Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ct8tQHOoM94uH4mbXWvxVQuen7c.roa
File: ct8tQHOoM94uH4mbXWvxVQuen7c.roa (raw, json)
Hash identifier: qMj49TMzPURWqFSUtdt9TXt4vB4I2vDfKJ2VJSFCGPE=
Subject key identifier: 72:DF:2D:40:73:A8:33:DE:2E:1F:89:9B:5D:6B:F1:55:0B:9E:9F:B7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019387C0F501E32681910BE98CA89D672619
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ct8tQHOoM94uH4mbXWvxVQuen7c.roa
Signing time: Mon 02 Dec 2024 14:23:10 +0000
ROA not before: Mon 02 Dec 2024 14:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.138.0/24 maxlen: 24
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.234.0/24 maxlen: 24
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:c0:f5:01:e3:26:81:91:0b:e9:8c:a8:9d:67:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 2 14:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72df2d4073a833de2e1f899b5d6bf1550b9e9fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:76:54:33:95:cb:43:0c:11:b7:d6:64:18:
24:0d:b3:59:c5:87:96:63:ea:55:f6:52:90:ce:fe:
a5:79:c0:3d:88:6c:a3:2f:ff:ea:c8:1e:34:2c:25:
73:7a:96:af:64:c1:b7:08:c5:5e:f5:ee:37:7e:8b:
bc:ce:96:93:81:61:45:7e:68:29:f5:16:24:77:ec:
53:f3:a8:34:c2:ae:be:ca:6c:6e:a8:3d:c5:f8:b8:
66:4c:95:4b:c2:c8:96:8a:4d:15:a1:32:67:eb:17:
56:04:5d:9d:41:1d:dc:0e:9a:28:3a:18:6c:e1:1d:
09:92:b5:18:6e:68:e1:17:9a:ae:42:a2:4a:39:b1:
11:d4:a6:b2:05:5f:83:44:83:8c:cd:38:c0:4c:5a:
5c:8b:68:bb:d1:02:b5:02:61:e6:84:b2:e0:6f:20:
e1:48:21:e4:ea:fa:81:a3:2b:b2:57:c1:1d:25:1a:
ff:74:38:d3:4f:33:93:71:86:17:67:51:29:09:2f:
18:ef:72:c5:a2:12:0b:5b:30:87:62:22:fc:86:3f:
dd:a5:01:89:fb:93:9d:a8:2c:57:e2:49:8d:ff:c9:
e4:03:84:2b:22:46:8f:15:6b:b7:7c:44:d0:10:f2:
af:f6:21:9a:3e:17:bc:ef:84:57:99:42:82:d1:d7:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:2D:40:73:A8:33:DE:2E:1F:89:9B:5D:6B:F1:55:0B:9E:9F:B7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ct8tQHOoM94uH4mbXWvxVQuen7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.234.0/23
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:9a:da:f0:4e:af:2f:2a:df:69:64:69:39:be:25:dc:4a:cc:
8b:cc:eb:79:e0:01:20:fe:2b:a7:a4:6c:21:cb:64:74:a6:ee:
11:08:e1:65:84:b1:57:35:10:1f:29:51:6b:c9:d9:91:08:5a:
c0:f0:90:79:8c:c2:e3:89:13:3f:7f:7c:59:ee:a1:3c:e6:ef:
92:3e:f9:cd:30:25:42:1b:d2:af:b2:8f:98:f7:95:40:29:30:
4f:8e:e3:4c:2a:3c:6f:b0:ba:a6:9b:c6:10:9b:18:7e:1e:67:
bc:ea:3e:01:df:06:41:e1:45:4b:70:e2:7f:73:ec:cf:2c:1b:
01:6b:72:26:26:10:63:d8:3c:ee:eb:66:fd:ff:f7:6d:65:99:
c4:47:4a:10:a8:bd:01:93:f7:35:d6:af:03:0d:87:93:44:61:
d2:bb:ee:68:93:9e:9b:c6:9d:b3:5a:ac:b3:bd:d4:1f:8c:b7:
70:0b:ad:8c:46:d2:13:0b:a0:f3:dd:10:70:25:98:d3:a5:e1:
1c:47:0c:c3:45:c6:4f:f9:3b:6f:46:19:c3:23:9c:d6:a4:2c:
fa:f8:bf:b5:be:6b:b4:9a:0f:85:a8:eb:50:16:80:e7:10:d1:
00:55:ba:00:07:89:e9:70:17:31:96:87:3d:8d:3c:af:17:8b:
f9:fc:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:52 2025 by rpki-client