Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/54xSwfkTnOJfCSxjUVUy6SmPeEM.roa
File: 54xSwfkTnOJfCSxjUVUy6SmPeEM.roa (raw, json)
Hash identifier: N1GgTVjWmxKNiQz8efGrLBKJvVoPbi68OfW9OtJf9Mg=
Subject key identifier: E7:8C:52:C1:F9:13:9C:E2:5F:09:2C:63:51:55:32:E9:29:8F:78:43
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01857130A17E8E8141203003D7544C2599B0
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/54xSwfkTnOJfCSxjUVUy6SmPeEM.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63119
IP address blocks: 192.40.90.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.92.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.93.0/24 maxlen: 24
158.222.0.0/20 maxlen: 20
158.222.4.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
5.157.4.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.78.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.9.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.10.0/23 maxlen: 23
104.160.14.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.13.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
104.160.31.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.84.0/24 maxlen: 24
107.150.82.0/23 maxlen: 23
107.150.81.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
2a02:5740::/48 maxlen: 48
2a02:5740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a1:7e:8e:81:41:20:30:03:d7:54:4c:25:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78c52c1f9139ce25f092c63515532e9298f7843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:07:74:34:44:2f:83:f4:f1:66:2f:2e:68:
59:b4:70:ef:28:eb:bd:9e:75:b7:1a:76:c8:8e:44:
87:a7:0b:12:51:cb:74:c9:26:c0:05:4d:9b:69:0f:
f6:bf:65:30:9e:1e:49:c0:58:cc:59:44:38:4e:e2:
7a:ea:bc:6e:68:14:d9:f6:8b:c0:db:7c:14:a1:3e:
19:cb:d5:97:db:05:f9:42:2d:57:84:9f:99:4e:bd:
43:5f:33:ca:f6:79:8a:0a:f8:e9:94:b0:3c:dd:8c:
cc:fe:99:7a:32:c7:70:5d:16:c8:52:53:2f:da:da:
f3:cb:23:55:b7:40:02:60:34:b2:c6:59:45:79:f2:
2d:42:18:71:8a:26:d9:7e:be:09:10:cc:9f:13:8a:
f1:3c:11:94:cd:46:84:01:44:45:b9:21:9b:6d:32:
de:60:09:0b:35:62:93:38:2e:dc:42:31:bb:cc:72:
5b:e0:56:70:e9:c7:7f:a5:f2:52:2c:49:f5:db:8a:
ff:a3:e8:43:ca:cd:c4:06:2d:f3:07:9a:ff:15:a7:
74:a6:6b:21:6f:08:6d:20:4c:9b:55:b4:76:de:94:
39:2e:a7:ad:bb:c4:45:a2:f4:7a:ab:7f:bb:8a:56:
79:ca:a0:4f:81:f4:7d:eb:41:67:e6:55:b2:54:a5:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8C:52:C1:F9:13:9C:E2:5F:09:2C:63:51:55:32:E9:29:8F:78:43
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/54xSwfkTnOJfCSxjUVUy6SmPeEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.4.0/24
23.92.116.0-23.92.126.255
104.160.1.0/24
104.160.3.0/24
104.160.5.0/24
104.160.7.0/24
104.160.9.0-104.160.11.255
104.160.13.0-104.160.15.255
104.160.28.0/22
107.150.66.0/24
107.150.68.0/23
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0/20
192.40.90.0-192.40.93.255
IPv6:
2a02:5740::/32
Signature Algorithm: sha256WithRSAEncryption
25:4a:cb:0f:33:53:eb:1f:51:7d:73:2a:34:87:39:cc:c4:5e:
2e:d0:f9:e4:7f:34:34:3b:bd:7a:2e:7f:4d:fa:4e:ef:a7:e8:
c1:9e:10:c5:57:6b:f2:74:58:27:c7:e2:64:b9:02:21:41:1a:
39:fd:67:c2:02:5a:f4:50:0a:b4:e8:4e:d5:0f:0a:bf:b5:dc:
fb:fa:4a:ec:50:8d:e6:46:60:46:b7:3c:9f:3d:6d:4e:27:87:
60:e6:43:2c:d4:7f:52:93:e4:cb:57:0e:50:f4:87:0a:82:e1:
da:b3:47:0f:6e:52:41:36:6f:66:c7:cb:68:fe:79:96:c1:4e:
7b:07:af:78:01:58:3e:66:b0:d4:23:55:1f:2d:81:fd:41:ee:
6a:fd:8a:02:43:12:a8:4a:47:b7:3e:ce:a1:ae:ea:2b:7a:d7:
62:47:c0:cd:16:8b:c4:6a:c9:54:df:30:c4:e9:0f:68:c5:5d:
ae:6a:fa:ff:3b:cb:a0:5d:ab:bd:5f:22:83:ac:10:69:28:c0:
2e:e7:80:71:de:96:2d:45:4d:4c:4d:4a:ee:fe:95:61:2a:5a:
c5:b0:fa:8c:8b:d0:3f:dc:2f:ec:15:a1:b3:21:37:51:38:5d:
24:56:c9:ab:a7:a7:c5:1c:bf:ef:3d:62:9b:49:2d:86:09:a4:
bc:e5:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:39:08 2025 by rpki-client