Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/cymC3KZ1c7BXQLRy1AilqQI6bpI.roa
File: cymC3KZ1c7BXQLRy1AilqQI6bpI.roa (raw, json)
Hash identifier: mlam5arUK8SsUqk4z5tLdb+v0T8UqDPPoMtwFlKuVc8=
Subject key identifier: 73:29:82:DC:A6:75:73:B0:57:40:B4:72:D4:08:A5:A9:02:3A:6E:92
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019426D9A29F8157E343E1B48B3B376968B2
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/cymC3KZ1c7BXQLRy1AilqQI6bpI.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/19 maxlen: 19
31.221.160.0/19 maxlen: 19
31.221.192.0/19 maxlen: 19
31.221.224.0/19 maxlen: 19
37.29.128.0/17 maxlen: 17
46.6.0.0/18 maxlen: 18
46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
46.6.112.0/24 maxlen: 24
46.6.113.0/24 maxlen: 24
46.6.114.0/24 maxlen: 24
46.6.128.0/17 maxlen: 17
46.222.0.0/17 maxlen: 17
46.222.128.0/17 maxlen: 17
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.240.0/24 maxlen: 24
95.169.241.0/24 maxlen: 24
95.169.246.0/24 maxlen: 24
109.227.128.0/19 maxlen: 19
109.227.128.0/20 maxlen: 20
109.227.144.0/20 maxlen: 20
109.227.178.0/24 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:9f:81:57:e3:43:e1:b4:8b:3b:37:69:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=732982dca67573b05740b472d408a5a9023a6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:b8:80:1d:30:71:3d:cc:ba:b0:a9:0d:6d:
15:21:67:7e:a1:42:6c:6b:bb:20:2e:40:d8:8c:0f:
9d:69:43:a5:71:6c:5b:71:a2:71:a2:a4:5d:31:32:
00:10:4e:8e:bd:13:9a:c6:5b:e7:ba:94:8d:40:25:
55:12:56:b3:41:55:a2:b1:c3:79:73:ef:8b:81:34:
35:3b:ec:ee:4e:36:ad:96:7b:42:dd:48:cb:76:91:
6b:57:22:c6:dd:54:b5:fb:fd:39:4f:cc:58:6a:fb:
ef:82:e6:78:69:a3:f6:a2:68:9e:b7:83:84:05:ea:
38:c6:99:31:28:57:32:af:f6:09:dc:84:24:d8:67:
f4:a1:d3:f8:7b:87:4e:1d:02:4a:8e:c6:33:a7:b6:
c8:ce:a0:8e:49:e3:80:42:2a:f5:da:c3:8d:e8:7c:
65:e2:fc:6f:cf:2c:68:7c:13:71:77:7f:94:76:3e:
bb:1f:d1:42:82:be:7f:50:d1:f0:74:ab:41:db:48:
d9:65:86:ac:0f:b6:dc:e5:25:a8:51:ed:88:ab:e7:
0f:50:a0:7d:72:08:b5:d2:19:44:98:6e:16:87:23:
64:9a:c4:ea:0e:fe:d7:60:b4:b3:6b:28:9f:18:87:
e6:1e:36:b4:89:db:67:4c:a1:55:62:06:47:d5:37:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:82:DC:A6:75:73:B0:57:40:B4:72:D4:08:A5:A9:02:3A:6E:92
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/cymC3KZ1c7BXQLRy1AilqQI6bpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/18
46.6.112.0-46.6.114.255
46.6.128.0/17
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.240.0/23
95.169.246.0/24
109.227.128.0/19
109.227.178.0/24
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:56:4a:dd:b8:ec:a1:da:ec:2e:8c:65:88:bc:e4:0d:f4:25:
d8:f3:7f:a9:03:b6:71:d7:4e:59:33:88:a3:d9:18:ae:e4:dc:
37:28:93:4d:cb:f0:e2:0c:d3:29:f1:b7:a8:e9:c4:e1:27:ae:
0c:42:a4:56:31:1d:f7:b6:84:7d:a3:29:f3:ca:4d:96:d2:f6:
2f:1e:1e:d2:90:0f:6f:ae:1a:43:28:0c:17:b3:1d:18:67:3b:
fb:6d:18:74:0d:68:55:7d:54:4c:66:5e:26:4d:b5:fa:ea:1a:
2d:95:ee:0a:5a:dd:a1:25:02:fc:9d:c4:e9:4a:83:ac:d3:07:
56:ff:fc:12:66:00:29:77:3c:ef:19:8e:9d:14:ac:64:46:1c:
f5:ba:e6:7b:f0:98:17:a0:de:f1:90:db:b1:05:fb:42:f6:8b:
47:a8:a8:95:49:bc:7f:53:20:2c:8a:bf:52:0d:7a:72:75:88:
92:65:b1:b9:fb:c1:a2:a6:98:64:8e:1a:d1:71:71:e5:8b:8b:
e0:36:97:99:90:b0:9c:a1:2d:db:53:ed:c2:cd:f1:79:dd:34:
55:94:36:37:6b:bd:6c:4b:a3:df:75:72:5e:1b:4f:6e:16:a5:
54:50:2f:a6:e8:64:61:22:86:bb:51:ff:cd:61:e3:51:23:ea:
76:1d:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:39:06 2025 by rpki-client