Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/UnNAY2Ug9GVCcRKfH683OrLARtI.roa
File: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (raw, json)
Hash identifier: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=
Subject key identifier: 52:73:40:63:65:20:F4:65:42:71:12:9F:1F:AF:37:3A:B2:C0:46:D2
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01942067F7E4600A074605B0B6C6E1BFFE18
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/UnNAY2Ug9GVCcRKfH683OrLARtI.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47883
IP address blocks: 5.104.0.0/20 maxlen: 20
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.4.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
37.34.0.0/19 maxlen: 19
37.34.0.0/24 maxlen: 24
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
94.79.64.0/18 maxlen: 18
94.79.64.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.93.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:e4:60:0a:07:46:05:b0:b6:c6:e1:bf:fe:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=527340636520f4654271129f1faf373ab2c046d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:1c:ea:9f:ce:e3:72:40:76:53:62:c0:75:
2d:1d:50:20:a4:5c:ea:06:24:e8:d9:92:cb:ff:ea:
0c:b4:9a:c9:e5:b8:f7:10:b8:ac:ca:70:86:76:16:
f1:aa:b3:d6:be:9a:c6:ec:c5:76:f9:93:8e:73:4a:
19:dd:6d:c5:4c:12:5a:9c:95:40:98:f8:4f:7b:e5:
ef:84:a5:ed:f8:50:29:bf:b1:20:9c:5d:eb:cf:e4:
ea:a8:bc:90:f5:21:da:7e:d5:b4:7d:b4:2d:47:64:
e8:7a:35:14:8d:c7:36:9b:1f:48:a0:b9:ab:89:c2:
ac:ae:85:6d:37:86:5c:1c:f0:0e:9c:8e:3f:cf:13:
13:e2:8a:6d:ec:de:c0:5c:01:38:b2:06:ca:09:a0:
41:d8:b4:b9:dc:33:8a:e7:e2:4e:e1:8d:f5:ab:d3:
1d:f7:1d:d7:da:6e:64:9a:2d:bf:6c:bc:dc:29:9d:
62:f9:4b:8e:a2:03:90:4d:74:d5:f3:71:b8:c5:8b:
02:9d:74:82:0f:7c:b9:54:ed:5f:2b:3b:8f:e2:e3:
44:26:91:a0:5c:9a:ce:99:53:e4:40:38:26:1d:21:
7f:c8:a8:07:4e:b1:82:c9:5d:8c:69:e7:63:83:03:
0e:8a:bf:3d:1a:4d:f0:8c:c8:a3:3c:aa:3a:d9:41:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:40:63:65:20:F4:65:42:71:12:9F:1F:AF:37:3A:B2:C0:46:D2
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/UnNAY2Ug9GVCcRKfH683OrLARtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:17:9a:2a:2c:6a:f8:99:51:0f:b0:ef:77:c0:62:3c:f5:ae:
af:01:65:5e:06:36:60:a5:84:ef:e8:bc:b4:4f:61:47:66:8d:
47:ca:66:e3:89:d2:98:64:ee:e0:e1:95:25:21:67:04:89:8b:
65:03:d9:3d:b1:3c:97:06:41:46:1b:dd:19:4a:d4:0f:28:f3:
2d:79:f4:c8:05:0a:f7:1e:88:46:0d:35:d1:55:fd:37:d0:40:
1b:e8:7e:25:a0:6c:24:3b:bb:37:4b:3d:4c:a8:64:37:16:63:
01:bf:4b:b8:cb:2c:6f:7f:08:e7:be:0d:25:32:eb:9b:3d:2c:
64:53:96:5b:82:bf:71:eb:2b:6c:19:f3:dc:66:ee:07:c5:f2:
00:29:ec:b5:df:57:d0:5d:b7:1e:eb:79:45:f8:a4:a2:26:53:
34:45:fb:02:ce:a1:03:f8:52:e8:a1:02:4c:73:7a:42:61:60:
cc:7e:b1:4a:67:0b:34:63:2c:fc:cd:c2:40:24:7b:c2:5e:da:
e7:3f:4e:80:a5:40:27:a9:08:d7:bb:c6:e2:a6:d8:1e:d2:cf:
a7:fe:ec:1f:0c:66:4f:f0:f6:7b:37:99:53:9b:08:da:0d:0a:
d3:36:49:da:b8:11:6b:b8:00:b6:e4:ac:33:e9:32:2c:7c:c8:
b6:96:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net