Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/G95i3Kr27TSXclc_PuVmwpEBxb8.roa
File: G95i3Kr27TSXclc_PuVmwpEBxb8.roa (raw, json)
Hash identifier: RxQKEojURY4qkVbX3VEXOXjYQ3z9dOjzwDASzJum2dk=
Subject key identifier: 1B:DE:62:DC:AA:F6:ED:34:97:72:57:3F:3E:E5:66:C2:91:01:C5:BF
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019427B50314DB098B92715488D437B4587B
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/G95i3Kr27TSXclc_PuVmwpEBxb8.roa
Signing time: Thu 02 Jan 2025 15:49:21 +0000
ROA not before: Thu 02 Jan 2025 15:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:03:14:db:09:8b:92:71:54:88:d4:37:b4:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 2 15:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bde62dcaaf6ed349772573f3ee566c29101c5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:8c:73:3d:14:a2:d2:a7:12:16:98:1c:57:
5b:1a:c9:3e:f9:17:f8:a9:86:dc:23:b0:46:a0:40:
25:e2:69:c2:16:58:c2:11:eb:6c:f1:57:7e:5e:05:
32:22:1e:a0:23:36:c9:31:62:86:ba:3e:9f:3d:d9:
51:06:c9:cb:d7:2c:55:89:27:66:e3:9f:0a:3b:5e:
75:2e:c4:bf:a2:ae:4d:58:e8:b6:59:a0:3a:45:75:
b8:46:10:23:b2:6e:0b:38:d7:3c:c5:2d:67:7e:7e:
ff:99:10:2b:47:24:87:fe:6c:cc:b6:f4:12:42:67:
27:85:47:0d:58:69:69:34:0a:5e:89:27:e0:ec:69:
bc:f9:f6:66:ee:92:a1:2a:82:e1:8d:9b:ee:8b:cd:
b2:ff:ce:6f:60:51:44:0d:75:72:e1:d1:ce:23:3c:
cc:da:01:96:93:33:a8:0b:ae:4b:55:52:c0:18:73:
d8:99:f5:bc:9f:8e:66:11:09:c7:2c:f5:cb:29:16:
7c:aa:db:48:20:f9:12:d0:e1:51:7a:37:cb:47:cc:
ee:06:b7:42:d2:64:12:19:e0:78:b0:a8:3e:99:22:
c5:ed:bb:d9:22:7d:e9:95:f1:ee:4b:4c:1f:ca:84:
2f:a6:c2:ac:93:e3:44:ac:9e:81:57:0a:40:ff:75:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:62:DC:AA:F6:ED:34:97:72:57:3F:3E:E5:66:C2:91:01:C5:BF
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/G95i3Kr27TSXclc_PuVmwpEBxb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
c8:66:50:38:1d:33:c6:08:9c:4a:d2:08:f7:61:b6:78:34:f1:
35:7b:6a:f1:12:26:06:0e:23:1d:af:f8:12:72:30:c2:12:d1:
06:1d:97:8a:22:5c:b3:a7:0d:1d:38:1d:3f:0b:fe:a5:82:00:
bc:de:67:20:aa:29:fd:06:44:e5:49:84:d9:86:65:f8:4b:98:
2d:1a:75:7a:58:24:fc:cf:a4:f4:ec:f4:90:d9:1c:a2:8b:1b:
a0:cb:8c:8c:a0:0f:dc:41:b3:ea:3d:ba:c0:b6:88:67:e8:74:
c1:61:1d:48:66:6c:3d:79:41:06:cc:c5:d3:9d:eb:f8:b5:c1:
b4:f6:6a:ee:55:58:7a:ac:d3:58:10:c3:53:ae:36:a8:b9:72:
c9:32:9b:f7:da:5a:69:e5:6a:23:a3:8a:b2:3e:a3:9c:0c:2a:
3e:7b:63:c6:49:b1:05:7a:a6:b0:a7:df:7d:a6:c6:5d:a5:79:
23:10:21:c9:43:d9:e8:5c:d7:79:61:ee:1c:c4:a5:60:65:3d:
af:ed:5c:2c:c0:51:c0:cc:b5:cd:85:fd:a9:d9:4d:e7:d1:be:
06:eb:3f:29:2d:bc:51:13:22:46:f2:52:92:15:5c:25:a5:21:
79:42:0c:41:37:9a:fb:ac:90:96:81:a3:13:cf:b1:77:b3:1b:
35:2c:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:47:40 2025 by rpki-client on console.sobornost.net