Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa
File: rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa (raw, json)
Hash identifier: DNdZ1QKsoV6o/TtItenLoTxByIq3JmStoc6h2ieJRRc=
Subject key identifier: AC:AD:97:1F:DB:A8:67:4F:BC:32:D6:28:18:79:C3:B0:13:AD:A5:25
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887165B9E76E7C9C1807D6FF7996236F35
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa
Signing time: Wed 31 May 2023 10:41:12 +0000
ROA not before: Wed 31 May 2023 10:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.165.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/21 maxlen: 21
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.34.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 23
5.172.36.0/22 maxlen: 22
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:65:b9:e7:6e:7c:9c:18:07:d6:ff:79:96:23:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acad971fdba8674fbc32d6281879c3b013ada525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:75:bb:f3:7b:57:7e:dd:4b:15:0b:46:18:
ff:0e:b6:ba:b2:ed:3e:52:5e:39:81:66:3d:11:64:
07:4c:16:59:ce:46:4e:33:ca:dc:c3:61:b7:ef:00:
03:21:8f:4c:c5:4f:d4:9c:74:37:87:bc:28:8b:20:
76:7c:ce:2c:b8:bd:19:ef:b1:ef:b3:51:88:47:5f:
d8:ef:70:e7:94:ae:b2:a9:06:48:3d:74:76:72:2b:
ae:1c:bf:c5:5e:39:9f:41:a8:d1:fb:97:10:2d:1f:
24:4e:6b:ea:0c:6b:88:0d:03:76:a8:d6:fd:54:3c:
af:c1:4a:72:49:50:a9:e4:ef:ee:d0:c0:f6:4c:1b:
12:d0:c6:52:c0:8d:6e:6f:05:e8:51:c8:62:ec:bc:
44:bb:a0:a9:8b:81:a3:c2:07:be:6a:ab:db:70:05:
b1:b6:61:58:4a:fe:93:51:d1:d4:e6:37:63:ec:d6:
6c:94:8e:f5:25:00:d8:20:de:ab:07:26:65:62:6e:
8b:7c:4f:52:90:ca:95:c9:62:96:a5:c7:cc:7c:98:
2c:7d:37:28:54:b6:1a:3d:ae:da:a6:35:0f:0d:12:
c7:5a:2a:6f:83:89:0b:ad:50:12:b4:24:f5:cb:b1:
23:79:72:60:24:1b:90:9b:9d:ef:a3:68:f8:51:05:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:97:1F:DB:A8:67:4F:BC:32:D6:28:18:79:C3:B0:13:AD:A5:25
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.75.0/24
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
3b:71:0e:dc:8a:d5:0e:f4:ca:ae:88:fa:36:78:8e:8e:8b:ec:
1f:36:93:37:f7:22:2f:d9:31:ac:51:55:14:75:be:bd:4b:a2:
11:d7:fa:da:96:98:bc:0b:7d:4b:8a:59:b8:08:db:1e:c7:80:
ad:1c:6e:6f:55:26:47:69:db:e9:1b:7c:79:ce:d9:bd:2e:a1:
35:c2:d1:16:1e:6c:aa:8d:2d:5d:3e:c0:b9:d9:67:7d:96:e5:
2f:a7:aa:9b:a1:6c:39:34:b2:ba:99:a6:da:6e:84:6f:60:fd:
f7:56:d4:d8:bf:57:9c:8d:b7:35:07:86:39:b2:09:c6:0a:7e:
1f:7d:7b:1d:89:2f:22:93:5f:d5:0f:e1:61:94:3a:0d:af:33:
62:18:a9:20:bb:77:41:8d:a0:71:cc:17:a6:65:ed:7e:85:90:
fa:2d:5c:5c:ce:42:5c:a5:eb:2c:83:3e:5f:f6:3e:ff:f4:da:
64:b6:2c:af:e1:a4:b9:66:00:8b:0c:73:ab:72:3b:ae:85:94:
8c:e7:70:12:b8:85:30:72:b2:0c:95:1a:57:16:16:33:7c:1a:
ba:ed:97:1b:3c:f5:27:94:98:63:15:72:fb:40:73:60:30:d8:
f0:90:bd:91:54:56:33:11:ef:48:74:96:07:58:9e:60:57:41:
9c:ab:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:04 2025 by rpki-client