Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KuJa0nMJ2H-8OcihLlsxj9ONw2U.roa
File: KuJa0nMJ2H-8OcihLlsxj9ONw2U.roa (raw, json)
Hash identifier: OuhPgucwn7fsnELnLe5e49vFsRXojBo4opTd77cGXM8=
Subject key identifier: 2A:E2:5A:D2:73:09:D8:7F:BC:39:C8:A1:2E:5B:31:8F:D3:8D:C3:65
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194942DA47C16A867804EE6D97F8BB02040
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KuJa0nMJ2H-8OcihLlsxj9ONw2U.roa
Signing time: Thu 23 Jan 2025 17:20:06 +0000
ROA not before: Thu 23 Jan 2025 17:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.246.0/24 maxlen: 24
5.175.247.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:2d:a4:7c:16:a8:67:80:4e:e6:d9:7f:8b:b0:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 23 17:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae25ad27309d87fbc39c8a12e5b318fd38dc365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:76:97:bf:69:70:6c:7a:0e:20:1f:4b:9d:
e6:ce:9e:d1:3f:e1:b1:5f:b4:06:40:39:b9:f4:58:
ca:4a:fa:f9:af:dc:ac:48:69:90:69:7f:bb:da:9e:
1c:c1:dd:d3:d9:bd:a9:0b:f4:d5:7d:9d:88:a8:59:
8a:90:24:c4:c0:01:e5:ae:42:37:3c:10:d1:ba:0b:
86:eb:32:50:04:b7:41:56:e6:67:e8:14:51:1b:0d:
5a:ac:d8:27:2c:5a:a4:60:62:53:c5:7f:9e:cb:b5:
23:40:b4:80:c0:a9:5d:19:68:28:9b:36:91:17:d9:
fb:d7:20:f6:82:f1:a9:2a:6f:f9:a6:8a:a0:97:08:
1c:01:cd:5b:87:df:f2:79:bb:0f:94:51:92:d0:6f:
ab:ae:9d:bc:f5:1b:09:19:dc:c1:5d:94:e9:8d:31:
96:5b:f0:36:c3:94:89:7d:28:e3:78:dd:a6:62:01:
e0:1f:c4:c3:32:6b:02:03:66:9d:7e:7b:40:57:86:
8c:16:8a:d1:a2:99:25:33:55:ee:88:71:5d:c0:02:
cd:26:76:b4:e7:49:8f:96:4e:9e:48:17:88:59:ea:
43:68:9a:6f:e0:a4:80:cc:5c:8c:5b:8f:82:d4:ba:
7f:d0:0b:96:53:fc:d2:49:30:ea:23:71:cd:9d:be:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:5A:D2:73:09:D8:7F:BC:39:C8:A1:2E:5B:31:8F:D3:8D:C3:65
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KuJa0nMJ2H-8OcihLlsxj9ONw2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.246.0/23
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:6b:84:4e:ec:2d:f0:ad:fe:12:50:90:a6:d7:5e:86:1c:d7:
d8:6e:3b:b3:3d:16:c4:d8:2c:7c:cd:98:9a:f3:c6:c9:6f:29:
33:32:f2:9e:44:01:d4:35:2f:f7:d1:1d:e6:d5:f1:6a:af:58:
3d:41:52:3d:6e:1f:0b:ee:91:43:31:c8:99:dd:03:e8:85:2f:
6a:12:bc:36:0e:4d:84:22:41:55:2d:1f:01:39:72:fb:48:86:
d1:23:7b:fa:9c:37:c5:5c:39:02:6f:f7:ae:57:0d:92:4d:32:
59:b9:ae:fa:f9:71:a2:3a:f3:f0:95:ab:ad:b3:98:27:d4:91:
1d:b6:92:26:0a:b0:1d:64:3f:30:de:d6:0a:a6:3d:6a:d3:38:
be:70:68:58:2b:2f:db:0f:83:a1:f8:43:c0:96:91:95:d7:5c:
2c:a1:1d:44:b2:42:ad:6e:70:69:d9:95:49:3d:d1:07:33:db:
e5:9b:26:0a:38:31:18:26:8f:51:20:2a:49:ac:46:38:69:64:
2b:45:66:8b:6a:63:f1:7e:b4:27:eb:d0:ae:28:87:65:82:08:
d8:53:59:2e:d0:e8:b3:22:a1:9a:fd:5b:b8:44:64:bd:60:20:
a2:8b:b6:5a:ff:a8:7f:59:9d:dd:a8:11:51:af:1e:f8:9e:34:
87:df:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:34 2025 by rpki-client