Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/UqsU5Cxf53cjk27uO9d8KUKAuy0.roa
File: UqsU5Cxf53cjk27uO9d8KUKAuy0.roa (raw, json)
Hash identifier: Q537tkAWiUCHVIOIbJftpY/nwtLb5LZw7iF7fFlyOVU=
Subject key identifier: 52:AB:14:E4:2C:5F:E7:77:23:93:6E:EE:3B:D7:7C:29:42:80:BB:2D
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018571309AEAE40EAB62ACE6E2667E721F34
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/UqsU5Cxf53cjk27uO9d8KUKAuy0.roa
Signing time: Mon 02 Jan 2023 06:34:48 +0000
ROA not before: Mon 02 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41564
IP address blocks: 23.92.127.0/24 maxlen: 24
192.40.88.0/24 maxlen: 24
158.222.0.0/20 maxlen: 20
158.222.3.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
151.237.186.0/24 maxlen: 24
5.157.4.0/24 maxlen: 24
5.157.8.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.12.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
5.157.17.0/24 maxlen: 24
5.157.13.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.22.0/24 maxlen: 24
5.157.27.0/24 maxlen: 24
5.157.30.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.45.0/24 maxlen: 24
5.157.58.0/24 maxlen: 24
5.157.56.0/24 maxlen: 24
5.157.59.0/24 maxlen: 24
5.157.61.0/24 maxlen: 24
5.157.63.0/24 maxlen: 24
5.157.62.0/24 maxlen: 24
5.157.60.0/24 maxlen: 24
2a02:5740:3::/48 maxlen: 48
2a02:5740::/48 maxlen: 48
2a02:5740:11::/48 maxlen: 48
2a02:5740:5::/48 maxlen: 48
2a02:5740:18::/48 maxlen: 48
2a02:5740:2::/48 maxlen: 48
2a02:5740:6::/48 maxlen: 48
2a02:5740:1::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9a:ea:e4:0e:ab:62:ac:e6:e2:66:7e:72:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ab14e42c5fe77723936eee3bd77c294280bb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:5d:8b:86:20:32:cb:44:dc:62:0f:f9:09:
d7:8e:17:ed:92:72:fb:4b:cb:df:f8:ac:b9:db:c9:
d0:63:25:42:68:a2:58:ef:fb:22:3e:17:ab:a3:21:
0b:92:a5:a5:1b:3a:06:4f:28:de:55:f4:9d:b0:1b:
00:17:2e:dc:b6:a1:99:37:01:b5:cd:05:90:8e:4b:
60:be:36:e9:53:2b:c1:a5:ee:80:18:7d:98:f1:69:
5d:5c:f6:b7:c4:5b:bc:8c:df:45:f9:a7:a6:ad:c7:
cd:ef:87:58:47:b5:eb:d2:53:be:e0:d0:72:95:9c:
82:b1:28:c8:3b:29:44:59:f3:2f:ea:9a:89:b9:1c:
17:20:c8:b7:84:cb:96:21:dc:81:66:60:97:02:54:
23:e0:11:b1:e3:81:12:3b:53:d8:f1:63:ad:62:8b:
ea:d4:b2:f4:a9:79:a7:92:23:c6:4f:c1:a4:44:8b:
b1:a4:d0:0f:53:32:f3:e1:f0:78:64:fa:83:fd:15:
2d:f8:b4:d6:5b:70:bf:91:af:d9:fd:9b:59:54:34:
54:29:99:a3:8c:1e:5a:c2:d6:0f:ac:23:f4:fa:b4:
0c:b1:a6:c2:70:99:1b:7a:2d:27:bd:db:0c:d1:2d:
ed:3c:24:08:af:d9:89:a4:51:29:16:6f:02:5d:91:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:14:E4:2C:5F:E7:77:23:93:6E:EE:3B:D7:7C:29:42:80:BB:2D
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/UqsU5Cxf53cjk27uO9d8KUKAuy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.4.0/24
5.157.8.0/24
5.157.13.0-5.157.14.255
5.157.17.0/24
5.157.22.0/24
5.157.27.0/24
5.157.30.0/24
5.157.41.0-5.157.42.255
5.157.45.0/24
5.157.56.0/24
5.157.58.0-5.157.63.255
23.92.127.0/24
104.160.2.0/24
104.160.4.0/24
104.160.6.0/24
104.160.10.0/24
104.160.12.0/24
104.160.20.0/24
151.237.186.0/24
158.222.0.0/20
192.40.88.0/24
IPv6:
2a02:5740::-2a02:5740:6:ffff:ffff:ffff:ffff:ffff
2a02:5740:11::/48
2a02:5740:18::/48
2a02:5740:21::/48
Signature Algorithm: sha256WithRSAEncryption
79:b9:53:9c:e6:0d:c1:2c:7b:5c:68:ab:89:c3:44:ac:41:e0:
4b:05:79:19:a4:26:e6:c5:e8:81:85:86:8e:d8:95:b4:fc:54:
fe:08:35:ec:a7:08:3a:f5:cd:a0:19:bd:29:05:01:2f:32:8f:
b2:75:5b:ea:69:0e:1e:8d:d0:7e:e4:b2:a8:f4:b0:96:85:cf:
10:75:50:3e:5a:ba:22:be:9e:07:47:43:53:37:6a:80:7d:3d:
9f:2c:d7:9c:0f:0c:09:a9:b3:d7:94:2e:57:63:80:9a:07:73:
f3:98:81:e2:f1:11:6e:09:3e:9c:ed:fe:65:74:e4:34:2d:c8:
cc:1a:0c:a7:6b:32:e0:5e:7d:54:f8:6c:b6:bf:8e:1c:f6:d7:
fb:fd:32:a6:f2:82:c4:ba:68:15:f0:be:31:79:d6:f4:1f:58:
e4:82:28:67:1e:3f:dc:e7:c7:e9:55:70:03:3a:d0:66:1b:eb:
55:99:37:53:e4:f8:43:03:52:3d:73:6b:d0:7f:2b:31:25:80:
9a:98:18:b1:02:28:a3:c2:29:9e:66:2a:79:87:10:06:ce:5c:
f7:dc:9e:5a:30:90:01:75:ac:ad:a9:b3:f1:ea:cc:ca:6a:29:
1f:80:39:8c:ea:2b:f2:ab:06:62:01:da:44:00:70:a8:dd:b2:
ae:93:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:53:10 2025 by rpki-client