Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pwhRbbDiE-Mnr-KL5Q73gT5X4os.roa
File: pwhRbbDiE-Mnr-KL5Q73gT5X4os.roa (raw, json)
Hash identifier: hWSBRmwhVFPwol6XC3mczyhUZttyk10JMgW9/dZY8bg=
Subject key identifier: A7:08:51:6D:B0:E2:13:E3:27:AF:E2:8B:E5:0E:F7:81:3E:57:E2:8B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0193BAF1173A327C843901FD67D68C124077
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pwhRbbDiE-Mnr-KL5Q73gT5X4os.roa
Signing time: Thu 12 Dec 2024 12:56:22 +0000
ROA not before: Thu 12 Dec 2024 12:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:f1:17:3a:32:7c:84:39:01:fd:67:d6:8c:12:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 12 12:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a708516db0e213e327afe28be50ef7813e57e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:38:af:dd:40:80:1d:82:50:14:4e:e8:77:
36:56:12:7d:b1:15:26:86:f0:ba:ac:22:9b:77:05:
92:8d:c6:0c:35:0d:73:56:56:f3:7b:9c:42:a4:1a:
61:d7:6e:81:4d:f1:51:34:37:96:e2:6e:2b:20:c2:
9e:d9:56:a2:c0:98:dc:22:a7:c3:11:78:80:ec:a7:
e6:a8:41:6d:ff:3f:be:c9:ad:d1:d7:a8:7a:91:fb:
54:78:7c:1a:3c:38:bf:d0:b7:ca:95:bc:a0:1e:ab:
cf:44:6c:cc:0f:47:4d:23:bb:fb:bc:49:9b:ad:80:
21:a3:d7:96:6c:fc:90:04:73:a9:40:2a:68:70:c3:
39:b3:e4:aa:b7:94:1a:39:3d:37:6b:84:6a:c4:6e:
b0:60:eb:ab:79:75:b6:f1:bf:d8:62:8b:8f:53:1d:
b6:87:96:97:b3:76:b3:bd:67:4e:2d:e0:14:a1:51:
5b:59:08:3f:4b:d0:e2:9f:56:a0:58:a2:44:71:08:
07:fc:57:60:be:87:4d:d8:88:70:f0:3c:9e:83:42:
0d:e9:a2:e2:03:a7:1e:5b:80:11:94:0b:8d:e1:28:
36:bd:94:50:cd:b8:f5:c0:bf:3e:86:0f:36:f6:25:
4a:d0:cb:bf:b4:9e:78:ed:12:ba:fb:52:76:2c:9e:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:51:6D:B0:E2:13:E3:27:AF:E2:8B:E5:0E:F7:81:3E:57:E2:8B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pwhRbbDiE-Mnr-KL5Q73gT5X4os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.160.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.56.48.0/22
212.78.245.0-212.78.251.255
Signature Algorithm: sha256WithRSAEncryption
32:86:54:0d:f3:c6:c8:af:5c:5a:e9:55:4a:d0:c1:7e:bb:94:
ce:65:7c:f2:28:17:01:36:db:10:f3:45:1d:99:1a:93:31:2d:
97:c3:b3:f4:fb:8d:24:0a:db:5d:dc:53:fc:17:60:c9:96:f9:
80:7c:e9:c6:2c:3a:ae:c8:45:ad:fa:93:e8:7f:2e:ae:a5:2b:
6d:a7:fd:0a:11:2a:c7:c7:df:0f:a0:a4:02:5d:c4:fa:9e:d4:
8e:ae:8c:1d:c7:f7:e0:c4:0e:1e:0c:d7:5c:1a:fd:98:d3:01:
c5:4b:50:e1:43:98:32:6b:3c:7e:03:f4:4a:04:17:d8:d7:5c:
d6:98:97:d8:9c:b2:da:ea:8c:f1:91:cc:bc:76:47:54:f0:c2:
bd:f4:3a:36:ba:1d:4f:8f:ad:85:af:56:a1:cc:62:93:93:38:
39:87:1c:31:bf:c7:ec:1c:8c:77:1c:01:99:fd:88:e9:3a:cd:
ff:d1:36:13:43:22:ca:c2:44:85:3e:81:bc:ac:c6:00:ce:c2:
a6:97:15:2e:0f:2c:26:cf:e9:56:94:0f:b9:0f:06:09:64:17:
bd:71:c1:5b:27:d9:4a:c6:60:45:ea:fb:e5:81:b7:6f:94:99:
e8:1d:39:e5:44:d2:f0:f3:b5:91:2c:15:d6:ab:81:c6:f9:43:
00:1d:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:53 2024 by rpki-client on console.sobornost.net