Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/YPZX0HGNcy7fuonRciJjzr0LELg.roa
File: YPZX0HGNcy7fuonRciJjzr0LELg.roa (raw, json)
Hash identifier: KklsaD6L02aKBxwsHKKUSkABYQGV+6RasQceYPMlPew=
Subject key identifier: 60:F6:57:D0:71:8D:73:2E:DF:BA:89:D1:72:22:63:CE:BD:0B:10:B8
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019426D9411AB3CEBF097ABA6F780A99EB57
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/YPZX0HGNcy7fuonRciJjzr0LELg.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197328
IP address blocks: 31.210.96.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
31.210.120.0/24 maxlen: 24
31.210.121.0/24 maxlen: 24
31.210.122.0/24 maxlen: 24
31.210.123.0/24 maxlen: 24
31.210.124.0/24 maxlen: 24
31.210.125.0/24 maxlen: 24
31.210.126.0/24 maxlen: 24
31.210.127.0/24 maxlen: 24
46.45.128.0/24 maxlen: 24
46.45.136.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
46.45.140.0/24 maxlen: 24
46.45.141.0/24 maxlen: 24
46.45.142.0/24 maxlen: 24
46.45.143.0/24 maxlen: 24
46.45.168.0/24 maxlen: 24
46.45.169.0/24 maxlen: 24
46.45.170.0/24 maxlen: 24
46.45.171.0/24 maxlen: 24
46.45.172.0/24 maxlen: 24
46.45.173.0/24 maxlen: 24
46.45.174.0/24 maxlen: 24
46.45.175.0/24 maxlen: 24
46.45.176.0/24 maxlen: 24
46.45.177.0/24 maxlen: 24
46.45.178.0/24 maxlen: 24
46.45.179.0/24 maxlen: 24
46.45.180.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
176.53.16.0/24 maxlen: 24
176.53.17.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.21.0/24 maxlen: 24
176.53.22.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
176.53.24.0/24 maxlen: 24
176.53.25.0/24 maxlen: 24
176.53.26.0/24 maxlen: 24
176.53.27.0/24 maxlen: 24
176.53.28.0/24 maxlen: 24
176.53.29.0/24 maxlen: 24
176.53.30.0/24 maxlen: 24
176.53.31.0/24 maxlen: 24
176.53.112.0/24 maxlen: 24
176.53.113.0/24 maxlen: 24
176.53.114.0/24 maxlen: 24
176.53.115.0/24 maxlen: 24
176.53.116.0/24 maxlen: 24
176.53.117.0/24 maxlen: 24
176.53.118.0/24 maxlen: 24
176.53.119.0/24 maxlen: 24
176.53.120.0/24 maxlen: 24
176.53.121.0/24 maxlen: 24
176.53.122.0/24 maxlen: 24
176.53.123.0/24 maxlen: 24
176.53.124.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
178.211.32.0/24 maxlen: 24
178.211.33.0/24 maxlen: 24
178.211.34.0/24 maxlen: 24
178.211.35.0/24 maxlen: 24
178.211.36.0/24 maxlen: 24
178.211.37.0/24 maxlen: 24
178.211.38.0/24 maxlen: 24
178.211.39.0/24 maxlen: 24
178.211.40.0/24 maxlen: 24
178.211.41.0/24 maxlen: 24
178.211.43.0/24 maxlen: 24
178.211.44.0/24 maxlen: 24
178.211.45.0/24 maxlen: 24
178.211.46.0/24 maxlen: 24
178.211.47.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:41:1a:b3:ce:bf:09:7a:ba:6f:78:0a:99:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f657d0718d732edfba89d1722263cebd0b10b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:11:5a:26:c0:94:ec:7c:c7:60:e5:4d:38:
1a:cb:23:1d:50:a5:93:8c:ff:fa:03:88:7b:43:72:
4e:eb:f7:b6:23:54:73:8f:4d:be:71:a3:8e:f3:88:
d7:7f:58:1a:93:fe:31:ed:6d:b2:d2:1c:18:75:bb:
9b:3e:66:26:d8:13:bd:9d:b6:12:39:c5:b7:c1:ed:
62:a2:e0:73:87:39:58:16:c1:37:fe:f2:c6:51:e8:
c8:4d:6e:d5:11:50:f1:e9:50:d4:54:bd:17:0f:5e:
c6:27:8b:4d:18:3e:18:72:b0:06:e3:f5:19:52:6d:
c6:13:38:a8:35:2b:53:92:0d:72:cb:8c:32:55:4d:
5f:d5:95:2f:0b:a5:79:3b:a1:3e:bd:f8:6e:54:04:
bd:c3:18:a7:cb:79:86:b1:6b:04:66:79:a5:46:ca:
57:dd:9a:71:03:80:58:3d:12:05:17:ba:f9:4c:67:
c1:83:d3:02:5e:ed:ed:11:21:5b:2c:e0:a6:3d:78:
23:9a:85:95:0d:a8:c1:27:b9:36:cb:39:c4:78:13:
51:46:a7:73:e1:b5:96:34:58:c5:9f:9c:1b:23:23:
21:e4:d8:32:5d:6c:69:60:ef:bb:6f:df:92:56:d3:
a0:71:90:cb:f9:83:97:48:3c:41:d4:6f:07:87:ec:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:57:D0:71:8D:73:2E:DF:BA:89:D1:72:22:63:CE:BD:0B:10:B8
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/YPZX0HGNcy7fuonRciJjzr0LELg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.96.0/19
46.45.128.0/24
46.45.136.0/21
46.45.168.0-46.45.183.255
176.53.16.0/20
176.53.112.0/20
178.211.32.0-178.211.41.255
178.211.43.0-178.211.47.255
213.128.80.0/21
Signature Algorithm: sha256WithRSAEncryption
71:fd:eb:48:4e:51:26:bd:bf:2c:7c:ae:ba:10:45:7d:7f:4b:
5f:a9:cc:6b:68:1f:c3:59:b3:4c:d0:ba:52:67:ca:27:c4:6f:
b4:46:e4:e8:f9:e9:4c:d4:19:0f:a9:0c:6f:6f:69:94:ef:1c:
13:21:e7:03:2f:de:fb:ce:0f:09:d7:e5:94:e0:fc:8e:7a:d3:
64:02:a3:b3:ac:63:1d:9a:2f:e9:ab:80:b1:10:aa:ce:26:6d:
d3:1c:11:99:f3:43:8a:2b:5c:4b:56:ed:b6:0c:52:1f:9c:42:
47:58:d8:e6:f7:ad:3e:24:01:c4:c1:ce:6c:21:4f:42:53:6b:
29:8d:55:b5:b5:e2:8a:18:d4:5b:25:d2:53:77:c0:13:ad:36:
76:70:32:28:47:ca:eb:5f:f1:ad:aa:ab:cf:82:d6:cb:9f:bc:
14:99:06:b1:fd:91:58:f8:7a:37:7b:67:a9:7a:ad:23:21:fd:
97:ae:b8:d0:83:c2:2d:dd:d4:e1:ce:c3:a0:d7:f6:9c:53:db:
94:73:76:5e:88:c4:07:f6:a0:7e:2d:dd:75:17:a4:e0:92:af:
8b:1a:2d:dc:58:68:e2:37:5b:bc:76:de:82:51:b5:d6:80:88:
3d:f4:62:f7:9d:78:d4:17:a2:a2:ea:06:8f:9d:3a:b4:00:76:
f4:a7:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:09 2025 by rpki-client