Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/p-bGa3FNaz50p4t1OSNDAgoc_0s.roa
File: p-bGa3FNaz50p4t1OSNDAgoc_0s.roa (raw, json)
Hash identifier: kx//HiaOgl7Q7IqXK9lyKotPpA+1c6CW7SCJbi6+JVE=
Subject key identifier: A7:E6:C6:6B:71:4D:6B:3E:74:A7:8B:75:39:23:43:02:0A:1C:FF:4B
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 0195EB3831F5C2F2F8FC7ABC13E191467E49
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/p-bGa3FNaz50p4t1OSNDAgoc_0s.roa
Signing time: Mon 31 Mar 2025 08:01:23 +0000
ROA not before: Mon 31 Mar 2025 08:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3212
IP address blocks: 31.15.128.0/17 maxlen: 17
46.150.32.0/19 maxlen: 19
46.182.224.0/21 maxlen: 21
77.38.0.0/17 maxlen: 17
77.73.104.0/22 maxlen: 22
77.111.0.0/18 maxlen: 18
78.153.32.0/19 maxlen: 19
82.149.0.0/19 maxlen: 19
82.192.32.0/19 maxlen: 19
84.20.224.0/19 maxlen: 19
84.52.128.0/18 maxlen: 18
86.58.0.0/17 maxlen: 17
87.119.128.0/19 maxlen: 19
91.132.208.0/22 maxlen: 22
91.185.192.0/19 maxlen: 19
91.237.132.0/22 maxlen: 22
92.53.128.0/19 maxlen: 19
92.63.16.0/20 maxlen: 20
94.140.64.0/19 maxlen: 19
95.143.144.0/20 maxlen: 20
176.57.92.0/22 maxlen: 22
176.76.0.0/16 maxlen: 16
178.79.64.0/18 maxlen: 18
185.30.136.0/22 maxlen: 22
185.65.228.0/22 maxlen: 22
185.66.148.0/22 maxlen: 22
185.72.60.0/22 maxlen: 22
185.72.60.0/24 maxlen: 24
185.79.228.0/22 maxlen: 22
185.85.148.0/22 maxlen: 22
185.97.68.0/22 maxlen: 22
193.111.220.0/22 maxlen: 22
194.152.0.0/19 maxlen: 19
195.47.228.0/24 maxlen: 24
212.85.160.0/19 maxlen: 19
213.143.64.0/19 maxlen: 19
213.161.0.0/19 maxlen: 19
213.172.224.0/19 maxlen: 19
217.72.64.0/19 maxlen: 19
2001:1688::/29 maxlen: 29
2a00:fc0::/32 maxlen: 32
2a00:13d8::/29 maxlen: 29
2a02:840::/32 maxlen: 32
2a05:acc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:38:31:f5:c2:f2:f8:fc:7a:bc:13:e1:91:46:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Mar 31 08:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7e6c66b714d6b3e74a78b75392343020a1cff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:7c:ea:ae:ee:ff:f2:a2:6a:da:8f:47:e9:
f8:78:c0:47:5a:9c:a0:ac:fe:33:ff:e8:0f:f7:5c:
c5:d7:fd:44:b0:b5:17:d8:64:70:ca:8c:30:29:72:
a6:3d:1c:d1:87:8d:f6:ca:fa:6e:c1:3f:2f:ef:24:
42:16:44:d4:53:80:ad:fd:f8:76:e9:ae:a0:0c:9b:
12:51:bd:97:7f:0d:b4:57:40:27:3a:5a:71:56:e3:
f7:c4:da:d5:fb:7c:a2:c1:60:f1:62:70:7f:70:07:
e2:6c:36:00:d2:3c:d0:dc:08:d4:5c:b1:9e:67:a3:
dc:f0:d9:2e:57:52:ae:a9:db:42:71:b2:a1:1b:1e:
c8:7d:aa:32:0d:e4:14:22:fc:ad:49:e4:ca:a7:c7:
c5:70:0e:08:91:f5:fe:d5:5f:6c:01:3a:e4:ea:a3:
cd:54:d8:d9:33:d5:59:87:2d:6f:cb:77:51:74:6a:
e8:a9:dc:26:83:f5:5c:00:44:80:3e:53:01:32:45:
f5:31:8e:80:06:b3:09:5a:ef:c5:dc:74:4d:67:17:
a5:e6:c5:de:e6:5e:84:3d:dc:50:75:1b:68:db:df:
f3:11:e3:51:70:ca:47:7d:30:eb:1f:73:0c:ba:73:
ab:d1:94:17:32:d3:4d:8e:19:fb:9d:76:34:39:50:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:C6:6B:71:4D:6B:3E:74:A7:8B:75:39:23:43:02:0A:1C:FF:4B
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/p-bGa3FNaz50p4t1OSNDAgoc_0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.128.0/17
46.150.32.0/19
46.182.224.0/21
77.38.0.0/17
77.73.104.0/22
77.111.0.0/18
78.153.32.0/19
82.149.0.0/19
82.192.32.0/19
84.20.224.0/19
84.52.128.0/18
86.58.0.0/17
87.119.128.0/19
91.132.208.0/22
91.185.192.0/19
91.237.132.0/22
92.53.128.0/19
92.63.16.0/20
94.140.64.0/19
95.143.144.0/20
176.57.92.0/22
176.76.0.0/16
178.79.64.0/18
185.30.136.0/22
185.65.228.0/22
185.66.148.0/22
185.72.60.0/22
185.79.228.0/22
185.85.148.0/22
185.97.68.0/22
193.111.220.0/22
194.152.0.0/19
195.47.228.0/24
212.85.160.0/19
213.143.64.0/19
213.161.0.0/19
213.172.224.0/19
217.72.64.0/19
IPv6:
2001:1688::/29
2a00:fc0::/32
2a00:13d8::/29
2a02:840::/32
2a05:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:80:aa:64:a0:e3:8b:81:21:74:c4:df:9b:f7:0d:cf:88:89:
e8:0d:40:c5:82:06:bb:46:3d:c9:00:91:37:36:51:d6:ad:fd:
9e:a4:37:f4:8e:42:90:d2:54:c6:f5:60:4a:8e:b0:70:c6:7e:
64:9c:6c:c8:91:bf:99:03:a6:a5:dc:54:3f:7d:96:e0:dd:6d:
29:f3:75:ef:94:d1:0e:be:d7:d1:8b:68:5d:6f:7e:3f:2e:ce:
26:fb:8c:03:5f:e3:e6:78:de:3c:f3:35:30:c2:90:23:99:c5:
56:8c:80:ed:9d:1e:0c:dd:b6:31:a9:54:11:75:41:5c:76:74:
d7:7d:a2:66:54:56:5a:7e:2e:5c:5f:d6:cd:d1:12:9c:7b:29:
82:bb:01:af:c2:3a:0d:df:0d:f5:67:87:7a:3c:7f:d4:af:24:
f3:04:85:77:ef:48:38:24:d0:bd:3b:59:31:03:05:4e:26:5b:
37:0f:dc:3f:20:ce:45:8c:6b:03:a0:2f:a6:9f:26:b9:48:86:
5e:9b:b3:99:43:db:aa:2c:14:71:49:ff:cf:71:2b:8a:55:1d:
81:c9:2d:6a:79:13:db:42:ad:10:94:e1:d1:4f:9b:9d:0f:04:
af:a9:75:2d:b9:ab:05:3d:20:f6:ce:1e:4f:c9:e7:35:78:dc:
b2:c7:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net