Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/gNeiVk2m8BNFP8OBLSZLGLMl51E.roa
File: gNeiVk2m8BNFP8OBLSZLGLMl51E.roa (raw, json)
Hash identifier: Pvly8BuBxC0TCqmwqCY2YQ1zQ+UXFXDzJobqg59BS7c=
Subject key identifier: 80:D7:A2:56:4D:A6:F0:13:45:3F:C3:81:2D:26:4B:18:B3:25:E7:51
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0194258E46E1E29D7320C1655C87726094E8
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/gNeiVk2m8BNFP8OBLSZLGLMl51E.roa
Signing time: Thu 02 Jan 2025 05:47:48 +0000
ROA not before: Thu 02 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42560
IP address blocks: 5.43.64.0/18 maxlen: 18
31.185.112.0/20 maxlen: 20
37.205.24.0/21 maxlen: 21
37.208.32.0/21 maxlen: 21
77.77.192.0/18 maxlen: 24
77.77.195.0/24 maxlen: 24
77.77.216.0/22 maxlen: 22
77.78.192.0/18 maxlen: 18
77.78.192.0/19 maxlen: 24
77.78.224.0/19 maxlen: 19
77.221.0.0/19 maxlen: 19
77.238.192.0/19 maxlen: 19
77.239.0.0/19 maxlen: 19
80.80.32.0/20 maxlen: 20
93.180.96.0/19 maxlen: 19
109.237.32.0/20 maxlen: 20
128.65.104.0/21 maxlen: 21
141.170.192.0/20 maxlen: 20
146.255.128.0/19 maxlen: 19
178.209.0.0/19 maxlen: 19
178.236.80.0/20 maxlen: 20
185.6.104.0/22 maxlen: 22
185.13.240.0/22 maxlen: 22
185.15.64.0/22 maxlen: 22
185.18.152.0/22 maxlen: 22
185.24.208.0/22 maxlen: 22
185.48.172.0/22 maxlen: 22
185.58.92.0/22 maxlen: 22
188.127.96.0/19 maxlen: 19
217.197.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:46:e1:e2:9d:73:20:c1:65:5c:87:72:60:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jan 2 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80d7a2564da6f013453fc3812d264b18b325e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:71:03:c7:1e:71:35:cc:32:30:4e:71:52:
f7:5d:ec:ce:71:84:8e:8b:dd:d2:a1:43:6d:8e:6d:
17:12:ec:07:6c:b7:ea:13:70:45:95:d5:87:23:08:
8a:9f:c4:3d:a4:6b:4a:bf:e2:7c:60:99:25:79:a7:
bb:06:05:99:9e:dc:d7:40:16:cb:93:98:09:6e:d1:
31:34:b5:36:76:53:38:a2:84:51:6c:c5:9d:03:f3:
13:df:c3:d0:78:7d:ce:c1:d1:fe:6a:50:13:b9:e4:
dd:c0:3a:8d:e4:99:0d:57:16:5e:1c:44:d5:78:bd:
33:08:d9:57:5f:03:1a:07:06:77:91:a8:97:06:97:
78:2e:5f:16:83:1b:d1:31:72:f0:de:45:47:90:47:
6c:11:df:c5:6c:aa:05:e6:8d:a2:25:5e:b3:e2:b8:
16:fa:ea:83:d1:41:9f:33:da:b6:50:72:32:04:c7:
73:8b:e1:60:8f:26:37:5c:80:3f:5f:8d:05:4c:a1:
d5:3e:6c:1a:f5:1a:82:0f:7f:47:07:86:81:50:9c:
7d:34:e5:fb:54:e7:ff:8c:99:24:0d:9c:b9:4f:0b:
d5:71:69:b0:2f:47:e4:3f:54:82:91:63:ad:a1:08:
f3:c3:22:42:f8:c3:65:08:a9:d8:c8:68:bd:c0:17:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:A2:56:4D:A6:F0:13:45:3F:C3:81:2D:26:4B:18:B3:25:E7:51
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/gNeiVk2m8BNFP8OBLSZLGLMl51E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.64.0/18
31.185.112.0/20
37.205.24.0/21
37.208.32.0/21
77.77.192.0/18
77.78.192.0/18
77.221.0.0/19
77.238.192.0/19
77.239.0.0/19
80.80.32.0/20
93.180.96.0/19
109.237.32.0/20
128.65.104.0/21
141.170.192.0/20
146.255.128.0/19
178.209.0.0/19
178.236.80.0/20
185.6.104.0/22
185.13.240.0/22
185.15.64.0/22
185.18.152.0/22
185.24.208.0/22
185.48.172.0/22
185.58.92.0/22
188.127.96.0/19
217.197.136.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:2b:d3:c4:0e:99:a9:9b:e5:c6:b3:b8:5f:54:79:6f:3e:66:
4b:d4:8d:2e:a5:70:0b:fa:bc:7c:68:00:08:63:1d:94:bb:71:
4d:6b:27:c3:21:ca:3d:82:45:6a:d4:56:6c:a1:e6:90:3f:8d:
03:0c:a8:b1:8c:59:78:ad:73:eb:78:49:ca:07:df:94:af:e6:
8a:17:58:47:cd:cb:2f:ec:f7:21:d3:a4:db:05:f2:d0:d2:cc:
ed:91:91:2e:fa:1f:ff:c9:b0:a2:31:0b:64:22:e0:54:6b:67:
2d:fb:99:d9:43:c5:58:86:20:88:18:a8:18:2d:df:f5:52:02:
0b:47:d7:35:ac:14:c3:0c:02:0f:ef:e5:5a:83:6c:1f:16:15:
63:69:22:33:a3:b4:ba:65:87:e1:5a:a5:8e:9b:44:ba:06:2e:
38:0c:ba:67:cf:37:d2:5e:05:16:3e:3e:8f:85:1c:6a:4a:98:
72:ff:ef:e3:a2:63:f9:bc:e7:21:f9:68:43:f7:bc:48:fa:cf:
ca:11:0e:1f:4c:fe:03:8b:45:ac:14:bb:7c:f1:31:4e:a5:29:
63:72:2c:8c:59:e5:01:68:d9:7e:87:45:76:e9:1c:cd:e8:c1:
c3:65:ea:af:45:a8:b8:9b:dc:40:25:93:62:18:24:ef:8a:f1:
f1:10:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:14 2025 by rpki-client