Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/5XgJfW9BBBu_zOj1ME7VpY8ijjM.roa
File: 5XgJfW9BBBu_zOj1ME7VpY8ijjM.roa (raw, json)
Hash identifier: Np4aHzK4BGCW+ug4qwl52kGqPLGtiI2p1XB6P+hJkws=
Subject key identifier: E5:78:09:7D:6F:41:04:1B:BF:CC:E8:F5:30:4E:D5:A5:8F:22:8E:33
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1573FDD5
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/5XgJfW9BBBu_zOj1ME7VpY8ijjM.roa
Signing time: Sat 01 Jan 2022 14:03:38 +0000
ROA not before: Sat 01 Jan 2022 14:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48950
IP address blocks: 104.160.2.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359923157 (0x1573fdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e578097d6f41041bbfcce8f5304ed5a58f228e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:5a:52:e1:76:67:82:03:96:c0:4a:32:66:
a7:23:2c:b5:8f:1f:16:66:9c:29:79:25:1c:c9:00:
73:18:93:74:da:06:18:bd:88:5f:be:2a:f8:bd:71:
11:ca:6b:13:f4:e6:1c:de:67:47:ee:31:39:be:35:
43:1e:7b:25:83:19:a2:37:b7:97:04:34:7a:3d:65:
6f:00:00:f1:69:1e:b2:af:54:36:f8:e7:a1:cf:f7:
af:a1:80:b5:79:20:85:d2:94:af:0d:5b:4f:16:4e:
c6:0f:5d:6b:1f:8b:77:d6:70:6a:53:52:db:93:87:
ac:31:a8:36:55:00:06:6b:43:c8:e0:b3:c1:4d:19:
6c:16:fd:d6:e9:2e:9a:c9:fc:68:5e:31:89:e0:ef:
4e:a6:f6:fe:4f:ba:92:dd:22:aa:b2:e6:e9:db:12:
8c:2a:1e:55:c4:58:3b:34:bc:e1:97:80:c3:e4:ea:
de:32:a4:98:bc:c3:15:98:00:dc:97:20:2f:50:95:
23:07:3e:c3:54:8d:7d:df:a2:23:c5:cb:8f:cc:4f:
ba:5f:6d:c7:a2:6f:b4:53:7f:c7:48:e8:e9:d5:10:
4d:53:bc:6f:66:28:b5:d9:d7:a3:22:76:36:20:5a:
2f:f9:42:b1:7b:ed:be:b0:01:dc:3d:41:e8:a9:02:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:09:7D:6F:41:04:1B:BF:CC:E8:F5:30:4E:D5:A5:8F:22:8E:33
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/5XgJfW9BBBu_zOj1ME7VpY8ijjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.2.0/24
104.160.5.0-104.160.6.255
104.160.10.0/24
158.222.3.0/24
158.222.5.0/24
158.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
79:fe:fe:91:8e:7f:d2:fc:26:3e:d4:0c:f9:18:93:e4:37:61:
3b:39:bd:0b:32:d8:7c:23:d2:d6:2c:5a:f2:39:d2:76:d0:ce:
d3:a6:4c:36:23:cd:bc:b9:56:24:77:74:67:a1:a9:ba:1c:47:
38:bb:bb:84:a8:d1:a2:fe:d4:be:fc:3a:7e:dc:6f:35:8c:63:
b5:a8:e6:aa:bd:2b:54:8f:17:13:96:b3:70:c9:f4:c9:6a:df:
13:71:38:51:2d:5c:42:40:26:27:a1:3d:64:fb:e1:ac:29:5b:
2e:a5:7c:1c:cf:60:a4:0c:a5:22:55:55:0b:2f:b0:74:fa:4a:
dd:69:ce:3e:f7:ed:74:12:34:30:79:f5:d8:a1:d6:ae:e1:bd:
57:04:ae:9a:af:a7:82:1c:9c:0e:25:30:39:5e:e3:c6:14:8b:
6e:d9:30:4e:7d:44:c4:6f:00:2b:e7:24:7e:c7:05:3d:27:5d:
a8:30:7c:f9:f6:4c:26:45:70:fc:e0:30:ac:34:e8:80:cf:28:
33:a3:51:c2:e0:70:f4:01:f0:25:ae:90:5b:17:a6:f1:a5:68:
7a:75:2c:de:04:e0:19:b3:5b:66:a7:62:fc:e7:7b:b3:7c:df:
7e:20:7a:62:06:40:c4:25:6b:e0:9a:d5:57:cb:93:fc:50:37:
cc:77:d3:00
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEFXP91TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGYzNzZkZjVmOWVmNDg3YzgyYjMxYTg3NWM2YTQ5NmQ3OWNhMGQ3MB4XDTIyMDEw
MTE0MDMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTU3ODA5N2Q2ZjQx
MDQxYmJmY2NlOGY1MzA0ZWQ1YTU4ZjIyOGUzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdRWlLhdmeCA5bASjJmpyMstY8fFmacKXklHMkAcxiTdNoG
GL2IX74q+L1xEcprE/TmHN5nR+4xOb41Qx57JYMZoje3lwQ0ej1lbwAA8Wkesq9U
Nvjnoc/3r6GAtXkghdKUrw1bTxZOxg9dax+Ld9ZwalNS25OHrDGoNlUABmtDyOCz
wU0ZbBb91ukumsn8aF4xieDvTqb2/k+6kt0iqrLm6dsSjCoeVcRYOzS84ZeAw+Tq
3jKkmLzDFZgA3JcgL1CVIwc+w1SNfd+iI8XLj8xPul9tx6JvtFN/x0jo6dUQTVO8
b2YotdnXoyJ2NiBaL/lCsXvtvrAB3D1B6KkCHhcCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBTleAl9b0EEG7/M6PUwTtWljyKOMzAfBgNVHSMEGDAWgBSA83bfX570h8gr
Mah1xqSW15yg1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dQTjIzMS1lOUlmSUt6R29kY2FrbHRlY29OYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvNzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8x
LzVYZ0pmVzlCQkJ1X3pPajFNRTdWcFk4aWpqTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Nzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8xL2dQTjIzMS1lOUlm
SUt6R29kY2FrbHRlY29OYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAGigAjAMAwQAaKAFAwQAaKAGAwQA
aKAKAwQAnt4DAwQAnt4FAwQAnt4HMA0GCSqGSIb3DQEBCwUAA4IBAQB5/v6Rjn/S
/CY+1Az5GJPkN2E7Ob0LMth8I9LWLFryOdJ20M7Tpkw2I828uVYkd3Rnoam6HEc4
u7uEqNGi/tS+/Dp+3G81jGO1qOaqvStUjxcTlrNwyfTJat8TcThRLVxCQCYnoT1k
++GsKVsupXwcz2CkDKUiVVULL7B0+krdac4+9+10EjQwefXYodau4b1XBK6ar6eC
HJwOJTA5XuPGFItu2TBOfUTEbwAr5yR+xwU9J12oMHz59kwmRXD84DCsNOiAzygz
o1HC4HD0AfAlrpBbF6bxpWh6dSzeBOAZs1tmp2L853uzfN9+IHpiBkDEJWvgmtVX
y5P8UDfMd9MA
-----END CERTIFICATE-----
Generated at Sat May 10 07:26:32 2025 by rpki-client