Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_PkhtvIk1ZP_bL4m6uKCbuxgRI.roa
File: B_PkhtvIk1ZP_bL4m6uKCbuxgRI.roa (raw, json)
Hash identifier: Q86iBXldzqA6dmDIn9X55G9/78h2CkZ2um8opvVevKg=
Subject key identifier: 07:F3:E4:86:DB:C8:93:56:4F:FD:B2:F8:9B:AB:8A:09:BB:B1:81:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019368124D2BBB841D65AA8558DA0F5C3C27
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_PkhtvIk1ZP_bL4m6uKCbuxgRI.roa
Signing time: Tue 26 Nov 2024 10:44:10 +0000
ROA not before: Tue 26 Nov 2024 10:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.138.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:12:4d:2b:bb:84:1d:65:aa:85:58:da:0f:5c:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 10:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07f3e486dbc893564ffdb2f89bab8a09bbb18112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:b4:9b:2b:58:46:3b:b4:dc:0c:8f:b3:d3:
02:a6:ee:f4:b4:b6:02:79:bc:72:62:41:70:28:ae:
85:8e:91:43:6d:62:fa:4f:5b:46:c5:f7:7a:a2:33:
e3:b5:a3:46:72:03:7c:b8:10:f2:b4:3d:7c:42:b3:
be:b4:2f:ba:e3:d2:9f:63:8e:ba:b9:c6:23:97:90:
cc:b3:ed:67:5c:65:f1:3b:07:58:4b:7b:5e:4a:a4:
91:6b:d6:77:ab:3c:dc:6e:25:48:66:89:56:c4:9c:
35:ab:49:37:e1:84:79:d7:d9:9e:70:0f:cb:48:2e:
10:9b:34:ff:79:4f:cb:70:2b:92:1c:6b:45:f0:56:
25:f9:05:34:a3:27:1e:d9:fc:5d:c7:16:ed:ab:a1:
74:51:0f:63:7a:90:b8:7d:11:5a:70:1d:20:c5:49:
16:4c:95:a0:d3:80:e3:88:b2:cf:00:ac:9b:c2:d1:
e3:9f:e9:fb:50:68:51:3d:bf:ac:0e:27:c5:95:72:
69:29:e8:00:dc:c8:c4:16:06:24:cf:56:cc:39:17:
61:1d:7f:4f:9f:a9:9c:3e:f3:7c:93:77:01:e1:8b:
bb:7d:8e:72:c6:24:99:a1:f4:39:b0:b3:03:09:6b:
b8:3b:45:e6:ac:53:fb:36:3c:a4:e6:6c:49:d7:30:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:E4:86:DB:C8:93:56:4F:FD:B2:F8:9B:AB:8A:09:BB:B1:81:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_PkhtvIk1ZP_bL4m6uKCbuxgRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
57:6f:cb:0a:cc:5b:3f:c7:77:f6:43:93:bf:8f:fa:60:21:f4:
7b:e7:3d:d9:9c:d8:f6:35:26:0a:f8:30:6e:87:eb:55:90:c3:
79:99:39:da:51:80:46:41:c8:1a:78:1b:0e:90:16:fb:a9:a1:
6a:be:55:88:17:21:50:0e:e6:bc:03:9c:23:87:68:05:49:d7:
d6:15:fa:0c:5b:d4:c1:11:6e:6a:2d:e2:2e:52:4d:b6:6b:5f:
b2:93:2d:0b:31:7a:da:1e:95:c9:ae:0d:d6:06:5a:0a:2c:5a:
70:8b:e9:de:29:79:37:e6:84:73:fd:be:7a:59:69:e9:0d:86:
21:e5:2a:05:ea:1c:15:a7:f0:28:59:bc:d7:ed:c2:bf:61:bb:
1e:15:1e:e4:f8:d7:bc:e6:1c:02:8d:2b:5b:12:30:7a:20:c3:
f6:b5:40:02:6f:9e:a3:b8:f1:27:64:a1:5b:82:45:b5:a6:f6:
56:93:78:51:7f:59:10:e2:3d:7b:ea:b7:f7:fe:e1:13:3a:ba:
04:60:bd:92:c4:82:0f:ce:d3:ce:10:c8:76:bf:4a:5f:63:e3:
fa:6a:40:02:26:41:36:52:55:41:e5:a5:3b:91:4e:16:b7:f5:
3c:b2:b2:fb:93:64:f3:db:b9:34:5e:06:79:01:8f:b6:7c:7f:
1c:d2:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:08 2025 by rpki-client