Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/32dluBs5t75tu5MIo6KXB67X-lE.roa
File: 32dluBs5t75tu5MIo6KXB67X-lE.roa (raw, json)
Hash identifier: 5f7CGR9PcS1q3em0KBqaRJU70kX92UsCYpiCs/dXVt4=
Subject key identifier: DF:67:65:B8:1B:39:B7:BE:6D:BB:93:08:A3:A2:97:07:AE:D7:FA:51
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A3875C
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/32dluBs5t75tu5MIo6KXB67X-lE.roa
Signing time: Sat 01 Jan 2022 02:53:17 +0000
ROA not before: Sat 01 Jan 2022 02:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.11.40.0/21 maxlen: 24
89.39.210.0/23 maxlen: 24
84.247.4.0/22 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
94.24.108.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
46.19.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
89.46.248.0/22 maxlen: 24
91.245.216.0/23 maxlen: 24
84.247.40.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
109.94.144.0/20 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
192.64.44.0/23 maxlen: 24
88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
94.24.30.0/23 maxlen: 24
91.227.240.0/23 maxlen: 24
86.104.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44271452 (0x2a3875c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df6765b81b39b7be6dbb9308a3a29707aed7fa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:61:b5:7d:8c:73:64:24:f9:4a:63:27:17:
ee:c0:19:68:25:8c:8b:92:da:5d:97:76:cc:e1:38:
da:44:c7:b9:a2:d5:04:29:23:e2:cb:19:b0:b4:b0:
93:4e:2c:ab:73:d9:d7:77:4e:a6:00:74:0e:48:68:
e5:cc:c9:b9:8a:db:d7:27:31:20:ea:43:4e:68:7c:
90:47:b9:7c:a3:a4:e5:a7:3c:eb:93:29:a6:d9:f2:
a1:7a:15:e1:57:ff:d7:c9:de:b0:98:9b:cc:9c:0f:
cc:0a:83:29:62:54:8b:42:13:e7:e5:6b:ac:8f:8e:
84:fb:fe:af:ef:4f:01:ac:7f:45:40:de:56:0b:bc:
bd:c6:bc:7a:c1:93:3e:dd:25:65:c1:71:7d:7f:d5:
78:d7:5e:7b:32:42:37:e3:53:28:6a:74:0e:97:d7:
ef:93:8b:70:bf:54:17:c9:e8:53:f3:75:a4:f0:55:
f3:e7:22:97:5e:ab:0b:19:0c:cf:1b:12:32:27:da:
d3:f4:f9:f3:c9:3d:1b:46:87:c0:d7:ca:53:85:7e:
57:09:fd:d6:e5:00:a6:42:b1:5d:5c:7e:6a:0a:fa:
82:ee:48:4f:cf:58:f2:a8:ac:43:23:7b:39:55:96:
9f:89:15:a3:6b:67:44:d7:c7:a8:a8:e2:9e:51:3d:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:65:B8:1B:39:B7:BE:6D:BB:93:08:A3:A2:97:07:AE:D7:FA:51
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/32dluBs5t75tu5MIo6KXB67X-lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.19.104.0/21
46.231.104.0/21
62.122.40.0/21
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
89.46.248.0/22
91.227.240.0/23
91.245.216.0/23
94.24.24.0/22
94.24.30.0/23
94.24.64.0/21
94.24.108.0/23
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.64.44.0/23
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:2a:0f:4f:7a:58:ba:71:28:1d:b1:ac:b8:cf:71:f2:f4:b7:
ff:8d:cd:02:06:ef:fc:d5:f5:3b:47:49:95:2e:11:57:79:df:
a9:aa:7f:5a:cd:84:87:b8:84:ad:83:7d:9f:fd:dd:0d:11:69:
db:0d:58:78:5d:7c:47:de:fb:2b:04:2e:05:0b:17:4b:4b:99:
d1:bb:77:9a:c6:7d:0e:a0:2a:94:b4:2e:92:56:4f:cb:68:04:
13:45:4d:6c:68:ba:24:15:f9:88:6c:75:e0:55:cb:5e:4f:13:
d5:6c:2f:ab:c5:57:0a:ca:f5:04:8d:8e:9d:63:39:8f:9e:03:
a1:a9:a1:0f:99:9f:a0:7d:6b:ac:be:d4:49:de:bc:75:62:0f:
af:c2:b3:58:fc:41:1e:55:19:c5:e9:aa:7f:e8:8d:02:4d:93:
3b:72:a2:10:b7:16:4b:aa:01:c9:8c:d4:a1:ef:5f:c6:71:b2:
e3:77:71:b0:5e:69:b8:a9:71:12:07:67:b0:18:63:3c:36:cd:
15:18:ae:07:39:5d:bf:65:d1:c3:00:4b:37:4d:1e:9b:ca:68:
5f:c2:57:85:5d:50:b6:82:a6:96:f2:ba:38:6b:73:d8:22:fe:
39:17:d5:63:75:c1:ce:1e:5b:36:e2:41:75:f2:e1:f4:16:78:
c4:6b:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:45:58 2025 by rpki-client