Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/gSGbezVmkH2-q93vsTL34Cyum1E.roa
File: gSGbezVmkH2-q93vsTL34Cyum1E.roa (raw, json)
Hash identifier: vKlgKu/SwdLFk/s/CgL6yKvQzYiKId9jD+bmK2hLw2E=
Subject key identifier: 81:21:9B:7B:35:66:90:7D:BE:AB:DD:EF:B1:32:F7:E0:2C:AE:9B:51
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 0592CCF2
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/gSGbezVmkH2-q93vsTL34Cyum1E.roa
Signing time: Sat 01 Jan 2022 03:51:21 +0000
ROA not before: Sat 01 Jan 2022 03:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.113.71.0/24 maxlen: 24
188.126.192.0/19 maxlen: 19
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
78.156.0.0/19 maxlen: 24
109.108.216.0/21 maxlen: 21
84.209.234.0/24 maxlen: 24
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93506802 (0x592ccf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Jan 1 03:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81219b7b3566907dbeabddefb132f7e02cae9b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:83:6c:f7:e8:4b:d5:d2:6e:02:f5:ae:ac:
96:5d:40:de:4e:0e:d6:f5:b7:85:a8:41:9f:bc:e3:
63:f2:90:a6:52:2f:5f:4f:50:95:29:18:cf:54:8e:
c3:66:3f:51:2b:9f:8e:15:41:ef:51:8a:6f:1b:d7:
96:84:a4:41:e6:be:e9:11:40:c7:a8:de:93:8a:b5:
89:84:bd:e8:be:28:ab:21:0d:18:e1:cb:c0:75:22:
61:a4:a6:4d:8a:82:e4:d4:95:ee:12:52:03:30:29:
17:2a:c2:a2:55:ce:b4:ee:3a:bc:a7:11:f0:b4:e4:
80:20:a0:93:a9:6f:9e:0c:89:b2:ba:f5:09:73:0e:
f6:b8:6e:76:dc:e6:82:23:9b:03:40:4c:4d:d6:e5:
b6:5f:b3:b1:da:b4:76:0a:87:80:a0:4b:3f:c9:66:
1a:b6:c5:b1:eb:01:32:82:cf:ad:f9:63:65:8f:0d:
4b:7a:63:21:9b:9f:00:5a:d5:c5:c3:0a:48:ff:80:
ab:f1:ea:35:06:e4:29:4d:62:be:e0:a9:27:94:4c:
1d:6a:30:f7:a5:8d:10:25:95:5c:78:fb:18:75:ee:
60:ac:9e:93:dc:83:37:c6:18:3e:25:58:76:14:b3:
52:76:c6:56:6b:b2:3e:0c:f0:44:76:c8:0c:2d:bf:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:9B:7B:35:66:90:7D:BE:AB:DD:EF:B1:32:F7:E0:2C:AE:9B:51
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/gSGbezVmkH2-q93vsTL34Cyum1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:4e:0b:ef:cf:cc:17:8e:90:ec:06:49:ea:3d:7b:6b:83:23:
fe:88:20:c5:c4:62:05:38:e9:28:f3:ee:c6:b7:29:84:fc:f7:
47:e3:ff:6c:e3:ce:48:4d:28:0a:ea:37:2a:e9:e6:35:be:c2:
60:80:2a:ce:f3:c5:88:cd:ad:60:ea:cb:ab:45:86:f5:43:b2:
85:dd:5b:25:cc:70:04:8d:71:79:79:a6:99:ad:e6:33:49:fc:
d2:3c:5d:af:17:8e:dd:50:a6:36:99:ee:a2:be:7d:dc:e5:68:
20:5b:c7:ed:9b:f8:63:08:ca:16:a3:e3:13:17:67:2b:37:df:
cb:da:19:ae:e1:9f:39:07:d2:f6:2f:34:6d:32:fd:a5:c7:d2:
14:12:f0:03:8b:75:f9:b3:71:88:4f:74:d5:0c:d2:99:3f:cb:
8d:03:e9:c6:06:59:a9:4d:09:c0:54:09:67:ba:8a:44:31:9a:
54:31:d6:47:1d:3f:7a:b7:f4:7e:14:96:f8:47:52:c6:4f:12:
62:ac:8a:2c:b8:ff:c7:f8:fa:23:6c:73:e3:4c:1b:d7:88:d9:
cd:36:34:8e:bc:27:cb:65:d0:55:47:63:5a:6d:53:b6:85:69:
f0:fa:be:bd:b7:f3:d3:4b:33:99:bb:24:8d:67:1a:64:99:b8:
0d:ae:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:53 2025 by rpki-client