Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/gxWWshLVL78MLbUOGS_UTSmDxeY.roa
File: gxWWshLVL78MLbUOGS_UTSmDxeY.roa (raw, json)
Hash identifier: G/YwVFA1eLZG30BPIX1DOxGfW057e/H/rKZfMewGrbc=
Subject key identifier: 83:15:96:B2:12:D5:2F:BF:0C:2D:B5:0E:19:2F:D4:4D:29:83:C5:E6
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01942444CC21953F39859938847319B095D0
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/gxWWshLVL78MLbUOGS_UTSmDxeY.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.116.0/23 maxlen: 23
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.170.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.175.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.180.0/24 maxlen: 24
151.236.181.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
198.160.168.0/23 maxlen: 23
198.160.168.0/24 maxlen: 24
198.176.116.0/23 maxlen: 23
198.176.116.0/24 maxlen: 24
198.176.117.0/24 maxlen: 24
2a10:2200:1::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
2a10:2200:3::/48 maxlen: 48
2a10:2200:b::/48 maxlen: 48
2a10:2200:c::/48 maxlen: 48
2a10:2200:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cc:21:95:3f:39:85:99:38:84:73:19:b0:95:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=831596b212d52fbf0c2db50e192fd44d2983c5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:53:35:48:51:8d:ac:c6:21:61:27:dc:ee:
3c:29:30:ef:ea:3e:4e:49:72:df:15:d3:17:cb:b0:
22:6c:3c:9e:54:44:2d:82:7c:e7:d4:96:e3:ab:7d:
1d:57:63:f0:00:ee:52:6d:c1:59:18:a8:98:37:ad:
ea:e3:52:89:b2:37:ce:40:c5:8c:68:47:80:3b:da:
c4:38:d8:d0:64:18:6c:88:dc:40:21:e2:7c:84:f5:
1d:c0:83:49:52:da:50:a3:0c:ea:22:ba:66:c8:ff:
94:bf:2f:31:19:0b:ca:cd:67:0d:4a:a6:a0:01:a4:
36:97:35:69:13:f2:1e:a2:55:34:6a:de:fc:5d:68:
0e:7a:8d:ec:4c:06:c5:53:e1:49:e3:00:1e:0d:8b:
39:78:85:a2:e3:a7:c6:e2:a7:8b:93:cf:e8:7e:cf:
45:65:84:d8:de:e2:22:e3:37:d9:17:4e:96:36:ac:
fd:d8:fd:9d:7c:96:c7:ec:b3:52:d8:c0:01:de:fa:
07:2f:7b:23:37:c4:ef:48:ce:65:aa:32:04:be:d6:
06:74:07:ac:e6:98:9c:0d:12:26:65:fe:2e:07:3c:
07:5a:7d:26:07:78:ff:90:1d:b2:b8:28:4e:1c:c4:
fe:4c:c9:d2:92:8c:1b:7b:9e:3d:f9:c7:11:a5:1c:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:96:B2:12:D5:2F:BF:0C:2D:B5:0E:19:2F:D4:4D:29:83:C5:E6
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/gxWWshLVL78MLbUOGS_UTSmDxeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
198.160.168.0/23
198.176.116.0/23
IPv6:
2a10:2200:1::-2a10:2200:3:ffff:ffff:ffff:ffff:ffff
2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:0d:35:b2:ad:11:83:1e:d9:ec:09:96:3b:f7:17:27:8e:df:
0c:7d:14:64:45:89:6e:bb:41:f6:5a:cb:c0:9d:e2:73:e6:ed:
0c:e6:09:b7:42:f4:3e:b1:a4:df:d2:8a:95:74:8c:53:a9:f7:
f9:48:61:72:3b:0c:80:68:2a:0a:27:94:f1:24:b9:65:80:f3:
e1:fe:6b:3c:d6:7e:26:7e:7a:7e:e0:8f:45:ee:7a:0c:ae:01:
ae:8c:2c:a0:d8:60:30:08:a8:fc:08:4b:da:e1:65:2b:e1:57:
a9:b4:f3:dc:dc:26:97:99:68:27:03:5a:ce:77:cc:c4:9c:fb:
ce:50:7d:b0:4e:14:79:4b:bc:7b:ad:f3:11:55:66:28:e5:86:
91:a5:57:78:fd:61:d3:66:c0:76:90:60:ef:d1:c7:c1:96:41:
fc:34:72:9f:6d:c1:21:12:68:a2:82:06:35:58:fd:63:31:43:
10:ba:b7:31:e1:cf:91:12:4d:57:a6:10:b9:35:26:4d:65:41:
d2:0c:0b:4a:28:cd:db:1a:fc:8e:48:88:e5:4f:df:5f:50:5c:
46:ab:e4:3b:e5:e5:6b:98:42:64:68:40:e8:aa:7c:47:32:42:
b9:24:02:84:5c:b3:dd:a8:59:19:c6:9b:50:f8:a2:81:f9:24:
df:9f:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:15 2025 by rpki-client