Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5h0wnlRp9D0Is9ppH7LeCjQFyd0.roa
File: 5h0wnlRp9D0Is9ppH7LeCjQFyd0.roa (raw, json)
Hash identifier: PiEi94WzTTY2T9M+MIwZ5nprUHZ8f+KmdsLuJL9Le0A=
Subject key identifier: E6:1D:30:9E:54:69:F4:3D:08:B3:DA:69:1F:B2:DE:0A:34:05:C9:DD
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01938113AAA71B3F25685962F1C504E9C97D
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5h0wnlRp9D0Is9ppH7LeCjQFyd0.roa
Signing time: Sun 01 Dec 2024 07:16:09 +0000
ROA not before: Sun 01 Dec 2024 07:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 5.202.0.0/20 maxlen: 20
5.202.0.0/24 maxlen: 24
5.202.1.0/24 maxlen: 24
5.202.2.0/24 maxlen: 24
5.202.3.0/24 maxlen: 24
5.202.4.0/24 maxlen: 24
5.202.5.0/24 maxlen: 24
5.202.6.0/24 maxlen: 24
5.202.7.0/24 maxlen: 24
5.202.8.0/24 maxlen: 24
5.202.9.0/24 maxlen: 24
5.202.10.0/24 maxlen: 24
5.202.11.0/24 maxlen: 24
5.202.12.0/24 maxlen: 24
5.202.13.0/24 maxlen: 24
5.202.14.0/24 maxlen: 24
5.202.15.0/24 maxlen: 24
85.9.96.0/20 maxlen: 20
85.9.96.0/21 maxlen: 21
85.9.96.0/22 maxlen: 22
85.9.100.0/22 maxlen: 22
85.9.104.0/21 maxlen: 21
85.9.105.0/24 maxlen: 24
85.9.106.0/24 maxlen: 24
85.9.107.0/24 maxlen: 24
85.9.108.0/24 maxlen: 24
85.9.109.0/24 maxlen: 24
85.9.110.0/24 maxlen: 24
85.9.111.0/24 maxlen: 24
85.9.112.0/22 maxlen: 22
85.9.112.0/24 maxlen: 24
85.9.113.0/24 maxlen: 24
85.9.114.0/24 maxlen: 24
85.9.115.0/24 maxlen: 24
85.9.120.0/21 maxlen: 21
85.9.120.0/22 maxlen: 22
85.9.124.0/22 maxlen: 22
185.126.0.0/20 maxlen: 20
185.126.0.0/21 maxlen: 21
185.126.0.0/22 maxlen: 22
185.126.0.0/24 maxlen: 24
185.126.1.0/24 maxlen: 24
185.126.2.0/24 maxlen: 24
185.126.3.0/24 maxlen: 24
185.126.4.0/24 maxlen: 24
185.126.5.0/24 maxlen: 24
185.126.6.0/24 maxlen: 24
185.126.7.0/24 maxlen: 24
185.126.8.0/21 maxlen: 21
185.126.8.0/24 maxlen: 24
185.126.9.0/24 maxlen: 24
185.126.10.0/24 maxlen: 24
185.126.11.0/24 maxlen: 24
185.126.12.0/24 maxlen: 24
185.126.13.0/24 maxlen: 24
185.126.14.0/24 maxlen: 24
185.126.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:13:aa:a7:1b:3f:25:68:59:62:f1:c5:04:e9:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Dec 1 07:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e61d309e5469f43d08b3da691fb2de0a3405c9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:2e:86:96:3f:e5:50:6b:81:2d:52:d1:7a:
f7:4f:c6:10:52:f8:09:99:b0:cf:4c:df:9f:40:46:
62:68:69:63:99:fa:56:c8:39:49:c4:8e:ad:32:f7:
94:e5:16:1e:4e:ce:2f:9e:e6:0a:78:a2:96:26:d6:
0e:ab:db:9b:79:c1:5c:79:e6:bb:3b:c4:cd:49:23:
d9:a9:14:53:1d:cd:7c:10:4c:40:58:77:e4:d1:58:
27:6a:85:ac:ce:56:79:34:4d:ea:3b:97:3e:c2:32:
bd:eb:8a:2f:be:f9:bf:cc:a1:81:cc:96:24:58:66:
7a:24:10:e2:fd:36:75:64:73:b9:e3:cb:95:40:ee:
10:16:3e:6b:72:d1:69:fe:d1:13:ee:c4:07:2a:f2:
8d:a9:dd:bf:90:2c:d5:81:ea:3f:16:10:04:6c:39:
7d:56:f3:cb:1d:0a:c6:c2:13:b9:e5:45:8e:28:58:
69:d2:69:08:5e:2c:05:18:da:e9:f7:58:c5:b3:26:
cf:5e:c6:5f:3e:55:c5:46:04:4a:e3:0f:e4:35:17:
56:1d:d3:23:41:d7:95:02:e0:8b:81:4e:69:38:64:
45:3e:ec:a2:9e:b6:5c:f4:0a:84:c8:d4:a2:bc:8b:
4d:55:16:85:ae:fb:d2:89:b8:a2:a0:43:81:3b:a0:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:30:9E:54:69:F4:3D:08:B3:DA:69:1F:B2:DE:0A:34:05:C9:DD
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5h0wnlRp9D0Is9ppH7LeCjQFyd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/20
85.9.96.0-85.9.115.255
85.9.120.0/21
185.126.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:33:8c:61:b7:94:05:3c:d0:9c:51:a4:15:d2:f6:fa:d9:06:
10:79:c1:dc:58:94:6f:8d:a5:43:37:aa:1d:99:86:0e:4d:71:
8d:f9:48:75:13:87:40:e2:39:92:3d:1a:be:1d:fa:fd:fd:77:
c3:0f:78:1b:42:20:1b:91:7d:26:17:fa:ce:d4:a6:f1:47:04:
ba:fe:a6:eb:20:c4:67:33:a3:ce:91:5c:29:26:39:38:87:a3:
40:d3:b1:f0:dd:0b:e7:ef:d3:82:84:7c:9d:02:e9:bc:ca:c1:
84:c8:f4:98:23:6c:6d:13:d6:13:4a:ec:d1:35:15:07:90:c1:
13:18:31:79:f4:11:98:69:dd:b4:46:83:c7:3d:07:dd:c8:1c:
48:e2:83:4d:1a:7c:22:26:10:5b:93:73:9d:8a:b2:45:bf:cd:
22:70:ba:4e:4c:8d:c6:39:6f:12:e0:28:b1:9a:a0:20:96:54:
78:cc:7f:07:28:2a:8a:93:4b:7d:8f:55:2d:5e:8b:9a:a1:b4:
de:43:ab:9b:c7:36:58:95:c7:56:2f:7e:18:af:95:a7:79:48:
bf:ea:82:eb:a1:a0:fc:9f:cf:4f:21:76:f5:17:32:06:d8:26:
60:26:da:61:67:a6:e7:c3:4c:14:81:f6:ac:e1:bf:ab:5e:f1:
b4:19:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:06 2024 by rpki-client on console.sobornost.net