Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/B6W1AgNMyoetVhanfZIcPIf988Q.roa
File: B6W1AgNMyoetVhanfZIcPIf988Q.roa (raw, json)
Hash identifier: ky+l6G5JPNpK843nS0+vX7IRkIpazhve6svb2SU5oLQ=
Subject key identifier: 07:A5:B5:02:03:4C:CA:87:AD:56:16:A7:7D:92:1C:3C:87:FD:F3:C4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01948259BCFD150DAC3744033F92AEA86BC7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/B6W1AgNMyoetVhanfZIcPIf988Q.roa
Signing time: Mon 20 Jan 2025 06:15:06 +0000
ROA not before: Mon 20 Jan 2025 06:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50113
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
5.180.136.221/32 maxlen: 32
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
147.78.66.7/32 maxlen: 32
185.17.3.102/32 maxlen: 32
185.104.248.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.139.70.116/32 maxlen: 32
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
185.188.180.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
185.244.174.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
194.53.52.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/23 maxlen: 23
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.198.108/32 maxlen: 32
194.67.203.54/32 maxlen: 32
194.67.208.6/32 maxlen: 32
194.67.208.12/32 maxlen: 32
194.67.208.48/32 maxlen: 32
213.108.197.0/24 maxlen: 24
2a04:5200::/29 maxlen: 29
2a04:5200::/32 maxlen: 32
2a04:5200::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:59:bc:fd:15:0d:ac:37:44:03:3f:92:ae:a8:6b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 20 06:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a5b502034cca87ad5616a77d921c3c87fdf3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:ab:a3:b9:08:ab:5e:c1:83:e0:05:09:44:
54:ba:35:b6:35:ee:3f:96:00:ef:b4:5f:1d:24:7a:
55:d1:63:f8:cd:e3:5c:ba:c4:e8:6d:91:c4:e7:0c:
53:00:d6:f6:54:0e:8c:7d:1d:0b:22:87:3a:04:ac:
c2:79:8d:d1:d1:f2:3a:47:8e:73:dd:27:3d:0f:5c:
9a:27:4d:cc:ae:ca:39:ee:7c:80:3d:d3:c9:36:ae:
09:8b:02:2b:68:c3:03:78:3a:7b:d1:2c:c8:da:8d:
7f:12:8f:4a:f6:5c:12:44:6a:9d:82:ca:7b:16:ed:
d1:69:de:a3:5d:39:e1:6d:97:c6:f0:27:07:2d:6a:
dc:5a:c7:86:fe:c9:b2:93:ac:a4:f2:c2:08:19:ce:
ab:47:c6:2b:f2:13:77:b4:d2:5b:2a:16:32:5c:0c:
04:76:b2:55:28:4a:f1:b4:61:d0:e7:10:07:86:29:
3e:ce:db:81:02:22:0a:4e:b2:79:66:cf:e4:0a:38:
e6:56:d4:b1:d6:2f:1f:27:f5:d0:0e:ea:a5:0d:fa:
e6:ff:0c:03:87:a3:e1:40:9d:6b:d9:ea:10:2a:f5:
aa:44:4f:28:33:18:bb:f4:e0:fb:dd:ab:06:7a:54:
a4:d5:fc:42:7d:55:d9:ab:8d:9e:77:02:91:32:46:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:B5:02:03:4C:CA:87:AD:56:16:A7:7D:92:1C:3C:87:FD:F3:C4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/B6W1AgNMyoetVhanfZIcPIf988Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.104.248.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
185.244.174.0/24
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0/24
IPv6:
2a04:5200::/29
2a09:5303::/32
2a0a:9300::/32
Signature Algorithm: sha256WithRSAEncryption
2b:85:d7:3d:d5:3f:d6:57:8e:f3:7f:ec:c9:dd:34:24:7e:91:
a3:04:e0:5d:89:2a:2c:f7:07:69:05:07:41:08:26:2b:4a:e9:
2e:69:78:62:18:c5:7f:19:0a:44:e2:e0:8c:02:e8:aa:c2:53:
cd:81:7b:b5:1e:ab:a8:dc:c4:84:ba:cf:ba:4c:f5:40:c8:f8:
e8:3a:61:69:0e:36:41:4b:3a:5a:65:67:f7:06:a4:33:42:87:
2e:3b:63:14:f6:27:12:0f:2e:ff:36:7e:db:a4:0a:1e:0c:e0:
37:7b:02:7c:a7:41:4d:80:2e:e3:db:01:10:c9:0d:0e:4e:65:
0f:37:f6:f4:4a:47:b1:ff:70:4e:5c:b0:6a:a7:92:f6:88:3a:
ce:09:de:34:62:80:27:cd:0b:c1:64:35:e8:1f:f0:fc:d0:82:
80:c9:1b:f9:00:f3:b7:bf:8b:9d:70:b7:4c:8f:c7:c9:62:f8:
bd:b9:a3:aa:b1:47:fe:27:42:3e:21:37:1e:aa:d3:27:da:f5:
97:8a:52:ac:d8:d6:5e:5d:15:25:4c:e3:eb:e9:f6:ce:e1:10:
34:b9:84:8b:73:84:2a:75:29:50:4e:05:f7:22:41:f9:3d:e0:
e8:18:c5:1e:9b:e5:89:7f:ad:c8:71:ac:1d:0a:b1:24:52:3a:
9c:05:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:21 2025 by rpki-client