Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/L6_EnXzGVrmmquIv-OW-TZkbfPw.roa
File: L6_EnXzGVrmmquIv-OW-TZkbfPw.roa (raw, json)
Hash identifier: 9mNiqhGzWTeBmg0Z020klFjRbatiKv7I0wG4WG5aFtA=
Subject key identifier: 2F:AF:C4:9D:7C:C6:56:B9:A6:AA:E2:2F:F8:E5:BE:4D:99:1B:7C:FC
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 10A1332A
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/L6_EnXzGVrmmquIv-OW-TZkbfPw.roa
Signing time: Wed 04 May 2022 12:53:18 +0000
ROA not before: Wed 04 May 2022 12:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3212
IP address blocks: 213.172.224.0/19 maxlen: 19
185.66.148.0/22 maxlen: 22
77.38.0.0/17 maxlen: 17
46.182.224.0/21 maxlen: 21
217.72.64.0/19 maxlen: 19
77.111.0.0/18 maxlen: 18
78.153.32.0/19 maxlen: 19
87.119.128.0/19 maxlen: 19
185.97.68.0/22 maxlen: 22
92.53.128.0/19 maxlen: 19
185.85.148.0/22 maxlen: 22
212.85.160.0/19 maxlen: 19
91.132.208.0/22 maxlen: 22
185.30.136.0/22 maxlen: 22
176.76.0.0/16 maxlen: 16
46.150.32.0/19 maxlen: 19
84.52.128.0/18 maxlen: 18
31.15.128.0/17 maxlen: 17
91.237.132.0/22 maxlen: 22
213.143.64.0/19 maxlen: 19
176.57.92.0/22 maxlen: 22
82.192.32.0/19 maxlen: 19
84.20.224.0/19 maxlen: 19
185.79.228.0/22 maxlen: 22
92.63.16.0/20 maxlen: 20
94.140.64.0/19 maxlen: 19
2a00:b2a0::/32 maxlen: 32
2a00:fc0::/32 maxlen: 32
2a00:13d8::/29 maxlen: 29
2a00:1c80::/29 maxlen: 29
2a05:acc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278999850 (0x10a1332a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: May 4 12:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fafc49d7cc656b9a6aae22ff8e5be4d991b7cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:f6:ab:01:76:f7:6e:e3:30:ab:ad:d3:d1:
a9:71:a1:5d:6e:2d:da:6d:7c:3b:d0:fc:19:f7:2b:
23:00:a6:a6:b1:05:49:4e:25:0a:be:b0:f6:32:15:
e4:eb:03:b7:1a:5e:5c:25:4c:f2:1e:59:b7:fd:15:
60:24:37:0a:85:c2:7c:4c:05:8b:06:99:3f:c2:f9:
41:f3:02:4d:3e:8b:40:c3:41:0e:1e:ec:b4:40:7a:
58:6b:47:10:b6:a7:44:49:41:bb:6a:5e:42:e6:cf:
96:fc:3e:ad:2b:2f:4b:fb:34:32:f1:de:91:b4:8a:
a0:97:08:22:6c:12:6f:49:9e:4c:0e:ee:4f:5f:ad:
a4:67:f8:36:5a:8c:0f:b7:71:62:e5:2f:66:79:4e:
a2:9e:88:e0:19:2f:d5:88:92:fe:3f:c9:68:6d:91:
8a:ca:40:b6:88:be:47:7f:88:20:0a:00:96:a7:ce:
52:c2:e9:d0:76:49:ae:83:e9:f0:57:08:ec:03:b1:
9c:50:45:86:78:8b:83:0d:d8:7a:85:11:c2:9f:26:
89:47:d6:94:97:d5:55:75:29:8a:8c:27:ab:77:ed:
d5:80:45:63:1f:48:8d:78:cb:eb:eb:f0:88:69:6b:
53:a0:7f:93:e7:3c:c6:7b:26:2c:0e:57:3d:de:67:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:C4:9D:7C:C6:56:B9:A6:AA:E2:2F:F8:E5:BE:4D:99:1B:7C:FC
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/L6_EnXzGVrmmquIv-OW-TZkbfPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.128.0/17
46.150.32.0/19
46.182.224.0/21
77.38.0.0/17
77.111.0.0/18
78.153.32.0/19
82.192.32.0/19
84.20.224.0/19
84.52.128.0/18
87.119.128.0/19
91.132.208.0/22
91.237.132.0/22
92.53.128.0/19
92.63.16.0/20
94.140.64.0/19
176.57.92.0/22
176.76.0.0/16
185.30.136.0/22
185.66.148.0/22
185.79.228.0/22
185.85.148.0/22
185.97.68.0/22
212.85.160.0/19
213.143.64.0/19
213.172.224.0/19
217.72.64.0/19
IPv6:
2a00:fc0::/32
2a00:13d8::/29
2a00:1c80::/29
2a00:b2a0::/32
2a05:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
81:6a:ad:41:99:73:f8:9a:30:b9:19:38:19:60:a6:95:6a:12:
6e:dd:d9:57:20:b5:ac:db:1f:43:eb:b6:36:9c:70:23:5b:e3:
ed:9f:72:a9:26:63:b6:e1:7b:24:c8:4a:d6:ee:9c:0a:e5:61:
65:c9:ff:9a:69:49:52:c6:cc:d5:5a:c7:33:6b:ab:c6:74:c7:
22:a9:1a:12:de:3f:ed:77:5f:b4:7f:55:22:18:fa:1a:7b:9d:
e8:86:3a:c2:ce:42:dd:55:09:a7:8d:9a:f2:89:d4:85:6b:59:
ca:8b:d5:e4:a5:f4:c1:a4:5a:a5:8e:8f:bd:7c:12:af:09:7d:
1b:e4:48:c1:7d:1f:53:30:50:b4:34:d1:44:4b:2d:a1:59:26:
6b:59:00:44:84:5d:e4:db:11:86:7d:5b:21:ab:5b:94:3e:75:
b9:7a:8c:93:f3:93:31:ce:b4:9f:23:a9:e6:24:40:1d:18:8b:
a5:2a:84:80:0a:21:c0:14:37:26:3c:c1:e7:f8:cf:83:42:5a:
a4:1b:b0:da:e2:1e:e9:c4:d6:33:6f:1e:73:58:bf:86:3e:b2:
e6:c4:60:a7:38:70:18:f5:06:00:58:c0:3d:ef:28:65:23:bb:
f0:80:07:c5:c6:3f:55:d6:44:f4:e3:3a:e2:a5:a2:94:55:e5:
bd:5a:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:48:59 2025 by rpki-client