Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa
File: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (raw, json)
Hash identifier: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=
Subject key identifier: 28:FB:19:3F:95:31:6D:59:42:A7:34:6C:6C:E0:48:87:2E:B3:FE:94
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FDA12E34FB7A38C32111CBC562C48A
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50131
IP address blocks: 37.72.132.0/24 maxlen: 32
45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.145.74.0/23 maxlen: 32
45.150.164.0/22 maxlen: 32
45.150.226.0/23 maxlen: 32
45.151.132.0/22 maxlen: 32
45.154.212.0/22 maxlen: 32
62.204.54.0/24 maxlen: 32
91.246.39.0/24 maxlen: 24
94.154.114.0/24 maxlen: 32
146.19.114.0/24 maxlen: 32
146.19.223.0/24 maxlen: 32
176.116.1.0/24 maxlen: 32
178.22.30.0/24 maxlen: 32
188.93.139.0/24 maxlen: 32
193.218.200.0/23 maxlen: 32
193.221.94.0/23 maxlen: 32
194.124.218.0/23 maxlen: 32
194.124.224.0/23 maxlen: 32
194.147.98.0/23 maxlen: 32
194.147.100.0/23 maxlen: 32
212.18.111.0/24 maxlen: 32
217.114.47.0/24 maxlen: 32
2a0e:da40:4000::/34 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:2e:34:fb:7a:38:c3:21:11:cb:c5:62:c4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28fb193f95316d5942a7346c6ce048872eb3fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:e8:74:77:af:71:29:77:ee:e6:dc:48:58:
8d:f2:e0:c8:05:a4:66:65:f4:f9:65:ad:9e:4f:62:
8f:43:d6:3b:55:dd:e2:36:14:6a:60:4c:d0:09:65:
45:5c:94:4c:fa:1b:31:11:9e:93:c9:b6:d6:f2:ea:
76:91:6c:41:7b:ff:c5:a3:47:65:0e:5e:e3:0d:11:
80:2f:14:83:e1:2f:ca:67:c3:38:88:8e:7d:e0:cb:
0e:83:2f:75:b9:f4:58:7d:b4:2e:80:a3:13:99:14:
65:5f:06:d2:63:9c:51:a5:38:cc:9e:9a:03:81:77:
83:22:9d:fc:9c:9d:65:d8:8f:f6:3d:d3:49:ff:1f:
a5:e4:e5:7a:46:5e:4c:c9:14:31:cd:70:04:c4:ab:
c2:07:0b:a0:ce:2a:cd:44:90:ba:a9:42:69:0c:1c:
dd:15:39:92:54:78:a3:6d:c7:a5:1d:70:ec:52:a3:
9e:01:d5:e4:fc:1b:40:ea:aa:79:32:6f:11:32:08:
fb:80:20:18:fa:3c:99:cc:f9:2c:83:46:e3:0d:b2:
ef:ad:d7:4f:c2:70:2d:98:c0:ec:ca:01:69:3d:8d:
95:a4:2f:e5:f5:8f:a4:2d:f5:08:90:56:21:6c:d9:
e0:6b:c0:1f:57:d8:f4:bc:67:f1:63:b5:5d:be:39:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:19:3F:95:31:6D:59:42:A7:34:6C:6C:E0:48:87:2E:B3:FE:94
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.132.0/24
45.142.156.0/22
45.145.72.0/22
45.150.164.0/22
45.150.226.0/23
45.151.132.0/22
45.154.212.0/22
62.204.54.0/24
91.246.39.0/24
94.154.114.0/24
146.19.114.0/24
146.19.223.0/24
176.116.1.0/24
178.22.30.0/24
188.93.139.0/24
193.218.200.0/23
193.221.94.0/23
194.124.218.0/23
194.124.224.0/23
194.147.98.0-194.147.101.255
212.18.111.0/24
217.114.47.0/24
IPv6:
2a0e:da40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
3d:2c:16:a8:59:0f:7c:92:31:8a:79:cc:a3:52:3e:c9:41:8f:
c1:9c:a9:99:68:59:fd:59:c5:cd:96:a3:bf:c5:51:6b:e1:83:
fe:af:7f:cd:d9:7a:26:51:1f:3e:04:f2:ed:61:cd:2a:da:6c:
e5:9f:ca:57:db:61:de:3f:4f:37:fe:04:1a:6b:2e:31:0c:6b:
94:fd:09:09:df:0b:67:51:1d:6c:94:c2:ac:a8:43:82:80:76:
7c:d8:69:09:f3:0c:3b:6d:ca:e6:68:af:25:98:0e:4f:89:b2:
0f:54:7a:02:6d:94:a9:5a:ad:4c:af:50:d8:17:c6:58:34:db:
ff:fa:6a:d9:14:60:b1:87:d1:04:35:6b:43:c6:c7:86:e9:2a:
31:3d:d0:96:41:a9:c3:4d:3b:c5:b1:4c:dc:0d:40:94:e9:7d:
5f:17:4c:d1:13:1f:04:9a:09:32:58:cf:32:5e:a4:82:87:a0:
c5:7c:b1:fd:3f:84:55:35:f2:28:b5:70:de:74:a1:6f:d0:f7:
06:97:6b:f4:ad:e7:65:72:7e:10:16:e7:e5:dd:97:a8:5e:48:
a1:b5:65:59:a1:49:7f:f4:da:32:a1:dc:b0:79:f4:e0:3a:68:
78:2e:e1:51:f9:6a:64:f2:05:30:dd:b9:30:27:f2:ab:fc:cf:
a8:0c:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:13 2025 by rpki-client