Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa
File: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (raw, json)
Hash identifier: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=
Subject key identifier: A3:C7:AD:00:6F:30:55:9E:46:CE:07:39:82:F9:33:DC:01:26:63:98
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019469777ED2B68F3FC9C80473FF3492231B
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa
Signing time: Wed 15 Jan 2025 10:17:06 +0000
ROA not before: Wed 15 Jan 2025 10:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201838
IP address blocks: 45.12.172.0/22 maxlen: 24
45.81.72.0/22 maxlen: 22
45.86.8.0/22 maxlen: 24
45.89.84.0/22 maxlen: 22
45.89.156.0/22 maxlen: 22
45.90.172.0/22 maxlen: 22
45.91.112.0/22 maxlen: 22
45.93.172.0/22 maxlen: 22
45.94.60.0/22 maxlen: 22
45.94.176.0/22 maxlen: 22
45.95.248.0/22 maxlen: 22
45.117.136.0/22 maxlen: 22
45.128.32.0/22 maxlen: 22
45.128.136.0/22 maxlen: 22
45.132.136.0/21 maxlen: 24
45.133.88.0/22 maxlen: 24
45.141.236.0/22 maxlen: 22
45.144.56.0/22 maxlen: 24
45.144.160.0/22 maxlen: 24
45.146.8.0/22 maxlen: 22
45.146.60.0/22 maxlen: 24
45.148.12.0/22 maxlen: 22
45.148.56.0/22 maxlen: 22
45.148.252.0/22 maxlen: 24
45.149.72.0/22 maxlen: 24
45.149.220.0/22 maxlen: 22
45.150.144.0/22 maxlen: 22
45.152.4.0/22 maxlen: 24
45.153.220.0/22 maxlen: 24
45.159.88.0/22 maxlen: 22
45.159.152.0/22 maxlen: 24
45.248.144.0/22 maxlen: 24
46.102.170.0/23 maxlen: 23
46.102.170.0/24 maxlen: 24
46.102.171.0/24 maxlen: 24
62.133.48.0/22 maxlen: 22
62.197.132.0/22 maxlen: 24
77.75.60.0/22 maxlen: 24
79.171.153.0/24 maxlen: 24
79.171.154.0/23 maxlen: 23
79.171.156.0/22 maxlen: 22
80.76.56.0/22 maxlen: 22
89.36.112.0/20 maxlen: 20
89.43.208.0/21 maxlen: 24
89.45.176.0/20 maxlen: 20
91.209.86.0/24 maxlen: 24
93.113.26.0/23 maxlen: 23
94.176.208.0/23 maxlen: 23
94.177.138.0/23 maxlen: 23
94.247.86.0/23 maxlen: 23
95.214.184.0/22 maxlen: 22
95.214.228.0/22 maxlen: 22
103.7.204.0/22 maxlen: 22
103.205.24.0/22 maxlen: 24
130.255.16.0/22 maxlen: 24
130.255.28.0/22 maxlen: 24
147.12.128.0/17 maxlen: 24
171.22.104.0/22 maxlen: 22
178.239.192.0/22 maxlen: 24
178.239.200.0/22 maxlen: 24
178.255.88.0/21 maxlen: 24
185.59.124.0/22 maxlen: 22
185.71.36.0/22 maxlen: 22
185.103.72.0/22 maxlen: 24
185.111.172.0/22 maxlen: 22
185.115.144.0/22 maxlen: 24
185.121.228.0/22 maxlen: 24
185.229.104.0/22 maxlen: 24
185.230.248.0/22 maxlen: 24
185.236.60.0/22 maxlen: 24
185.237.60.0/22 maxlen: 22
185.238.220.0/22 maxlen: 22
185.240.196.0/22 maxlen: 22
185.241.164.0/22 maxlen: 22
185.245.236.0/22 maxlen: 24
188.212.122.0/23 maxlen: 23
188.215.16.0/23 maxlen: 23
188.215.74.0/23 maxlen: 23
188.241.106.0/23 maxlen: 23
192.166.208.0/22 maxlen: 22
192.166.212.0/22 maxlen: 24
193.42.52.0/22 maxlen: 24
193.164.20.0/22 maxlen: 22
194.4.156.0/22 maxlen: 24
212.132.192.0/18 maxlen: 18
213.32.248.0/22 maxlen: 24
2a02:6b60::/28 maxlen: 28
2a02:6b60::/29 maxlen: 29
2a03:3820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:77:7e:d2:b6:8f:3f:c9:c8:04:73:ff:34:92:23:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Jan 15 10:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3c7ad006f30559e46ce073982f933dc01266398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:d4:0a:21:e7:9a:c8:92:fe:d9:0e:12:13:
8b:3d:13:19:3e:f0:80:95:5a:8f:93:7a:e9:d7:e3:
40:7b:23:1a:c7:88:3d:0e:80:22:a3:30:25:89:81:
b4:c1:c4:20:af:3d:03:47:d3:3a:bd:2f:e2:8a:6a:
cf:18:df:e5:a4:f5:08:9c:d8:fa:30:de:57:00:43:
d2:09:5e:e3:20:21:b7:5b:4c:3c:10:1a:0e:c9:31:
54:ff:0b:6f:36:15:ad:b6:5b:ec:12:0e:ea:8b:64:
b3:a7:12:1d:1a:7e:14:34:8c:6a:4c:55:36:8b:b7:
cc:73:c5:c4:f7:0a:e2:ee:a6:a4:cc:40:8e:e0:b2:
72:ad:bb:4b:d8:b1:8c:9a:3b:25:20:88:ef:3a:ef:
e9:fe:66:52:67:00:ff:75:8e:6e:c3:d7:4f:e4:dd:
99:a0:47:a1:08:31:3e:c8:3f:43:b1:a1:cc:15:2c:
d2:31:d8:7a:3c:4d:64:d3:d9:b7:7b:3a:6d:ec:ae:
ce:3e:78:65:4d:1e:b1:cd:de:4b:ea:56:4f:15:cb:
0b:8e:dd:f6:df:13:7f:0e:ee:a5:e1:4e:7d:14:9f:
05:b9:96:75:14:70:9f:8d:56:ca:d8:87:7b:b4:3a:
b2:1b:f6:6d:37:0c:66:d2:91:3d:84:cd:68:13:b6:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:AD:00:6F:30:55:9E:46:CE:07:39:82:F9:33:DC:01:26:63:98
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.172.0/22
45.81.72.0/22
45.86.8.0/22
45.89.84.0/22
45.89.156.0/22
45.90.172.0/22
45.91.112.0/22
45.93.172.0/22
45.94.60.0/22
45.94.176.0/22
45.95.248.0/22
45.117.136.0/22
45.128.32.0/22
45.128.136.0/22
45.132.136.0/21
45.133.88.0/22
45.141.236.0/22
45.144.56.0/22
45.144.160.0/22
45.146.8.0/22
45.146.60.0/22
45.148.12.0/22
45.148.56.0/22
45.148.252.0/22
45.149.72.0/22
45.149.220.0/22
45.150.144.0/22
45.152.4.0/22
45.153.220.0/22
45.159.88.0/22
45.159.152.0/22
45.248.144.0/22
46.102.170.0/23
62.133.48.0/22
62.197.132.0/22
77.75.60.0/22
79.171.153.0-79.171.159.255
80.76.56.0/22
89.36.112.0/20
89.43.208.0/21
89.45.176.0/20
91.209.86.0/24
93.113.26.0/23
94.176.208.0/23
94.177.138.0/23
94.247.86.0/23
95.214.184.0/22
95.214.228.0/22
103.7.204.0/22
103.205.24.0/22
130.255.16.0/22
130.255.28.0/22
147.12.128.0/17
171.22.104.0/22
178.239.192.0/22
178.239.200.0/22
178.255.88.0/21
185.59.124.0/22
185.71.36.0/22
185.103.72.0/22
185.111.172.0/22
185.115.144.0/22
185.121.228.0/22
185.229.104.0/22
185.230.248.0/22
185.236.60.0/22
185.237.60.0/22
185.238.220.0/22
185.240.196.0/22
185.241.164.0/22
185.245.236.0/22
188.212.122.0/23
188.215.16.0/23
188.215.74.0/23
188.241.106.0/23
192.166.208.0/21
193.42.52.0/22
193.164.20.0/22
194.4.156.0/22
212.132.192.0/18
213.32.248.0/22
IPv6:
2a02:6b60::/28
2a03:3820::/32
Signature Algorithm: sha256WithRSAEncryption
4a:27:f2:cd:2f:3c:e8:a0:d5:e3:b4:9b:8c:60:d0:8a:45:42:
4f:3a:fb:0c:b7:42:15:43:4e:7e:6d:df:a8:63:7c:1c:a9:f7:
b0:3f:ee:e2:93:be:98:f1:ce:74:55:65:b2:75:a0:d2:f6:33:
83:23:02:f5:a9:01:b3:5a:7d:58:b3:0e:f4:38:af:1a:bd:a9:
8e:e5:f9:f1:5d:98:e9:b5:be:53:40:0d:95:97:bc:75:e6:25:
69:11:90:50:b6:54:a1:cc:cb:44:d7:15:df:5a:70:a7:aa:6c:
68:24:e9:17:a8:70:5a:cb:b2:9c:a3:18:40:b0:10:94:18:60:
c2:19:26:d4:d3:c5:73:76:d5:fa:16:32:50:e5:3d:95:5d:64:
fe:6c:42:1d:eb:d2:1c:5e:ad:3a:b6:6c:af:1f:2a:5b:35:ac:
c6:10:73:5a:6a:72:ce:46:6e:3d:eb:bf:4a:f5:a2:fc:fa:b1:
e0:99:17:00:27:1e:b4:90:79:35:d4:49:5b:b3:93:4a:60:65:
bc:da:4b:8f:0c:06:e6:42:e0:98:86:40:6c:c0:43:00:8f:d2:
dc:3e:1f:28:77:ef:95:4b:b1:5a:c3:ae:e1:31:de:29:20:ba:
4b:19:0b:f5:bf:a6:3e:31:c7:ed:dd:c5:58:64:c0:25:2d:0c:
8f:05:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:47:26 2025 by rpki-client