Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/CNg9efBh8nRUmxnGZHpn0O6Ft2w.roa
File: CNg9efBh8nRUmxnGZHpn0O6Ft2w.roa (raw, json)
Hash identifier: v9l5QWH/h0KPe9MDPyU6rFZoQNRAtRD+iQTxkTK2gXM=
Subject key identifier: 08:D8:3D:79:F0:61:F2:74:54:9B:19:C6:64:7A:67:D0:EE:85:B7:6C
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0192C2E7F013360891462418B288FBE61FB3
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/CNg9efBh8nRUmxnGZHpn0O6Ft2w.roa
Signing time: Fri 25 Oct 2024 09:00:33 +0000
ROA not before: Fri 25 Oct 2024 09:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
45.66.36.0/22 maxlen: 22
45.80.160.0/22 maxlen: 22
45.130.56.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.216.0/22 maxlen: 22
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
2a07:5940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:e7:f0:13:36:08:91:46:24:18:b2:88:fb:e6:1f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 25 09:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d83d79f061f274549b19c6647a67d0ee85b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c9:82:c3:17:86:3e:e9:d1:2a:c1:6b:8a:10:
de:8f:a6:2b:c3:36:1c:0f:e0:1f:04:3f:5c:af:fa:
87:4a:32:35:ce:fe:12:59:66:13:c1:c8:94:f6:65:
09:a3:6d:a5:08:d0:b8:05:8f:cf:76:ad:b8:01:cf:
82:76:27:29:4e:09:d8:62:16:9d:72:0c:38:a1:2e:
d8:e5:57:dd:37:8a:13:58:5b:ea:0a:58:fd:96:31:
8e:07:7d:0e:c0:70:6f:02:c7:cf:a5:78:29:03:1c:
e8:05:09:79:14:b1:f9:82:91:be:4e:79:ee:8f:94:
6d:60:0a:2f:d8:35:21:9a:95:cc:a9:a6:f3:7f:87:
ec:c4:b0:8b:01:d2:d0:3b:7c:2f:31:9e:8e:21:d1:
a9:49:7f:f5:7b:4e:c1:a4:54:e9:f4:6d:a5:82:37:
46:fb:1e:f6:f8:cb:6b:07:9a:f9:a0:81:71:39:6d:
1d:c2:ca:41:9a:0d:00:8e:9e:92:a7:34:4f:3d:84:
94:be:ac:46:7e:96:9e:fe:d1:6b:f8:93:3a:e6:47:
eb:58:58:9b:5e:57:22:22:04:09:90:31:ea:29:95:
ba:b2:3f:94:81:22:65:4d:a8:6f:06:06:71:7c:0e:
f2:f4:5a:eb:24:b4:ac:88:1d:f0:e3:f7:b8:68:9d:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D8:3D:79:F0:61:F2:74:54:9B:19:C6:64:7A:67:D0:EE:85:B7:6C
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/CNg9efBh8nRUmxnGZHpn0O6Ft2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
45.66.36.0/22
45.80.160.0/22
45.130.56.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.216.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
11:91:91:d1:cc:23:63:93:d9:41:b6:7d:40:83:a1:66:c0:82:
aa:64:2d:78:44:02:0b:ab:fd:d9:e6:a6:af:68:b4:08:49:e3:
34:00:d9:c0:19:be:52:99:af:eb:67:11:31:5b:7f:d4:44:cd:
36:07:36:4d:7f:41:51:d0:1c:18:42:05:23:85:c9:83:e9:f6:
56:51:ab:1f:d3:a7:0a:97:e1:f2:d7:29:db:b7:88:81:f6:b0:
36:4e:74:af:58:61:cf:7b:b9:0c:26:dc:41:f5:c5:db:b3:67:
f9:43:80:54:ca:3a:54:dd:28:44:1c:ca:56:1b:2e:a1:ce:43:
b4:3f:ff:99:e3:01:c7:ad:ca:a4:9d:e7:c6:8a:91:e3:dd:7a:
31:ba:93:80:da:93:e8:07:d9:dd:5a:b7:b1:18:1e:06:5a:ab:
70:9b:f3:61:b1:c3:f9:b4:82:cd:2a:a7:6d:e0:e2:f5:0c:85:
36:56:ba:97:02:32:28:47:2f:f1:59:b0:99:34:04:f4:b9:d7:
64:5d:7c:32:e5:77:62:22:90:ee:3a:8b:e6:52:ee:1d:12:16:
e2:cf:3f:1f:ad:08:30:bd:ab:5f:51:4f:19:59:69:05:e1:9e:
cc:b4:dc:9b:b8:78:a6:84:ef:76:3e:ae:e5:17:10:10:b2:3a:
05:06:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:32 2025 by rpki-client