Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/VsBE7Q0HWiRvtWTnWQiao99mzaw.roa
File: VsBE7Q0HWiRvtWTnWQiao99mzaw.roa (raw, json)
Hash identifier: i8nftocJleVgYWPJIHnZfNp0bIgQhI3agiv8Ex008oU=
Subject key identifier: 56:C0:44:ED:0D:07:5A:24:6F:B5:64:E7:59:08:9A:A3:DF:66:CD:AC
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018571309BF9EE9A5F84C4DFF7F2455D70DB
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/VsBE7Q0HWiRvtWTnWQiao99mzaw.roa
Signing time: Mon 02 Jan 2023 06:34:48 +0000
ROA not before: Mon 02 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46805
IP address blocks: 192.40.89.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.90.0/24 maxlen: 24
192.40.93.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.92.0/24 maxlen: 24
192.40.94.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.0.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.0.0/22 maxlen: 22
104.160.4.0/22 maxlen: 22
104.160.1.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
104.160.10.0/23 maxlen: 23
104.160.8.0/23 maxlen: 23
104.160.9.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.12.0/24 maxlen: 24
104.160.14.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.13.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.12.0/22 maxlen: 22
104.160.24.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
104.160.22.0/24 maxlen: 24
104.160.23.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.21.0/24 maxlen: 24
104.160.26.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.25.0/24 maxlen: 24
104.160.27.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
104.160.31.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
23.92.112.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.114.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.113.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
5.157.6.0/24 maxlen: 24
107.150.72.0/22 maxlen: 22
107.150.73.0/24 maxlen: 24
107.150.75.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.78.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.81.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.79.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.80.0/23 maxlen: 23
107.150.82.0/23 maxlen: 23
107.150.80.0/24 maxlen: 24
107.150.84.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
107.150.92.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9b:f9:ee:9a:5f:84:c4:df:f7:f2:45:5d:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c044ed0d075a246fb564e759089aa3df66cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:a0:98:28:19:24:81:c2:0e:2e:19:bb:ef:
34:6d:7a:95:bc:15:2a:5a:f0:ea:83:bf:e5:11:04:
07:2f:e2:36:88:2e:4b:af:b5:d6:3f:ed:c4:49:65:
8e:ac:40:2d:d5:ee:d8:de:5b:bb:9b:a2:59:a0:a3:
88:a9:98:ca:75:aa:b4:83:76:87:43:68:38:34:39:
5d:25:76:9c:76:22:b7:0b:8e:10:c1:8c:68:76:05:
bd:da:a8:8e:4c:32:e7:43:42:5d:c3:2c:08:bf:9c:
a0:19:bd:09:20:66:d9:a8:05:d6:48:c6:3b:ab:0f:
29:5a:11:f2:dd:2e:d0:33:a7:db:57:bb:c3:9a:f9:
42:ee:28:65:79:55:d4:ac:af:21:c5:10:de:a5:09:
39:dc:70:6b:78:de:a3:51:20:96:06:b7:76:ad:93:
d4:71:71:f0:a3:da:fb:b5:c7:1c:5a:9d:19:0e:96:
94:94:68:f9:25:76:ce:70:8c:d1:98:f2:c8:89:f3:
d2:f8:a2:90:6d:78:b4:ef:bb:b3:3d:ee:63:e2:1f:
fe:eb:af:cd:c6:14:ed:64:0f:3d:86:88:54:b8:e4:
72:37:a1:07:61:bc:ee:7e:91:f0:b3:95:30:20:1e:
5a:e4:eb:7f:9c:54:dc:38:83:4f:aa:e4:49:62:31:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:44:ED:0D:07:5A:24:6F:B5:64:E7:59:08:9A:A3:DF:66:CD:AC
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/VsBE7Q0HWiRvtWTnWQiao99mzaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.23.0-5.157.24.255
5.157.29.0/24
5.157.32.0/23
5.157.37.0/24
5.157.43.0/24
5.157.53.0/24
5.157.55.0/24
23.92.112.0-23.92.126.255
37.72.186.0/24
104.160.0.0-104.160.19.255
104.160.21.0-104.160.31.255
107.150.64.0-107.150.90.255
107.150.92.0/23
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
192.40.89.0-192.40.95.255
Signature Algorithm: sha256WithRSAEncryption
4b:9b:da:2c:94:24:76:aa:de:41:12:36:d0:6c:43:81:fe:d5:
c9:97:ec:c8:d2:62:92:da:86:3a:bb:3b:f4:37:ac:1e:7f:6d:
67:3a:44:55:34:ce:b4:c4:99:4e:30:7b:1e:01:0a:bf:04:3f:
ca:a7:ce:30:10:e2:0a:1d:04:25:2d:5c:43:54:eb:57:90:8c:
c8:46:5c:83:a0:bd:b7:ad:18:dc:65:05:ed:ae:aa:c8:4f:86:
c6:2e:11:ac:3a:4a:a5:4a:8c:87:18:26:73:22:a1:4b:12:ff:
f2:c7:90:51:59:00:a9:0a:08:72:91:f8:d1:7e:d8:80:9a:e1:
f6:10:03:f5:66:d8:34:8e:03:d7:74:6e:36:f4:97:dd:8c:34:
7c:25:5e:f6:0c:96:f0:f3:0e:a9:f0:09:83:74:1d:d9:c6:9b:
2d:d4:48:17:5d:d8:18:7c:18:18:6d:2d:98:51:fc:8c:04:e5:
63:ac:42:e7:95:73:4e:5e:64:f1:70:60:13:92:0b:71:dd:42:
02:b7:c8:a5:01:87:3e:6e:15:73:b6:9e:23:4e:4c:68:39:12:
3a:52:41:3f:b4:fc:e2:13:d8:52:8b:45:89:15:99:af:30:41:
30:52:72:ab:08:33:64:e5:a6:9d:d8:21:92:c8:ba:c7:fc:ae:
32:d2:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:09:42 2025 by rpki-client