:0f:
42:63:73:ac:63:27:c8:0c:5b:5b:6f:11:93:8c:38:
1b:01:5f:27:ca:11:2d:de:3e:d1:bf:6b:90:7e:14:
b1:fa:98:29:4f:e1:6e:8c:d7:3e:88:f3:6b:c3:75:
aa:fd:44:45:5b:02:e6:b8:1d:8b:7e:20:30:38:86:
ae:61:8f:85:5e:99:83:e0:6c:0d:21:53:bc:64:12:
f3:bb:f3:19:6e:78:0d:d1:c4:fa:28:5f:e6:c4:99:
57:62:4b:32:ac:56:53:e2:df:e8:59:a5:7b:2f:a9:
cb:05:9a:4c:35:3a:4b:53:b5:ad:e4:d2:2d:be:9a:
fb:6e:73:73:eb:9a:e3:2d:a2:12:f9:66:6e:74:d4:
00:d0:0e:45:2a:01:00:d1:ab:77:d5:7d:3d:c8:e8:
87:b4:cb:2b:f4:af:9e:4a:91:d3:00:fc:e0:5c:de:
b8:69:11:5b:1a:9e:09:14:79:db:e5:58:4b:a8:36:
a6:fc:43:79:d0:df:05:48:26:70:f3:7b:0c:92:d2:
c0:83:2f:e4:a3:67:50:ee:4f:da:f2:5f:02:1b:44:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:DF:36:08:B1:E2:D3:FF:57:C0:3A:9C:C7:89:C9:D4:2E:34:5E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/tCLfNgix4tP_V8A6nMeJydQuNF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
b8:d8:e3:e8:bc:28:cd:9f:a1:26:1c:f3:bd:04:8a:3f:f9:5e:
1b:fd:2a:63:58:66:c5:c5:61:c2:15:32:78:af:a5:a6:59:55:
db:70:a9:0d:af:20:07:70:9e:9d:b2:b2:24:f3:0b:1e:ea:43:
85:a6:28:ef:b2:36:27:dd:a8:61:25:69:84:b2:88:4d:19:1c:
97:f5:5f:01:22:3e:af:d8:06:1e:52:2f:5d:5e:09:a1:13:c0:
0a:66:aa:1f:69:99:32:5c:61:b7:48:84:e0:ad:06:fb:50:c9:
a2:46:10:86:a5:31:cd:39:89:bd:3c:c9:d8:28:7b:c5:ef:ed:
46:c7:5c:46:8c:de:b8:a2:35:9f:30:68:fb:a2:d4:d8:3b:00:
c6:27:c7:d2:02:5b:c6:d0:67:50:a6:64:3d:cb:40:bd:36:fe:
8f:55:27:0e:66:3f:5c:4e:78:9c:ed:99:52:a6:80:f9:01:f6:
4f:c5:dc:65:15:ba:04:75:31:26:90:c9:fa:6f:4e:fe:ab:be:
cb:f9:13:20:1c:84:cb:8d:b4:cc:da:15:6f:50:cb:c6:b4:c1:
91:1f:ff:3a:26:cf:c1:b8:b1:fa:c9:fb:f0:89:83:1c:49:ce:
bf:52:e6:93:c4:7c:4b:62:05:aa:4c:fc:16:0f:39:1f:db:08:
ab:fa:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:28 2025 by rpki-client