Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/gL67XE7mv5zpo4EgdaqSCjo5ky8.roa
File: gL67XE7mv5zpo4EgdaqSCjo5ky8.roa (raw, json)
Hash identifier: CXu2bmQXdVODDFuMdXWF7k0x6xw95bjHFhq61Lawikc=
Subject key identifier: 80:BE:BB:5C:4E:E6:BF:9C:E9:A3:81:20:75:AA:92:0A:3A:39:93:2F
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019425FDA4ED0FCCDCC1152761C272EC2613
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/gL67XE7mv5zpo4EgdaqSCjo5ky8.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 46.16.192.0/21 maxlen: 24
85.118.192.0/21 maxlen: 24
87.120.72.0/24 maxlen: 24
87.120.73.0/24 maxlen: 24
87.120.74.0/24 maxlen: 24
87.120.75.0/24 maxlen: 24
87.120.76.0/24 maxlen: 24
87.120.77.0/24 maxlen: 24
87.120.78.0/24 maxlen: 24
87.120.79.0/24 maxlen: 24
91.92.8.0/24 maxlen: 24
91.92.9.0/24 maxlen: 24
91.92.10.0/24 maxlen: 24
91.92.11.0/24 maxlen: 24
91.92.12.0/24 maxlen: 24
91.92.13.0/24 maxlen: 24
91.92.14.0/24 maxlen: 24
91.92.15.0/24 maxlen: 24
93.123.88.0/24 maxlen: 24
93.123.89.0/24 maxlen: 24
93.123.90.0/24 maxlen: 24
93.123.91.0/24 maxlen: 24
93.123.92.0/24 maxlen: 24
93.123.93.0/24 maxlen: 24
93.123.94.0/24 maxlen: 24
93.123.95.0/24 maxlen: 24
94.156.136.0/24 maxlen: 24
94.156.137.0/24 maxlen: 24
94.156.138.0/24 maxlen: 24
94.156.139.0/24 maxlen: 24
94.156.140.0/24 maxlen: 24
94.156.141.0/24 maxlen: 24
94.156.142.0/24 maxlen: 24
94.156.143.0/24 maxlen: 24
149.62.192.0/18 maxlen: 24
185.201.36.0/22 maxlen: 24
193.104.79.0/24 maxlen: 24
193.193.171.0/24 maxlen: 24
193.193.182.0/24 maxlen: 24
193.194.147.0/24 maxlen: 24
193.194.155.0/24 maxlen: 24
194.147.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:ed:0f:cc:dc:c1:15:27:61:c2:72:ec:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80bebb5c4ee6bf9ce9a3812075aa920a3a39932f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:0e:75:14:20:87:e7:f3:b6:21:e4:73:d8:
fa:a4:a4:30:64:02:75:8f:0e:c4:ca:f6:c7:bb:af:
a5:a1:6d:16:39:d4:fa:70:62:46:74:cf:e1:b2:57:
39:7f:f5:7c:f0:a5:36:39:9b:d4:cd:24:05:a0:b1:
0b:77:e9:d3:8b:f4:51:5c:56:88:0a:0f:34:ff:74:
55:bb:b6:61:c6:7d:d5:66:e6:71:2f:4b:dc:94:cc:
f5:0a:92:ec:16:ee:8c:e6:24:a0:bf:cc:b0:1a:0c:
e3:59:c1:d1:64:a2:b7:dd:82:4b:6d:6a:b8:d7:2c:
b7:47:61:23:7a:ff:c6:2a:b6:60:45:db:86:67:58:
b7:34:59:dd:9a:8d:45:b0:2c:85:eb:43:5c:08:28:
e5:8b:20:68:70:01:fb:a1:12:a4:b7:20:b9:c9:3d:
cb:b8:f6:4b:f6:26:2e:e6:52:dc:bf:bb:79:e0:4f:
91:9a:04:be:44:86:47:95:17:e2:0f:a0:93:ff:72:
58:de:8b:1f:fc:9a:9c:d0:d8:bf:c1:01:cb:b9:98:
15:94:f2:20:cd:1c:2b:42:7b:f9:80:20:5e:17:04:
75:8e:4c:59:ef:5e:46:04:5c:f4:35:8c:a7:96:34:
ab:c3:06:4e:6d:cb:1f:10:c7:2f:7e:d6:f5:9b:27:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:BB:5C:4E:E6:BF:9C:E9:A3:81:20:75:AA:92:0A:3A:39:93:2F
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/gL67XE7mv5zpo4EgdaqSCjo5ky8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.192.0/21
85.118.192.0/21
87.120.72.0/21
91.92.8.0/21
93.123.88.0/21
94.156.136.0/21
149.62.192.0/18
185.201.36.0/22
193.104.79.0/24
193.193.171.0/24
193.193.182.0/24
193.194.147.0/24
193.194.155.0/24
194.147.223.0/24
Signature Algorithm: sha256WithRSAEncryption
69:db:c7:2f:ab:7b:08:c5:0c:f9:d7:0e:6f:b7:19:62:ce:0b:
73:c7:63:24:e9:a4:dd:eb:8b:54:82:09:f4:5c:35:81:f0:9e:
f3:77:02:9e:cc:e8:f3:23:9e:43:e5:2d:7c:2c:2c:47:8f:26:
aa:d3:c4:fb:68:e0:ab:d7:2b:25:06:b9:f0:a3:02:e4:f8:b5:
62:c8:17:f8:83:e4:a9:c3:c3:73:9b:7b:3a:f4:ab:25:6b:c5:
4a:eb:65:60:62:e4:d0:93:78:31:2a:94:85:46:b5:90:b6:14:
44:c7:48:5c:9a:3c:95:67:52:00:81:e4:66:54:45:3e:7f:74:
27:b9:43:b4:e1:62:0b:3f:9e:1b:ef:b1:a5:c0:aa:89:51:ee:
d7:70:6a:12:2d:58:c0:86:98:7d:fa:9c:fa:85:9d:d8:5c:9f:
5e:b9:69:ac:99:50:8f:4a:f5:8d:57:2e:5d:0c:37:0d:1a:12:
b3:5a:21:fb:de:fd:4f:1d:bb:3f:17:33:b3:ef:e7:d2:91:87:
f2:c6:1e:6b:96:fd:fb:5b:e5:46:cb:08:fd:7d:b9:23:e7:76:
31:9a:70:44:72:71:26:f2:b1:43:24:05:c9:e8:46:fa:ad:bf:
88:23:09:78:e1:ef:7e:62:40:16:e7:ff:8c:89:04:0e:9a:c9:
54:a5:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:08 2025 by rpki-client