Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/xYkGQNJFbQnRL4ffqIK2io6L_Qs.roa
File: xYkGQNJFbQnRL4ffqIK2io6L_Qs.roa (raw, json)
Hash identifier: Ib83GUWjZ7vv6ZjFb1RC5kLK8bX+gZEzD59/u3cul6Y=
Subject key identifier: C5:89:06:40:D2:45:6D:09:D1:2F:87:DF:A8:82:B6:8A:8E:8B:FD:0B
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018CC348DE4C634B2CC3FF8EF780D748BD2F
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/xYkGQNJFbQnRL4ffqIK2io6L_Qs.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63119
IP address blocks: 192.40.91.0/24 maxlen: 24
192.40.90.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.93.0/24 maxlen: 24
192.40.92.0/24 maxlen: 24
158.222.4.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.78.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.9.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.14.0/24 maxlen: 24
104.160.31.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
107.150.82.0/23 maxlen: 23
107.150.84.0/22 maxlen: 22
107.150.81.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.84.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:de:4c:63:4b:2c:c3:ff:8e:f7:80:d7:48:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5890640d2456d09d12f87dfa882b68a8e8bfd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:e4:c6:67:37:54:91:75:c5:95:46:a3:91:
9f:c0:e5:d5:cd:3b:6f:84:c8:d9:e2:96:88:ed:4e:
b7:2f:df:d4:37:a9:7c:09:2a:e5:82:69:21:6c:46:
ec:11:28:b6:f2:8a:04:a6:be:87:bf:c6:7e:da:27:
a1:14:0d:1a:01:75:93:d0:03:2a:cf:43:65:89:7e:
a9:d4:c5:f4:24:8e:56:5a:c0:db:7c:15:10:4a:a5:
80:43:05:cb:f2:57:46:db:88:3a:ad:11:39:ae:01:
73:47:c5:55:95:4f:6c:d6:b8:0a:38:64:58:c1:be:
14:79:e1:11:0b:da:1c:4d:24:8c:5d:3c:8b:a5:d9:
22:04:44:0c:bf:0a:81:f7:63:df:ab:50:e6:05:2c:
d5:4f:51:d8:a8:a2:51:15:fc:c2:9d:fc:e3:fd:c0:
bd:dc:c0:10:80:26:56:44:42:97:d3:f1:db:cb:0c:
f3:0d:04:5c:98:40:79:6b:0f:f0:11:33:0f:a0:23:
a9:e0:b5:55:0f:44:45:a4:6d:84:32:a9:c5:ef:2c:
d7:ba:99:58:25:74:d7:17:bb:8e:68:49:6e:5b:d8:
a2:bb:ec:d0:66:25:6b:00:2e:c9:2a:d0:9b:ee:47:
f9:29:04:fc:ec:80:b7:85:ef:f8:cc:2d:fd:b9:71:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:06:40:D2:45:6D:09:D1:2F:87:DF:A8:82:B6:8A:8E:8B:FD:0B
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/xYkGQNJFbQnRL4ffqIK2io6L_Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.116.0-23.92.126.255
104.160.1.0/24
104.160.3.0/24
104.160.7.0/24
104.160.9.0/24
104.160.11.0/24
104.160.14.0/23
104.160.28.0/22
107.150.66.0/24
107.150.68.0/23
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0-158.222.2.255
158.222.4.0/24
158.222.6.0/24
158.222.8.0/21
192.40.90.0-192.40.93.255
Signature Algorithm: sha256WithRSAEncryption
4f:dd:3d:a5:e7:44:3b:9b:31:33:f7:0d:84:c8:a1:81:b8:65:
94:db:59:5b:82:44:2f:ee:9d:4e:94:4d:bc:b4:ac:07:c0:40:
fb:70:50:f8:c0:73:d0:b6:f7:14:f5:4b:42:3b:a5:54:77:04:
92:58:cb:7a:df:f2:90:1a:b8:c9:be:4b:6b:b5:54:ab:e7:9b:
b4:6f:ce:c3:b7:9a:95:46:6a:d3:1f:71:ab:8e:6b:b2:ee:b0:
4d:1f:47:2c:13:5c:67:c9:84:8e:fe:f6:fa:14:88:f9:9e:e7:
58:2a:7f:b3:be:d2:3c:07:5a:f4:0a:28:4f:8d:4b:3b:3f:56:
77:c7:c6:55:62:26:08:71:bb:c8:56:8e:78:1b:fb:f3:7e:ac:
ae:e8:d6:a2:5b:dc:7c:60:99:ed:28:db:d9:36:a7:b2:94:cf:
b9:65:70:b6:23:c2:1d:3f:ef:b6:ad:21:44:1d:36:1e:fc:5e:
1b:7d:59:11:f9:ec:a1:6a:0d:1d:45:3a:77:22:fe:e2:d4:40:
eb:3f:40:9b:1b:2e:66:4c:56:18:9b:02:b7:77:23:63:d7:64:
ef:25:58:05:26:23:5c:6e:80:48:22:e8:56:96:eb:ca:9b:9a:
6a:66:76:e6:cb:da:a8:43:ae:54:da:09:53:27:29:53:f8:22:
68:fb:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org