Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wBLhap3qy1Bc5_-udfUtTUhswUE.roa
File: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (raw, json)
Hash identifier: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=
Subject key identifier: C0:12:E1:6A:9D:EA:CB:50:5C:E7:FF:AE:75:F5:2D:4D:48:6C:C1:41
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01942067ED61A9542196E5A436F7F150F430
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wBLhap3qy1Bc5_-udfUtTUhswUE.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51430
IP address blocks: 31.3.152.0/22 maxlen: 22
31.3.156.0/24 maxlen: 24
31.3.157.0/24 maxlen: 24
31.3.158.0/23 maxlen: 23
37.46.112.0/24 maxlen: 24
37.46.113.0/24 maxlen: 24
37.46.114.0/24 maxlen: 24
37.46.115.0/24 maxlen: 24
37.46.116.0/24 maxlen: 24
37.46.117.0/24 maxlen: 24
37.46.118.0/23 maxlen: 23
37.46.118.0/24 maxlen: 24
37.46.119.0/24 maxlen: 24
37.46.120.0/24 maxlen: 24
37.46.121.0/24 maxlen: 24
37.46.122.0/24 maxlen: 24
37.46.123.0/24 maxlen: 24
37.46.124.0/22 maxlen: 22
79.142.64.0/22 maxlen: 24
79.142.68.0/24 maxlen: 24
79.142.69.0/24 maxlen: 24
79.142.70.0/24 maxlen: 24
79.142.71.0/24 maxlen: 24
79.142.72.0/24 maxlen: 24
79.142.73.0/24 maxlen: 24
79.142.74.0/23 maxlen: 23
79.142.76.0/23 maxlen: 23
79.142.78.0/24 maxlen: 24
79.142.79.0/24 maxlen: 24
91.214.44.0/24 maxlen: 24
91.214.47.0/24 maxlen: 24
128.127.104.0/23 maxlen: 23
128.127.106.0/23 maxlen: 23
128.127.108.0/24 maxlen: 24
128.127.109.0/24 maxlen: 24
128.127.110.0/23 maxlen: 23
185.2.28.0/24 maxlen: 24
185.2.29.0/24 maxlen: 24
185.2.30.0/24 maxlen: 24
185.2.31.0/24 maxlen: 24
185.7.32.0/24 maxlen: 24
185.7.33.0/24 maxlen: 24
185.7.34.0/24 maxlen: 24
185.7.35.0/24 maxlen: 24
185.10.56.0/22 maxlen: 22
213.5.64.0/21 maxlen: 21
2a00:7140::/32 maxlen: 32
2a00:7142::/32 maxlen: 32
2a00:7143::/32 maxlen: 32
2a00:7143:101::/48 maxlen: 48
2a00:7144::/32 maxlen: 32
2a00:7145::/48 maxlen: 48
2a00:7145:b1::/48 maxlen: 48
2a00:7145:c1::/48 maxlen: 48
2a00:7145:c2::/48 maxlen: 48
2a00:7146::/48 maxlen: 48
2a00:7147:22::/48 maxlen: 48
2a00:7147:a9::/48 maxlen: 48
2a00:7147:b1::/48 maxlen: 48
2a00:7147:e1::/48 maxlen: 48
2a00:7147:e2::/48 maxlen: 48
2a00:7147:e3::/48 maxlen: 48
2a00:7147:e4::/48 maxlen: 48
2a00:7147:e5::/48 maxlen: 48
2a00:7147:e6::/48 maxlen: 48
2a00:7147:e7::/48 maxlen: 48
2a00:7147:e8::/48 maxlen: 48
2a00:7147:e9::/48 maxlen: 48
2a00:7147:e10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:61:a9:54:21:96:e5:a4:36:f7:f1:50:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c012e16a9deacb505ce7ffae75f52d4d486cc141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:79:b8:b8:fc:a4:80:f1:ea:42:d3:77:47:
43:ce:aa:ee:47:da:df:47:aa:ca:fb:59:33:a3:c4:
19:7d:c6:33:9e:60:58:c3:47:05:11:2a:bb:4d:ab:
05:12:73:42:a3:2d:6b:12:f1:04:86:94:e7:16:2f:
25:ea:78:a2:f7:8c:94:6a:2d:89:55:49:90:f4:ae:
c4:0a:ec:84:46:17:ab:c8:37:6c:2d:e0:39:c2:62:
d2:ad:11:00:19:c9:64:8f:4d:a1:c9:72:4c:7e:ed:
79:5b:1f:58:1c:9f:b4:2b:9c:39:0c:5c:bf:2d:35:
14:b2:2d:5a:58:c0:09:a3:20:a5:b4:5e:e7:57:28:
c6:90:20:ef:62:69:32:87:a8:02:d7:4d:9b:b1:50:
0e:11:77:f5:ef:8e:54:67:d5:6b:31:c2:84:e2:33:
e0:f6:e3:43:87:40:7d:5c:d7:fc:d4:82:18:eb:97:
cb:45:03:86:f8:5a:97:b3:b7:a4:7c:49:ee:47:a5:
b7:74:f3:49:7b:ec:ba:2c:e0:a3:bb:13:7c:87:f8:
dd:09:76:14:8f:92:29:14:f8:5a:25:5f:d4:12:3e:
86:20:7b:e6:c4:85:bd:94:4b:01:57:11:85:b7:66:
bd:fe:4f:25:10:4b:1c:eb:9d:05:60:74:43:5a:ad:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:E1:6A:9D:EA:CB:50:5C:E7:FF:AE:75:F5:2D:4D:48:6C:C1:41
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wBLhap3qy1Bc5_-udfUtTUhswUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.152.0/21
37.46.112.0/20
79.142.64.0/20
91.214.44.0/24
91.214.47.0/24
128.127.104.0/21
185.2.28.0/22
185.7.32.0/22
185.10.56.0/22
213.5.64.0/21
IPv6:
2a00:7140::/32
2a00:7142::-2a00:7145:0:ffff:ffff:ffff:ffff:ffff
2a00:7145:b1::/48
2a00:7145:c1::-2a00:7145:c2:ffff:ffff:ffff:ffff:ffff
2a00:7146::/48
2a00:7147:22::/48
2a00:7147:a9::/48
2a00:7147:b1::/48
2a00:7147:e1::-2a00:7147:e9:ffff:ffff:ffff:ffff:ffff
2a00:7147:e10::/48
Signature Algorithm: sha256WithRSAEncryption
23:87:fb:a9:a8:3d:d7:5d:62:c4:98:9c:07:70:15:75:e2:b4:
b2:dc:6a:ff:2f:35:28:77:06:11:5a:7a:06:20:ec:a5:b4:0e:
f4:5d:cf:1c:b8:55:76:b0:1c:a9:07:f1:49:e7:12:20:a9:b6:
07:dc:48:67:b4:b1:4a:52:f5:0f:d8:a9:a8:d3:52:cd:c0:c5:
5c:3e:14:ac:84:8e:be:6d:55:d1:c5:cd:53:f9:68:c4:39:ce:
48:d3:77:c1:10:f0:89:78:98:87:bb:fb:4d:f7:81:8d:68:f1:
9d:8c:bc:1a:05:f6:ef:db:97:ba:c3:de:75:44:cb:17:db:a0:
c9:24:08:57:82:c7:23:6a:04:0f:93:3c:63:71:5c:15:1f:e5:
c7:91:d1:7f:62:4f:16:76:56:9d:d9:0e:83:74:ec:de:cf:cb:
30:c9:ed:ab:35:16:71:b6:f5:38:f2:92:a7:41:22:09:9f:13:
6a:b0:bb:bc:ef:8c:46:24:fa:34:4a:4d:db:bb:81:64:bb:30:
6d:a3:54:98:0c:d7:37:53:6f:f4:f5:ed:4e:36:b5:99:ff:23:
0c:4d:a8:00:ae:a8:7e:f7:70:64:d1:8e:32:07:04:c8:7c:2a:
8a:3b:33:d3:aa:d7:c0:37:eb:6b:7d:c0:e8:2a:27:df:3d:0d:
35:c8:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:50 2025 by rpki-client