Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CjGaonq_C_pOSHay8Xb_kHEguzI.roa
File: CjGaonq_C_pOSHay8Xb_kHEguzI.roa (raw, json)
Hash identifier: CpjGJZeR4g5X0dLtK7Fqx0TXXlAvWAHB80JqjwucpxY=
Subject key identifier: 0A:31:9A:A2:7A:BF:0B:FA:4E:48:76:B2:F1:76:FF:90:71:20:BB:32
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019588DF98D08A6CF2341826F9F06C12D757
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CjGaonq_C_pOSHay8Xb_kHEguzI.roa
Signing time: Wed 12 Mar 2025 05:41:49 +0000
ROA not before: Wed 12 Mar 2025 05:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.93.31.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.10.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:df:98:d0:8a:6c:f2:34:18:26:f9:f0:6c:12:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 12 05:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a319aa27abf0bfa4e4876b2f176ff907120bb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:10:35:5e:da:fc:86:3e:fe:25:cc:d5:16:
0d:9c:34:16:48:89:af:73:26:17:31:8e:c8:23:fc:
0d:01:eb:e6:04:26:07:da:3c:86:fa:f3:ad:03:4b:
5d:96:17:e6:69:bd:a3:2d:9a:63:a2:3e:42:3f:a8:
53:c0:da:cb:bc:64:b5:c3:ef:56:40:48:e7:87:d7:
b6:11:78:06:71:81:2b:a3:de:cd:2b:73:a1:50:92:
4b:06:a7:59:7a:28:51:28:5e:c1:af:d0:0a:10:37:
72:3d:27:0b:10:3f:83:29:1c:36:3f:7c:5a:73:95:
4d:a0:dd:0e:79:2c:44:87:88:c1:89:b8:d1:3f:3c:
38:03:ab:bb:e1:be:84:24:82:82:65:fd:3f:5d:eb:
3f:1e:27:c8:9c:cb:18:23:e1:18:21:65:6b:75:ec:
04:c2:46:ec:3c:a1:d1:1b:3b:2a:d7:44:62:1e:ce:
72:d2:b3:6e:8b:4c:3c:01:eb:ac:1c:68:b8:f0:bd:
09:5e:80:e6:a8:17:b2:9c:ad:c6:78:9d:a8:23:cf:
3e:86:81:c6:03:78:d3:f8:7a:c7:c4:31:92:d4:2b:
c6:78:ab:1d:e5:0c:33:bd:9a:08:2a:b0:4f:7b:75:
30:b2:6b:fd:21:85:60:50:ee:40:9f:c0:f9:38:f7:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:9A:A2:7A:BF:0B:FA:4E:48:76:B2:F1:76:FF:90:71:20:BB:32
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CjGaonq_C_pOSHay8Xb_kHEguzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:dd:00:c9:6d:42:e1:3f:85:37:72:9e:8b:d5:67:0e:92:28:
9d:0a:5d:78:40:0a:06:10:77:e1:8a:af:57:3f:c2:5f:fd:be:
91:d3:5f:4d:aa:24:6b:75:68:33:41:8c:5a:18:fe:cb:c8:a5:
76:33:4b:1b:d5:16:8c:9e:b2:1d:52:70:79:f4:4a:23:0c:2e:
97:77:05:0c:c1:28:61:82:7a:28:4c:f1:d9:ae:f6:91:82:c9:
e8:62:06:43:76:8b:c0:66:1c:25:84:05:45:9b:49:69:bb:46:
98:59:f6:3b:20:c3:9e:74:8b:af:7a:f2:29:91:e6:4e:07:86:
de:67:f1:a6:11:dd:e1:99:75:7a:71:fd:2e:c7:a7:80:d2:56:
69:f8:5a:34:69:ae:6a:0f:06:29:7f:a3:9a:46:03:47:52:7e:
38:59:7e:c5:8e:b6:b3:c5:f9:29:92:e5:73:7e:4d:18:16:94:
5c:f8:dc:0c:41:0e:e8:19:7e:c9:17:3a:c4:b7:8f:b3:10:80:
53:71:01:15:0b:de:c4:49:98:58:2d:e8:df:e3:ff:2e:e5:91:
8e:86:99:68:59:4a:38:bc:bd:2d:15:ed:bd:e0:84:93:a2:a0:
29:ba:6d:b3:31:bc:dc:48:5c:31:d3:6c:83:6b:39:4a:f5:b9:
bf:af:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:01 2025 by rpki-client