Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wTn1Atbj4ng-EvnTGTzEJbU4VzQ.roa
File: wTn1Atbj4ng-EvnTGTzEJbU4VzQ.roa (raw, json)
Hash identifier: xw6gIk95nylUEkmXXk8QMBU+GIydOmBGjYE0BJWEf5U=
Subject key identifier: C1:39:F5:02:D6:E3:E2:78:3E:12:F9:D3:19:3C:C4:25:B5:38:57:34
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01936CFE10AF915F5105286E62B51A113CB7
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wTn1Atbj4ng-EvnTGTzEJbU4VzQ.roa
Signing time: Wed 27 Nov 2024 09:40:09 +0000
ROA not before: Wed 27 Nov 2024 09:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48309
IP address blocks: 31.25.104.0/22 maxlen: 22
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
37.191.64.0/20 maxlen: 24
37.191.80.0/22 maxlen: 24
37.191.84.0/23 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.88.0/22 maxlen: 22
37.191.88.0/23 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.144.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.187.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:fe:10:af:91:5f:51:05:28:6e:62:b5:1a:11:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 27 09:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c139f502d6e3e2783e12f9d3193cc425b5385734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:c8:39:5f:d4:b7:b9:a9:60:11:0f:10:20:
34:5e:5d:c1:a4:cc:ad:7a:ec:f4:77:2a:35:cc:69:
f5:8b:bc:dc:f0:d2:b6:4f:6a:35:ff:11:8f:21:59:
6d:86:6d:59:d7:2c:a0:5c:64:be:5f:a9:ba:de:f1:
4d:de:f0:04:90:91:99:76:fb:cc:ba:e3:44:22:ad:
be:ff:c4:eb:22:73:ab:64:42:94:f1:ba:b8:1d:ec:
44:15:e4:6e:71:43:84:82:b3:be:d9:28:11:94:b8:
d5:f8:2c:dc:52:45:88:3c:35:16:d2:a2:a1:46:5c:
20:f7:21:6d:37:7d:dd:a1:21:27:e1:85:d9:17:33:
9e:f2:5e:e3:57:a7:8f:ae:6b:7e:5f:b8:b6:b1:ba:
83:a0:e4:8b:d3:d2:c6:6e:4c:3f:5c:d3:de:5a:82:
38:39:91:93:13:73:53:e0:69:07:83:65:95:48:fb:
78:a9:28:f8:ca:37:a6:13:6f:ff:66:c4:af:07:36:
7d:f3:19:e1:78:b6:d6:99:2d:1c:4b:fb:34:6f:5b:
25:67:ba:17:00:15:77:71:51:e2:7e:d9:0f:6f:cb:
98:e6:96:c6:bb:7f:11:22:12:f4:c2:78:bf:f0:7b:
3a:12:a4:95:e9:f6:20:e3:f8:b3:92:ec:ec:97:2a:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:F5:02:D6:E3:E2:78:3E:12:F9:D3:19:3C:C4:25:B5:38:57:34
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wTn1Atbj4ng-EvnTGTzEJbU4VzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0-37.191.86.255
37.191.88.0/21
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.173.255
188.136.175.0/24
188.136.185.0/24
188.136.187.0/24
188.136.189.0-188.136.194.255
188.136.196.0/24
188.136.200.0/24
188.136.209.0-188.136.211.255
Signature Algorithm: sha256WithRSAEncryption
9f:a4:77:55:15:d3:30:00:be:54:18:db:0a:bc:87:0f:e6:e8:
2d:bf:f5:ef:4d:09:f9:4f:29:e4:75:23:ee:e1:6c:32:08:fb:
5c:dd:92:80:03:ae:a7:b4:d1:c4:d5:dd:ad:0f:f7:4b:be:29:
37:af:b8:7d:4d:43:85:d9:e8:5b:9d:ed:b7:e2:82:6a:34:ab:
ed:4d:2a:3c:6d:11:c3:e0:94:f0:0c:51:ac:1e:49:dc:82:41:
34:b0:2e:0b:6f:78:0f:4e:37:a1:8e:06:a5:a1:24:04:f2:f2:
21:a8:aa:38:b0:c0:a6:9c:9e:4e:04:fc:c4:a5:ad:33:9f:07:
d7:78:3b:56:bf:90:e7:fa:a9:b5:1e:38:d9:bf:91:2f:b7:09:
d4:18:4c:de:81:4e:78:e6:c3:c3:5c:c5:cb:62:e0:e3:b4:58:
95:af:e2:0f:b0:c6:17:80:27:c6:87:7a:ae:8a:f2:97:bc:b7:
63:49:23:66:e4:cd:7c:25:b8:2b:92:26:e7:d5:3b:0d:de:6b:
00:a4:e7:99:de:95:13:a9:a1:dd:f7:b2:6e:81:a5:17:d3:2f:
d5:10:d4:7c:22:78:18:d7:58:15:78:16:41:55:29:fd:2b:eb:
c6:76:c7:1e:91:df:f5:74:17:4c:76:1f:bb:db:c8:45:a7:40:
ae:f5:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:19 2025 by rpki-client