Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa
File: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (raw, json)
Hash identifier: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=
Subject key identifier: 07:FD:E9:71:AE:17:9A:61:32:A0:3E:FF:61:64:39:C6:C6:93:1A:50
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019422FB3AB8BFE90881EE80F0875B3C8E54
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa
Signing time: Wed 01 Jan 2025 17:47:57 +0000
ROA not before: Wed 01 Jan 2025 17:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4809
IP address blocks: 5.10.136.112/29 maxlen: 29
5.10.136.208/30 maxlen: 30
5.10.137.0/24 maxlen: 24
5.10.138.0/24 maxlen: 24
5.10.139.0/24 maxlen: 24
5.10.140.0/24 maxlen: 24
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.10.142.0/24 maxlen: 24
5.10.143.0/24 maxlen: 24
5.154.132.0/24 maxlen: 24
5.154.133.0/24 maxlen: 24
5.154.136.0/24 maxlen: 24
5.154.137.0/24 maxlen: 24
5.154.138.0/24 maxlen: 24
5.154.139.0/24 maxlen: 24
5.154.140.0/24 maxlen: 24
5.154.141.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
145.14.64.0/24 maxlen: 24
145.14.65.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.67.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.71.0/24 maxlen: 24
145.14.72.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.74.0/24 maxlen: 24
145.14.75.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
145.14.79.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.81.0/24 maxlen: 24
145.14.82.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.84.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.86.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.88.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.90.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
185.75.173.0/24 maxlen: 24
185.75.174.0/24 maxlen: 24
2a04:f580:9000::/48 maxlen: 48
2a04:f580:9001::/48 maxlen: 48
2a04:f580:9002::/48 maxlen: 48
2a04:f580:9010::/48 maxlen: 48
2a04:f580:9012::/48 maxlen: 48
2a04:f580:9013::/48 maxlen: 48
2a04:f580:9020::/48 maxlen: 48
2a04:f580:9030::/48 maxlen: 48
2a04:f580:9040::/48 maxlen: 48
2a04:f580:9050::/48 maxlen: 48
2a04:f580:9060::/48 maxlen: 48
2a04:f580:9070::/48 maxlen: 48
2a04:f580:9080::/48 maxlen: 48
2a04:f580:9090::/48 maxlen: 48
2a04:f580:9200::/48 maxlen: 48
2a04:f580:9201::/48 maxlen: 48
2a04:f580:9202::/48 maxlen: 48
2a04:f580:9210::/48 maxlen: 48
2a04:f580:9212::/48 maxlen: 48
2a04:f580:9213::/48 maxlen: 48
2a04:f580:9220::/48 maxlen: 48
2a04:f580:9230::/48 maxlen: 48
2a04:f580:9240::/48 maxlen: 48
2a04:f580:9250::/48 maxlen: 48
2a04:f580:9260::/48 maxlen: 48
2a04:f580:9270::/48 maxlen: 48
2a04:f580:9280::/48 maxlen: 48
2a04:f580:9290::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:3a:b8:bf:e9:08:81:ee:80:f0:87:5b:3c:8e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 17:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fde971ae179a6132a03eff616439c6c6931a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:67:b5:b2:f4:1a:e2:db:4e:92:0a:c9:3a:
2e:29:92:ae:d4:3f:2e:35:bf:69:f1:39:b2:f7:a7:
6d:f6:50:77:0a:6e:17:da:58:ad:2a:5c:85:bf:8f:
6f:1c:12:a9:bf:e3:2e:70:be:91:7d:67:79:4d:ff:
26:b0:34:1b:b9:a5:01:c1:ad:33:87:bb:5a:e5:95:
2b:c4:f2:d5:1f:6c:a7:ba:d0:f1:87:14:b6:f5:8b:
40:55:4d:39:e7:31:d1:d2:02:45:dc:a2:18:b5:45:
d1:c2:f4:76:35:e0:d5:88:90:79:43:8c:e1:fe:03:
61:c7:fb:0e:4d:9b:b4:d3:f6:ff:22:47:f6:22:e3:
5d:08:85:da:00:8e:7b:d3:9a:75:df:2a:6c:44:e8:
75:56:92:81:92:84:b3:a3:f1:7c:c9:c4:74:b1:af:
b0:ee:87:05:bf:cf:d1:1a:02:d5:fc:9a:46:ce:73:
ef:09:c3:0b:34:87:35:cc:d7:5b:2d:33:4a:11:eb:
2b:f1:d4:be:36:a4:ba:65:e9:fd:3d:5a:b2:a1:71:
f9:6f:35:70:2b:92:20:43:e2:0c:64:14:79:dc:19:
ab:48:ac:54:b5:f5:2d:ac:47:44:12:17:82:ea:18:
e0:57:f5:33:08:9d:a9:db:79:e6:d5:78:22:06:75:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:E9:71:AE:17:9A:61:32:A0:3E:FF:61:64:39:C6:C6:93:1A:50
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.112/29
5.10.136.208/30
5.10.137.0-5.10.140.255
5.10.141.8/30
5.10.141.136/30
5.10.142.0/23
5.154.132.0/23
5.154.136.0-5.154.141.255
5.154.158.0/23
145.14.64.0-145.14.93.255
185.75.172.0-185.75.174.255
IPv6:
2a04:f580:9000::-2a04:f580:9002:ffff:ffff:ffff:ffff:ffff
2a04:f580:9010::/48
2a04:f580:9012::/47
2a04:f580:9020::/48
2a04:f580:9030::/48
2a04:f580:9040::/48
2a04:f580:9050::/48
2a04:f580:9060::/48
2a04:f580:9070::/48
2a04:f580:9080::/48
2a04:f580:9090::/48
2a04:f580:9200::-2a04:f580:9202:ffff:ffff:ffff:ffff:ffff
2a04:f580:9210::/48
2a04:f580:9212::/47
2a04:f580:9220::/48
2a04:f580:9230::/48
2a04:f580:9240::/48
2a04:f580:9250::/48
2a04:f580:9260::/48
2a04:f580:9270::/48
2a04:f580:9280::/48
2a04:f580:9290::/48
Signature Algorithm: sha256WithRSAEncryption
2d:bb:be:04:df:1c:13:35:e7:aa:9d:d0:86:ae:0b:a0:1d:a0:
bf:56:ed:1a:48:43:38:8d:cf:98:b5:5c:f3:0a:b0:01:4e:ed:
08:de:ca:81:55:ec:19:65:55:6b:bf:fa:32:90:ce:3b:c7:97:
4e:6e:3a:03:20:ea:0e:53:33:29:72:47:6a:7e:0e:be:79:9d:
0b:93:da:75:b5:38:43:87:22:3e:b3:da:04:fe:ab:5b:ff:1e:
8c:50:66:b7:d5:d7:a3:55:d0:e5:3d:9b:58:55:86:5f:76:74:
af:f0:fc:7e:3c:db:08:01:65:7a:b1:ef:4e:96:78:8c:8a:a7:
0a:b6:3e:ef:55:64:5d:0e:70:33:4f:04:8d:8d:9e:c8:3f:9e:
48:30:4f:65:27:3c:6d:8c:e1:49:1b:2a:c1:2c:76:b0:7f:07:
72:84:30:ee:ba:d7:ee:c4:a7:ff:30:d6:19:bd:5d:48:7c:fb:
e1:9b:35:1b:57:48:31:1a:d5:f0:25:4b:59:72:18:b6:ec:96:
4d:ee:78:32:4a:4b:33:59:ed:8f:44:74:85:e1:a1:38:c6:c8:
a3:b3:c6:5b:6c:47:ea:1d:bf:c6:3c:13:74:ff:f9:f4:64:73:
ed:2c:42:42:1b:cc:7d:a6:28:27:6e:af:5b:26:86:09:05:b9:
12:b4:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:52 2025 by rpki-client