Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3wtcUCU2GtJAh_0UubITGiYA0wc.roa
File: 3wtcUCU2GtJAh_0UubITGiYA0wc.roa (raw, json)
Hash identifier: funxLSd8u6/hvBhENcDbpADkTMXKZBnjKqAO2hO8wzc=
Subject key identifier: DF:0B:5C:50:25:36:1A:D2:40:87:FD:14:B9:B2:13:1A:26:00:D3:07
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01936C0E32DF4F023777E9706EC4E77C3A3F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3wtcUCU2GtJAh_0UubITGiYA0wc.roa
Signing time: Wed 27 Nov 2024 05:18:10 +0000
ROA not before: Wed 27 Nov 2024 05:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.138.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:0e:32:df:4f:02:37:77:e9:70:6e:c4:e7:7c:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 27 05:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df0b5c5025361ad24087fd14b9b2131a2600d307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:03:3a:f8:fd:76:de:a5:3f:8a:21:7a:f1:
3d:34:d6:08:33:77:00:2f:d5:22:02:83:5c:db:ae:
56:4c:47:94:f6:94:7a:c4:87:b1:52:fb:18:6d:3d:
91:cf:09:8f:67:4a:cd:82:95:a1:44:e9:aa:de:d2:
f4:44:55:22:0d:b8:b4:e8:22:21:70:99:ef:34:d3:
43:fe:4f:47:aa:35:f6:5c:4e:48:e2:ce:18:8f:87:
00:3a:1b:d5:5e:dd:c3:a7:21:19:2d:25:50:56:77:
1f:b0:ba:48:3d:81:9f:64:01:06:2c:4a:1c:77:62:
9f:43:57:bd:0f:5d:79:d5:d3:3c:0a:95:a3:4f:0c:
3c:d6:7d:58:29:7c:d9:7f:88:b2:6f:d6:1c:45:33:
a2:c7:b7:7a:e4:30:fb:e7:50:9d:78:0e:c2:39:d6:
de:fd:8a:8d:44:5d:e1:2d:43:fc:3e:fd:65:08:37:
63:8c:34:7d:cf:24:62:45:1c:76:7e:73:86:cf:5e:
80:48:f6:ab:94:21:8e:e2:58:6b:d5:4b:34:1b:a9:
b8:95:49:83:20:ec:9f:3d:14:10:ca:34:41:d0:8d:
c0:1d:51:ae:df:84:48:47:0c:b1:0d:8d:e1:e1:b6:
f2:1e:ab:e9:a1:03:5a:7d:23:9e:d2:9b:ce:79:c3:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:5C:50:25:36:1A:D2:40:87:FD:14:B9:B2:13:1A:26:00:D3:07
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3wtcUCU2GtJAh_0UubITGiYA0wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:d0:04:6e:42:ad:cd:fe:57:f9:31:35:a3:1f:b4:cd:88:4c:
66:e2:a0:35:b2:b0:1a:71:65:28:9b:81:70:55:a5:05:54:58:
5f:22:8e:60:09:6d:47:e9:7c:90:a9:08:12:5a:b3:61:18:d5:
1c:73:4a:27:47:70:74:08:01:0d:4d:4f:3d:c8:01:b7:02:37:
88:a6:4c:a0:64:ea:ca:6c:7e:52:08:26:00:b7:1e:de:07:07:
7a:55:f2:a5:4b:75:31:99:09:58:53:70:2e:af:64:7b:b5:ed:
e6:4b:8b:ba:5c:dc:94:74:4d:79:ca:08:f1:08:99:a2:ed:94:
ac:10:20:79:0b:5f:92:51:75:69:f2:90:59:b6:ef:36:d2:c9:
62:0d:31:17:8e:78:94:db:7c:31:32:79:80:17:6b:ff:34:57:
89:c6:d7:37:1c:a0:f3:9f:ed:ec:03:ee:22:fe:f0:5b:43:ec:
b6:81:0e:e0:48:a6:47:52:2f:c5:4d:14:9e:47:bd:c7:1c:77:
4b:80:e0:cd:a7:23:a8:e4:e0:6e:4c:31:c8:83:c8:d4:71:c4:
af:f5:6c:a5:42:75:e1:4b:e9:b0:02:af:02:b1:94:aa:2b:6a:
6d:e0:1a:53:02:e1:7f:00:10:c7:fd:c3:a6:4b:67:12:7b:a3:
8f:f5:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:40 2025 by rpki-client