Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/g_wVEU9_r468hCU3sbNAvMjKq08.roa
File: g_wVEU9_r468hCU3sbNAvMjKq08.roa (raw, json)
Hash identifier: sAtpcmOQJ2NK6IGXsaVgMOMPxmymezo199zuSjQm+Hs=
Subject key identifier: 83:FC:15:11:4F:7F:AF:8E:BC:84:25:37:B1:B3:40:BC:C8:CA:AB:4F
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 0186030559CD08DB2E766B393A31AC150B59
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/g_wVEU9_r468hCU3sbNAvMjKq08.roa
Signing time: Mon 30 Jan 2023 14:12:07 +0000
ROA not before: Mon 30 Jan 2023 14:12:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63119
IP address blocks: 192.40.90.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.92.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.93.0/24 maxlen: 24
158.222.0.0/20 maxlen: 20
158.222.4.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
5.157.4.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.78.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.9.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.10.0/23 maxlen: 23
104.160.14.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
104.160.31.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.84.0/24 maxlen: 24
107.150.82.0/23 maxlen: 23
107.150.81.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
2a02:5740::/48 maxlen: 48
2a02:5740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:05:59:cd:08:db:2e:76:6b:39:3a:31:ac:15:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 30 14:12:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83fc15114f7faf8ebc842537b1b340bcc8caab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:c9:f4:05:61:34:bc:6e:42:35:4b:4c:f5:
7f:46:da:e0:b0:ec:db:09:6c:36:2c:c6:ac:24:49:
4d:c8:70:00:75:4f:86:27:55:24:79:56:c0:39:77:
45:1b:39:8f:d4:f6:ce:bb:a7:c6:62:2c:73:80:ba:
ee:b6:e9:c9:f0:75:b4:14:f2:02:a2:64:cb:69:a7:
bc:24:20:5c:39:dd:7f:51:60:63:f3:4a:04:99:1f:
ef:3f:a3:2a:d7:19:d3:0b:b6:64:d3:02:68:78:af:
85:f3:92:d2:48:57:81:61:e6:f3:6e:1b:2b:0a:bc:
1f:67:81:c0:93:20:c6:51:d3:37:f1:33:eb:be:16:
f0:50:d6:e4:6d:77:0b:20:cb:31:0c:4f:e3:bc:13:
9a:42:a9:71:63:2a:c8:0e:eb:75:89:12:7b:5c:ae:
c6:04:96:9c:f3:d5:f1:85:35:5e:32:ca:80:74:c8:
04:b6:d2:c0:56:7c:bb:65:39:05:3e:1d:63:5c:dd:
01:7d:3b:3b:68:3a:0e:20:cb:2c:ec:96:67:06:bc:
24:13:3a:94:dc:eb:03:90:24:d9:3b:09:49:32:00:
59:5d:1e:f3:48:33:47:43:cc:ac:94:c3:29:d3:1c:
34:17:ba:36:06:8f:91:ce:e9:aa:ec:de:73:db:6d:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:15:11:4F:7F:AF:8E:BC:84:25:37:B1:B3:40:BC:C8:CA:AB:4F
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/g_wVEU9_r468hCU3sbNAvMjKq08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.4.0/24
23.92.116.0-23.92.126.255
104.160.1.0/24
104.160.3.0/24
104.160.5.0/24
104.160.7.0/24
104.160.9.0-104.160.11.255
104.160.14.0/23
104.160.28.0/22
107.150.66.0/24
107.150.68.0/23
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0/20
192.40.90.0-192.40.93.255
IPv6:
2a02:5740::/32
Signature Algorithm: sha256WithRSAEncryption
4d:12:cf:96:3f:ae:dc:d1:3a:92:18:8d:5b:b6:f6:3c:34:7d:
e2:d6:b7:60:79:00:3c:c5:aa:f2:09:b5:91:3a:6e:34:3e:c4:
cf:42:f3:5a:04:2d:0c:ae:1e:3e:24:7a:f7:45:61:e3:91:d2:
d0:c7:38:a4:07:b3:8c:7b:01:a9:6b:68:11:d7:18:bf:c1:e3:
ab:04:9c:18:3f:27:2a:b7:d0:ef:d2:2d:92:77:35:ce:f0:9d:
5b:a5:89:cc:4a:cc:eb:49:83:84:2f:c2:4f:48:9b:b5:df:bf:
67:ee:09:99:d1:f0:03:cb:57:e0:10:6e:e5:2c:0a:c4:70:61:
02:07:46:e4:ed:20:3a:fc:91:0e:92:9d:d8:8f:c2:16:33:9c:
2c:fc:ca:89:0a:08:26:4e:4b:39:39:e1:8c:7b:57:29:59:c3:
29:99:fb:aa:73:fc:b7:ee:fa:1c:b1:d9:49:7f:61:52:5c:47:
05:1f:1c:0c:11:ac:2a:c3:4e:d5:39:e8:05:ad:f1:03:a5:eb:
b1:bb:a5:d9:5f:98:73:88:02:73:52:3a:72:af:be:1a:ec:10:
53:41:33:5d:7a:5b:dd:e0:d2:bb:26:74:69:4a:21:cf:e5:b1:
b4:db:6e:b0:c6:98:df:e3:db:4a:fe:1e:36:b4:d1:c4:04:a3:
c6:0c:92:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:47:40 2025 by rpki-client