Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/gKm9U9kV3usN6GfYJPy4pqvULX0.roa
File: gKm9U9kV3usN6GfYJPy4pqvULX0.roa (raw, json)
Hash identifier: K9fqqKzRvHHDY8DtMbWp1xPSx9UsJ8K3o3kBsz7gZhU=
Subject key identifier: 80:A9:BD:53:D9:15:DE:EB:0D:E8:67:D8:24:FC:B8:A6:AB:D4:2D:7D
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 0195DCFDB7E59E9B552F156486855EB10AC1
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/gKm9U9kV3usN6GfYJPy4pqvULX0.roa
Signing time: Fri 28 Mar 2025 13:42:50 +0000
ROA not before: Fri 28 Mar 2025 13:42:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15625
IP address blocks: 145.221.0.0/16 maxlen: 16
145.221.0.0/17 maxlen: 17
145.221.36.0/24 maxlen: 24
145.221.37.0/24 maxlen: 24
145.221.38.0/24 maxlen: 24
145.221.39.0/24 maxlen: 24
145.221.40.0/24 maxlen: 24
145.221.41.0/24 maxlen: 24
145.221.42.0/24 maxlen: 24
145.221.43.0/24 maxlen: 24
145.221.76.0/24 maxlen: 24
145.221.77.0/24 maxlen: 24
145.221.78.0/24 maxlen: 24
145.221.79.0/24 maxlen: 24
145.221.92.0/24 maxlen: 24
145.221.93.0/24 maxlen: 24
145.221.94.0/24 maxlen: 24
145.221.95.0/24 maxlen: 24
145.221.99.0/24 maxlen: 24
145.221.128.0/17 maxlen: 17
145.221.176.0/24 maxlen: 24
145.221.177.0/24 maxlen: 24
145.221.178.0/24 maxlen: 24
145.221.179.0/24 maxlen: 24
145.221.180.0/24 maxlen: 24
145.221.181.0/24 maxlen: 24
145.221.182.0/24 maxlen: 24
145.221.183.0/24 maxlen: 24
145.221.184.0/24 maxlen: 24
145.221.185.0/24 maxlen: 24
145.221.186.0/24 maxlen: 24
145.221.188.0/24 maxlen: 24
145.221.189.0/24 maxlen: 24
145.221.190.0/24 maxlen: 24
145.221.193.0/24 maxlen: 24
145.221.208.0/24 maxlen: 24
145.221.209.0/24 maxlen: 24
145.221.210.0/24 maxlen: 24
145.221.211.0/24 maxlen: 24
145.221.212.0/24 maxlen: 24
145.221.213.0/24 maxlen: 24
145.221.214.0/24 maxlen: 24
145.221.215.0/24 maxlen: 24
145.221.216.0/24 maxlen: 24
145.221.217.0/24 maxlen: 24
145.221.219.0/24 maxlen: 24
145.221.220.0/24 maxlen: 24
145.221.221.0/24 maxlen: 24
145.221.222.0/24 maxlen: 24
145.221.252.0/24 maxlen: 24
145.221.253.0/24 maxlen: 24
145.221.254.0/24 maxlen: 24
145.221.255.0/24 maxlen: 24
156.114.128.0/18 maxlen: 18
156.114.128.0/19 maxlen: 19
156.114.128.0/24 maxlen: 24
156.114.129.0/24 maxlen: 24
156.114.130.0/24 maxlen: 24
156.114.131.0/24 maxlen: 24
156.114.132.0/24 maxlen: 24
156.114.133.0/24 maxlen: 24
156.114.136.0/24 maxlen: 24
156.114.153.0/24 maxlen: 24
156.114.154.0/24 maxlen: 24
156.114.155.0/24 maxlen: 24
156.114.160.0/19 maxlen: 19
156.114.160.0/24 maxlen: 24
156.114.161.0/24 maxlen: 24
156.114.162.0/24 maxlen: 24
156.114.163.0/24 maxlen: 24
156.114.164.0/24 maxlen: 24
156.114.165.0/24 maxlen: 24
156.114.168.0/24 maxlen: 24
156.114.185.0/24 maxlen: 24
156.114.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:fd:b7:e5:9e:9b:55:2f:15:64:86:85:5e:b1:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Mar 28 13:42:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a9bd53d915deeb0de867d824fcb8a6abd42d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:d9:c0:99:9b:c4:eb:c8:c3:ff:d4:3e:00:
30:9b:8f:6f:42:b2:47:fe:b4:8d:98:30:b1:94:2d:
4f:b6:dc:ed:aa:fb:91:be:f7:b7:c3:87:9a:17:ff:
89:66:38:57:a9:21:3a:ea:6d:6c:87:b9:18:5b:95:
66:fd:f0:23:13:48:ca:e8:3f:dc:6b:bd:8a:47:73:
0f:b3:4c:ac:0c:cc:59:2f:e4:d5:67:9c:ff:49:20:
92:c3:fa:14:2e:b9:55:97:0f:cb:ba:de:6f:74:ee:
b5:85:25:48:67:c5:31:9c:ab:00:8a:35:a6:d1:d5:
55:3d:66:14:8c:02:0f:b8:48:3a:67:d0:92:56:01:
24:0a:e8:32:f4:4a:4e:63:25:18:4a:41:28:7e:e7:
dd:86:38:de:55:eb:b9:cc:8d:d1:2a:84:1c:9e:02:
75:73:ee:a2:7d:c5:4d:92:23:71:ac:d8:c1:41:5a:
11:2d:f1:ce:f8:59:c5:a7:a7:d1:94:6b:57:70:0c:
16:15:8e:73:1e:50:27:c1:4f:17:8d:b6:cc:77:9c:
51:4e:ae:c4:91:12:80:dc:38:79:4e:e8:9b:2a:75:
11:78:01:73:54:2a:87:c3:f1:f5:45:e1:b0:0a:99:
35:db:a4:fc:cd:d7:97:37:d9:a9:b4:2a:a2:06:01:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:BD:53:D9:15:DE:EB:0D:E8:67:D8:24:FC:B8:A6:AB:D4:2D:7D
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/gKm9U9kV3usN6GfYJPy4pqvULX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.221.0.0/16
156.114.128.0/18
Signature Algorithm: sha256WithRSAEncryption
73:41:00:e9:f4:98:77:9e:cf:e2:fd:71:2e:3f:7d:54:05:c9:
d8:b1:c3:94:c8:69:b2:bd:eb:52:50:db:1d:19:b1:a9:ef:c5:
49:85:74:84:e6:71:11:a4:a6:0e:03:ef:78:84:1d:2b:20:18:
8f:e4:b3:ff:64:4e:25:77:d7:c8:d5:ec:05:9b:22:c3:73:6a:
78:0c:35:a4:60:cd:31:f3:49:f8:b9:73:5e:e2:ee:db:df:ae:
e6:04:b5:d5:a2:dd:18:c9:a8:f7:e5:92:10:05:1c:03:08:7a:
d1:e2:90:62:50:ad:8d:8d:55:dc:cc:99:74:0e:03:37:72:0a:
ba:76:62:fa:af:fd:df:8c:37:54:63:6d:60:a0:2c:fd:61:f5:
e7:b5:1e:a1:70:d8:54:c1:75:57:80:2f:b0:91:65:c9:33:ad:
d9:0c:9a:93:df:8e:59:b5:ea:4f:98:77:20:c9:c6:d3:28:2e:
e5:d3:81:41:5c:e7:3c:4d:d3:17:c8:fc:90:30:42:7b:73:19:
97:7b:ca:45:84:05:2c:88:a5:9b:02:35:ad:a8:3e:ac:c3:93:
5a:39:1e:54:d2:e5:c7:dd:fe:7e:87:53:d5:9c:0d:b5:6d:57:
5f:3f:f6:84:1b:f3:d3:5a:89:9a:46:bc:84:0e:e9:09:20:55:
95:25:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net