Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa
File: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (raw, json)
Hash identifier: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=
Subject key identifier: D3:30:48:F3:90:16:30:F5:7C:F9:93:EF:DC:64:35:25:D1:EC:E8:C8
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C1607B93D276B1E2D0B80906DDE5
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 5.226.0.0/21 maxlen: 24
31.7.248.0/21 maxlen: 24
31.172.160.0/22 maxlen: 24
31.172.232.0/21 maxlen: 24
37.26.184.0/21 maxlen: 24
37.61.240.0/21 maxlen: 24
37.110.192.0/21 maxlen: 24
37.156.226.0/24 maxlen: 24
46.22.192.0/20 maxlen: 24
46.102.116.0/24 maxlen: 24
46.231.216.0/21 maxlen: 24
46.247.128.0/22 maxlen: 24
46.255.200.0/21 maxlen: 24
77.72.88.0/21 maxlen: 24
77.246.80.0/20 maxlen: 24
78.153.224.0/19 maxlen: 24
82.96.128.0/18 maxlen: 24
82.163.36.0/22 maxlen: 24
82.196.24.0/21 maxlen: 24
85.31.192.0/19 maxlen: 24
87.121.136.0/21 maxlen: 24
88.212.144.0/21 maxlen: 24
89.37.106.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
89.44.210.0/24 maxlen: 24
89.200.240.0/23 maxlen: 24
91.224.162.0/23 maxlen: 24
91.226.193.0/24 maxlen: 24
91.250.244.0/24 maxlen: 24
94.100.160.0/20 maxlen: 24
95.143.64.0/20 maxlen: 24
149.232.160.0/20 maxlen: 24
176.241.120.0/21 maxlen: 24
185.4.60.0/23 maxlen: 24
185.4.62.0/24 maxlen: 24
185.15.140.0/22 maxlen: 24
185.53.80.0/22 maxlen: 24
185.61.184.0/21 maxlen: 24
185.62.184.0/22 maxlen: 24
185.78.156.0/22 maxlen: 24
185.91.224.0/22 maxlen: 24
185.92.36.0/22 maxlen: 24
185.114.100.0/22 maxlen: 24
185.209.52.0/22 maxlen: 24
193.39.119.0/24 maxlen: 24
193.151.84.0/22 maxlen: 24
193.151.84.0/24 maxlen: 24
193.151.87.0/24 maxlen: 24
193.189.124.0/23 maxlen: 24
194.42.100.0/23 maxlen: 24
194.116.142.0/23 maxlen: 24
195.128.147.0/24 maxlen: 24
195.189.186.0/23 maxlen: 24
195.234.35.0/24 maxlen: 24
212.18.240.0/21 maxlen: 24
212.85.229.0/24 maxlen: 24
212.85.230.0/23 maxlen: 24
2a00:68c0::/32 maxlen: 48
2a00:78c0::/29 maxlen: 48
2a01:240::/32 maxlen: 48
2a01:290::/32 maxlen: 48
2a02:398::/32 maxlen: 48
2a03:bdc0::/32 maxlen: 48
2a04:cc00::/29 maxlen: 48
2a0b:41c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c1:60:7b:93:d2:76:b1:e2:d0:b8:09:06:dd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d33048f3901630f57cf993efdc643525d1ece8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:6c:73:ef:11:ad:03:77:5c:d4:99:92:f9:
a0:38:b7:27:d5:6e:72:f4:0d:5b:fa:c2:71:c0:27:
ed:69:af:fb:e4:10:fa:dd:55:57:20:cd:26:ee:35:
bd:78:49:cc:8a:9b:d3:e9:9d:60:b3:7a:d7:33:e3:
36:7f:d9:87:f5:01:9b:fa:7c:e2:c6:56:da:18:b2:
12:7b:6a:34:dd:fd:77:6f:30:61:88:3b:b1:fd:90:
fe:14:82:89:82:0e:01:ea:55:a6:c7:1f:d7:e5:6b:
b8:7b:6f:e3:ea:e8:1d:3b:79:3b:58:76:bd:26:0b:
f6:07:4f:90:e4:86:53:26:ef:b8:7f:a3:41:6c:a0:
4b:bc:61:42:db:b2:d6:f7:59:d4:aa:6a:2f:14:58:
d0:a7:e3:55:ed:08:bd:64:c9:44:dd:38:9e:ee:e3:
89:3e:fa:1e:2c:28:f5:56:27:ab:c2:0b:68:0f:6c:
80:7f:b8:ec:4d:93:1c:e6:3f:20:45:8a:4c:3d:08:
0e:e7:48:66:ef:e9:bd:da:d4:74:ae:3b:19:e5:1b:
11:bc:5d:b4:d8:02:08:77:f5:e3:2c:69:a7:11:59:
80:b9:a4:8a:a8:1d:5d:cc:f6:c8:1e:ad:e2:6b:82:
d3:b2:b3:94:07:99:af:10:a5:61:c3:60:30:c5:62:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:30:48:F3:90:16:30:F5:7C:F9:93:EF:DC:64:35:25:D1:EC:E8:C8
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.0.0/21
31.7.248.0/21
31.172.160.0/22
31.172.232.0/21
37.26.184.0/21
37.61.240.0/21
37.110.192.0/21
37.156.226.0/24
46.22.192.0/20
46.102.116.0/24
46.231.216.0/21
46.247.128.0/22
46.255.200.0/21
77.72.88.0/21
77.246.80.0/20
78.153.224.0/19
82.96.128.0/18
82.163.36.0/22
82.196.24.0/21
85.31.192.0/19
87.121.136.0/21
88.212.144.0/21
89.37.106.0/24
89.44.77.0/24
89.44.210.0/24
89.200.240.0/23
91.224.162.0/23
91.226.193.0/24
91.250.244.0/24
94.100.160.0/20
95.143.64.0/20
149.232.160.0/20
176.241.120.0/21
185.4.60.0-185.4.62.255
185.15.140.0/22
185.53.80.0/22
185.61.184.0/21
185.62.184.0/22
185.78.156.0/22
185.91.224.0/22
185.92.36.0/22
185.114.100.0/22
185.209.52.0/22
193.39.119.0/24
193.151.84.0/22
193.189.124.0/23
194.42.100.0/23
194.116.142.0/23
195.128.147.0/24
195.189.186.0/23
195.234.35.0/24
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:68c0::/32
2a00:78c0::/29
2a01:240::/32
2a01:290::/32
2a02:398::/32
2a03:bdc0::/32
2a04:cc00::/29
2a0b:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:bd:89:b1:0c:b4:aa:d1:e3:c2:c1:b2:7d:53:8d:70:35:c7:
e9:25:62:dc:8c:7e:af:02:f4:de:38:61:29:cb:03:a5:a5:43:
c8:91:f6:98:aa:6d:3e:5a:12:87:1f:3d:e6:c1:02:8c:1d:66:
1c:18:4e:65:72:8a:8b:e6:79:34:3b:08:79:37:ed:87:93:8a:
51:ff:46:8d:75:7c:b2:05:e8:39:f3:18:f1:63:f6:fd:fc:f4:
db:a5:ce:a9:7e:34:37:46:4e:68:0d:27:ef:8b:2c:54:0b:ff:
e7:c5:0e:c9:cc:2a:f0:43:81:d7:6c:9e:10:db:b1:9c:bf:ac:
2f:f9:b5:86:99:14:96:9f:f8:d2:d1:c5:0a:51:67:d3:d4:00:
d3:13:88:7d:95:88:c0:04:59:69:f5:f6:13:7e:5e:2a:c7:94:
be:78:b6:8c:f4:42:22:cf:14:77:97:a3:af:79:20:6e:f3:8c:
d8:6c:8d:09:c6:ad:b4:d0:96:a6:22:b4:e8:e8:fc:9c:50:f5:
a5:e7:9d:db:e0:30:9f:bc:aa:78:8c:3b:7e:22:6b:09:f3:9c:
a9:52:48:0c:04:0d:c2:8a:64:10:9e:91:28:8d:52:b9:16:33:
66:9d:0e:45:cc:8c:92:b2:b0:35:c4:52:90:b5:f0:a5:f3:85:
fa:fd:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:52 2025 by rpki-client