Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KiTAbuvFdYGMHQETD48DjKjUodE.roa
File: KiTAbuvFdYGMHQETD48DjKjUodE.roa (raw, json)
Hash identifier: 31ihhZ23Mqm9i+R4wesPxl3GjAstMtUBfCPIuY9SzJo=
Subject key identifier: 2A:24:C0:6E:EB:C5:75:81:8C:1D:01:13:0F:8F:03:8C:A8:D4:A1:D1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193EA1EB0B4E11532E720EEFCDE80534686
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KiTAbuvFdYGMHQETD48DjKjUodE.roa
Signing time: Sat 21 Dec 2024 16:48:20 +0000
ROA not before: Sat 21 Dec 2024 16:48:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ea:1e:b0:b4:e1:15:32:e7:20:ee:fc:de:80:53:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 21 16:48:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a24c06eebc575818c1d01130f8f038ca8d4a1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:fe:19:8f:a3:2b:38:19:66:27:9d:60:b3:
df:9e:f9:1c:88:ca:21:a8:91:78:a0:79:a9:5b:31:
55:a4:a5:ce:de:a9:f2:4c:8d:41:4c:d5:dc:4c:a1:
96:5a:37:80:03:b0:42:6e:56:f7:f2:c2:97:c0:ff:
01:0a:7a:c4:58:79:ae:b2:d3:1d:ce:77:0b:3a:f2:
a2:dc:0e:ba:62:f6:bc:0d:01:dc:c6:66:9f:39:c4:
f6:cb:94:f4:00:80:8a:04:d4:f0:04:b6:8d:e8:5b:
f3:e5:e8:3f:c1:b8:1b:6b:4c:28:74:ed:d5:de:0d:
48:94:b3:86:4f:0a:60:15:f3:de:ef:47:51:b9:3b:
20:9d:f3:d6:b2:87:e3:02:80:19:4a:04:c7:74:d1:
9b:c0:82:58:fb:6a:12:e3:34:44:ae:f4:da:8f:31:
7e:64:65:55:51:3c:92:c4:23:25:60:81:38:89:25:
71:94:d6:4c:0f:71:56:2f:65:80:75:7b:4d:ab:2e:
42:a6:98:9b:e9:22:09:43:68:a3:85:9f:23:b0:69:
fc:94:d2:18:47:f6:61:14:80:93:8d:6c:06:40:c4:
51:91:e4:a5:68:73:eb:f6:97:4c:62:35:b5:e3:b4:
b7:fc:09:11:9b:96:c1:2b:3f:78:55:de:42:f5:6f:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:C0:6E:EB:C5:75:81:8C:1D:01:13:0F:8F:03:8C:A8:D4:A1:D1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KiTAbuvFdYGMHQETD48DjKjUodE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:2b:2b:ce:0a:a4:bd:83:8c:74:5a:12:57:a0:01:e0:d0:97:
02:52:6b:cb:42:d3:39:ed:f7:eb:90:6b:d8:5b:9a:d6:6b:54:
5b:4a:2c:5f:df:0c:91:e0:a1:69:3c:ec:dd:3e:92:e1:a4:2a:
64:60:16:54:e7:f9:0e:30:9a:4d:91:63:35:67:1b:d1:c3:1c:
33:4a:83:68:2a:b2:12:58:72:5d:69:57:87:46:01:47:47:f5:
8a:54:11:6f:3d:22:3d:88:26:23:8c:60:f0:31:df:3d:8c:c5:
41:fb:6f:93:3b:c0:98:fd:01:cb:f1:09:ee:0f:fe:ff:4c:d5:
cc:6c:ad:2b:3c:99:89:b2:11:7e:be:00:7c:77:45:fb:44:85:
c5:4e:50:c0:03:55:fa:82:3c:d0:1b:cf:ea:21:2c:11:f7:26:
0e:93:2b:c8:e7:08:c2:65:69:fa:22:6b:17:69:ef:35:e9:80:
12:5d:19:31:9f:88:e2:d7:92:a6:9a:80:eb:79:a0:d4:d6:04:
17:96:40:5a:96:8c:85:d9:df:61:68:ad:33:d1:f9:77:89:e1:
fa:39:7e:02:f9:99:87:3b:60:53:63:db:38:5e:12:9e:f7:99:
04:25:65:0b:07:0a:da:21:18:10:b4:47:85:63:65:38:aa:68:
3d:d5:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:55 2025 by rpki-client