Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_-Nj3Wxrzq72VbfAQ-gOeiTBlqY.roa
File: _-Nj3Wxrzq72VbfAQ-gOeiTBlqY.roa (raw, json)
Hash identifier: WkUPk3FG1mZgWIT5TOZx+C1om/GIx7f7SQjsDV5hIfQ=
Subject key identifier: FF:E3:63:DD:6C:6B:CE:AE:F6:55:B7:C0:43:E8:0E:7A:24:C1:96:A6
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 0194B78D5AECBE47F9D94F484E78B631370A
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_-Nj3Wxrzq72VbfAQ-gOeiTBlqY.roa
Signing time: Thu 30 Jan 2025 14:11:21 +0000
ROA not before: Thu 30 Jan 2025 14:11:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5391
IP address blocks: 31.216.192.0/19 maxlen: 19
31.217.0.0/17 maxlen: 17
31.217.0.0/19 maxlen: 19
31.217.32.0/19 maxlen: 19
31.217.64.0/19 maxlen: 19
31.217.96.0/19 maxlen: 19
46.188.128.0/17 maxlen: 17
46.188.128.0/19 maxlen: 19
46.188.160.0/19 maxlen: 19
46.188.192.0/19 maxlen: 19
46.188.224.0/19 maxlen: 19
78.0.0.0/16 maxlen: 16
78.1.0.0/16 maxlen: 16
78.2.0.0/16 maxlen: 16
78.3.0.0/16 maxlen: 16
83.131.0.0/16 maxlen: 16
83.131.0.0/18 maxlen: 18
83.131.8.0/24 maxlen: 24
87.252.128.0/19 maxlen: 24
87.252.128.0/20 maxlen: 20
89.172.0.0/16 maxlen: 16
93.136.0.0/16 maxlen: 16
93.137.0.0/16 maxlen: 18
93.137.128.0/18 maxlen: 18
93.138.0.0/16 maxlen: 16
93.139.0.0/16 maxlen: 16
93.140.0.0/16 maxlen: 16
93.141.0.0/16 maxlen: 16
93.142.0.0/16 maxlen: 16
93.143.0.0/16 maxlen: 16
93.159.64.0/19 maxlen: 19
178.160.0.0/17 maxlen: 17
188.125.0.0/20 maxlen: 20
194.152.192.0/18 maxlen: 18
194.152.198.0/24 maxlen: 24
195.29.0.0/16 maxlen: 18
195.29.0.0/18 maxlen: 18
195.29.64.0/18 maxlen: 18
195.29.128.0/18 maxlen: 18
2a00:c30::/29 maxlen: 29
2a00:c30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:8d:5a:ec:be:47:f9:d9:4f:48:4e:78:b6:31:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 30 14:11:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffe363dd6c6bceaef655b7c043e80e7a24c196a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:43:9e:c1:0a:9f:5b:fc:f2:a8:e5:cc:8c:
08:35:fc:66:50:73:d4:4a:c5:b1:aa:29:54:e1:bd:
8f:38:61:68:e0:27:00:39:ee:7f:d9:cb:0c:f6:b0:
6f:67:19:1b:88:53:5e:24:f8:25:2f:05:63:71:80:
7c:6b:44:15:bd:8c:2c:87:fd:01:ac:a6:b7:d0:bd:
78:63:87:2d:50:f7:eb:b6:df:3b:46:04:ff:1d:b1:
7a:90:a3:7c:47:cc:4e:d3:ec:02:ed:e5:76:6a:32:
9b:02:d5:8c:a8:b7:76:23:f6:c3:1f:ba:d9:56:59:
e9:23:75:2c:6e:36:c5:3f:41:28:b9:c9:db:eb:68:
8d:45:96:a3:84:cc:b6:c0:a9:b4:b2:a3:84:f4:f2:
3f:88:5d:84:7e:74:e4:c8:86:5e:4c:2c:f6:68:96:
c1:57:50:ed:f4:d8:f0:09:ac:b3:38:50:38:0e:69:
aa:a8:e7:1f:48:6e:51:fc:13:e9:20:06:e1:3c:16:
6b:1e:f8:73:e8:75:9b:a3:b3:bb:5c:aa:84:80:8f:
24:85:ba:7b:04:54:bd:f0:18:bb:17:e6:69:06:e8:
4a:0b:48:4f:95:7c:9f:58:e0:0a:70:64:0b:b5:43:
bc:7f:2f:31:e6:44:9d:e1:24:97:a3:14:f6:6c:36:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:63:DD:6C:6B:CE:AE:F6:55:B7:C0:43:E8:0E:7A:24:C1:96:A6
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_-Nj3Wxrzq72VbfAQ-gOeiTBlqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.192.0/19
31.217.0.0/17
46.188.128.0/17
78.0.0.0/14
83.131.0.0/16
87.252.128.0/19
89.172.0.0/16
93.136.0.0/13
93.159.64.0/19
178.160.0.0/17
188.125.0.0/20
194.152.192.0/18
195.29.0.0/16
IPv6:
2a00:c30::/29
Signature Algorithm: sha256WithRSAEncryption
49:db:ea:c4:b5:26:38:28:6a:d1:0c:f2:6e:32:43:e5:61:87:
a1:e4:61:b6:bf:be:c8:9c:30:64:b2:ae:2c:ad:49:af:d9:4f:
1d:53:4b:ba:36:f0:67:c9:95:50:ee:a2:c3:6d:e9:5a:e2:64:
f2:cf:0f:0e:80:d7:f3:89:08:d1:17:c0:13:22:8d:ff:45:a4:
a1:35:0a:3c:e1:00:1d:3c:0e:5f:d0:36:d6:a0:3f:f3:b6:1f:
fe:fb:c1:de:41:3b:64:9e:9e:ec:be:f8:73:38:ef:08:d6:62:
9b:59:1d:06:63:cb:46:02:6c:3e:f4:36:3f:88:46:9a:9c:24:
b9:83:23:20:54:bf:3c:0a:03:07:5f:72:25:ca:06:16:c1:bc:
23:b5:c6:ea:b6:df:cd:1e:09:6e:2c:b1:cc:53:ba:1f:78:36:
82:2a:21:03:c1:23:78:4a:b4:e5:07:14:40:6f:96:9a:db:6b:
59:fb:2d:d4:a8:2d:cf:2d:4f:b4:ee:a1:89:f8:1a:4c:6d:58:
52:a7:b6:a4:90:5f:b7:7a:59:2c:26:d6:5e:76:e6:79:82:4a:
af:55:2b:b4:fb:d0:17:dc:93:53:4a:10:84:6f:6f:1d:c9:e8:
19:5f:5e:f3:2f:1f:cf:a8:b7:f2:8f:01:81:82:a9:c8:89:cb:
cd:f9:1a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:22 2025 by rpki-client