Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa
File: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (raw, json)
Hash identifier: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=
Subject key identifier: 1F:3D:3F:76:8A:5D:39:C4:E4:42:88:BE:E1:0D:E6:3B:AB:D2:EE:28
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01942067F7928A6824EC7E22365C72CD8848
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.4.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.93.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:92:8a:68:24:ec:7e:22:36:5c:72:cd:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f3d3f768a5d39c4e44288bee10de63babd2ee28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:fc:88:e9:85:15:41:9a:c7:26:53:ba:22:
14:e5:1c:35:8d:e0:ec:64:b2:17:bb:e3:1f:41:80:
b0:68:3c:97:aa:71:be:ae:98:2e:eb:a8:ef:0e:b5:
6f:eb:3d:5f:eb:25:38:26:7f:1f:76:74:ea:fe:17:
85:ce:90:a9:80:87:9d:68:de:65:2f:2c:bb:25:2b:
18:69:11:03:0a:b4:5e:46:78:a2:39:bb:2b:0e:b0:
5f:54:55:6d:bd:67:0d:b1:bd:3b:91:40:35:f5:fd:
57:cb:7b:3a:d3:c4:b5:dc:85:38:21:60:00:b3:f9:
43:dc:7d:a5:23:5d:72:45:19:82:a0:52:d8:20:8b:
8a:5d:f3:31:48:b2:ba:43:e1:6a:61:d7:b6:e7:a4:
69:e7:98:87:17:2d:79:cd:19:8c:a3:36:e4:5c:4d:
26:25:55:98:f8:9e:26:36:f0:13:6a:96:dd:6e:1e:
ec:8a:37:0e:6e:7e:ce:29:30:36:b9:7f:3a:85:cb:
dc:ad:61:22:bc:94:29:f2:a9:6f:8a:59:35:9f:95:
b5:2c:d8:52:96:3a:b1:19:1f:fe:df:e8:b8:06:53:
4a:3d:68:99:65:da:fc:ab:fc:28:ab:2d:47:5e:50:
be:6a:4e:27:23:7d:a5:ce:32:35:55:3e:67:d1:0a:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:3F:76:8A:5D:39:C4:E4:42:88:BE:E1:0D:E6:3B:AB:D2:EE:28
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:e8:c3:27:82:e8:af:32:fa:e0:3d:b0:60:35:c7:6f:24:1d:
e9:bd:fc:5c:ad:32:b6:0e:95:6d:5a:a6:9f:d6:a0:b7:69:84:
50:a3:36:76:0a:a9:17:e5:d7:d9:93:fc:8d:dd:53:71:1c:2d:
89:89:e5:89:19:ee:79:34:81:9d:bb:7a:7f:4b:e5:26:41:d9:
59:39:37:e1:32:ba:1a:ad:bb:42:39:9a:e9:3f:79:78:8b:a9:
a1:dc:7e:db:ca:e5:1f:5b:fa:9f:13:70:3b:fd:3e:41:a2:8a:
65:bc:c6:16:4c:e3:9a:16:e8:3d:4c:a7:57:e7:26:ec:af:87:
cb:d9:c5:4d:cc:92:c4:a5:68:45:84:48:44:28:dd:b6:19:72:
41:fb:51:8c:8c:df:f3:32:d5:81:9d:b5:09:73:f5:4f:bb:fb:
d2:46:a7:dc:30:ee:aa:22:06:99:61:0b:6d:de:d1:33:05:02:
df:76:94:14:e6:a3:3e:cf:5b:48:29:aa:f1:f1:c9:a5:21:23:
8c:49:7f:a6:5d:21:14:70:86:db:85:a0:73:5b:a8:de:f9:f9:
3f:fe:f5:29:f9:59:fc:1f:da:09:05:f8:f7:ad:70:20:bf:d6:
a2:70:72:90:61:71:11:e8:90:98:48:e8:c2:88:58:05:46:10:
c1:4c:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:32 2025 by rpki-client