Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/70P6f9ZsiKi5Q2IQQf3e5J8qeYY.roa
File: 70P6f9ZsiKi5Q2IQQf3e5J8qeYY.roa (raw, json)
Hash identifier: DD8OJAaQmA5i7ks7oVht3XzgqjKSSdNQMfvIIbbbWHg=
Subject key identifier: EF:43:FA:7F:D6:6C:88:A8:B9:43:62:10:41:FD:DE:E4:9F:2A:79:86
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018603046B8EE923ED5D3CD38D9B0C0D3D74
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/70P6f9ZsiKi5Q2IQQf3e5J8qeYY.roa
Signing time: Mon 30 Jan 2023 14:11:06 +0000
ROA not before: Mon 30 Jan 2023 14:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57858
IP address blocks: 37.72.189.0/24 maxlen: 24
37.72.191.0/24 maxlen: 24
37.72.187.0/24 maxlen: 24
37.72.190.0/24 maxlen: 24
37.72.188.0/24 maxlen: 24
5.153.233.0/24 maxlen: 24
5.153.232.0/24 maxlen: 24
5.153.235.0/24 maxlen: 24
5.153.237.0/24 maxlen: 24
5.153.234.0/24 maxlen: 24
5.153.238.0/24 maxlen: 24
130.185.152.0/24 maxlen: 24
130.185.157.0/24 maxlen: 24
130.185.155.0/24 maxlen: 24
130.185.159.0/24 maxlen: 24
130.185.156.0/24 maxlen: 24
130.185.158.0/24 maxlen: 24
130.185.154.0/24 maxlen: 24
185.3.132.0/24 maxlen: 24
185.3.135.0/24 maxlen: 24
185.3.133.0/24 maxlen: 24
185.3.134.0/24 maxlen: 24
46.29.253.0/24 maxlen: 24
46.29.252.0/24 maxlen: 24
46.29.248.0/23 maxlen: 23
46.29.250.0/23 maxlen: 23
46.29.255.0/24 maxlen: 24
46.29.254.0/24 maxlen: 24
151.237.176.0/24 maxlen: 24
151.237.178.0/24 maxlen: 24
151.237.177.0/24 maxlen: 24
151.237.179.0/24 maxlen: 24
151.237.182.0/24 maxlen: 24
151.237.184.0/24 maxlen: 24
151.237.180.0/24 maxlen: 24
151.237.183.0/24 maxlen: 24
151.237.181.0/24 maxlen: 24
151.237.185.0/24 maxlen: 24
151.237.190.0/24 maxlen: 24
151.237.189.0/24 maxlen: 24
151.237.191.0/24 maxlen: 24
151.237.187.0/24 maxlen: 24
5.157.0.0/24 maxlen: 24
5.157.1.0/24 maxlen: 24
5.157.10.0/24 maxlen: 24
5.157.9.0/24 maxlen: 24
5.157.5.0/24 maxlen: 24
5.157.7.0/24 maxlen: 24
37.203.208.0/24 maxlen: 24
37.203.210.0/24 maxlen: 24
37.203.212.0/24 maxlen: 24
37.203.211.0/24 maxlen: 24
37.203.213.0/24 maxlen: 24
37.203.214.0/24 maxlen: 24
37.203.215.0/24 maxlen: 24
5.157.15.0/24 maxlen: 24
5.157.16.0/24 maxlen: 24
5.157.12.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.18.0/24 maxlen: 24
5.157.20.0/24 maxlen: 24
5.157.25.0/24 maxlen: 24
5.157.28.0/24 maxlen: 24
5.157.35.0/24 maxlen: 24
5.157.36.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.39.0/24 maxlen: 24
5.157.44.0/24 maxlen: 24
5.157.40.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.47.0/24 maxlen: 24
5.157.49.0/24 maxlen: 24
5.157.50.0/24 maxlen: 24
5.157.46.0/24 maxlen: 24
5.157.48.0/24 maxlen: 24
5.157.52.0/24 maxlen: 24
5.157.54.0/24 maxlen: 24
5.34.240.0/24 maxlen: 24
91.108.177.0/24 maxlen: 24
91.108.179.0/24 maxlen: 24
176.61.136.0/24 maxlen: 24
176.61.138.0/24 maxlen: 24
91.108.176.0/24 maxlen: 24
91.108.178.0/24 maxlen: 24
176.61.137.0/24 maxlen: 24
176.61.139.0/24 maxlen: 24
91.108.181.0/24 maxlen: 24
176.61.140.0/24 maxlen: 24
176.61.142.0/24 maxlen: 24
91.108.180.0/24 maxlen: 24
91.108.182.0/24 maxlen: 24
176.61.141.0/24 maxlen: 24
176.61.143.0/24 maxlen: 24
5.34.244.0/24 maxlen: 24
5.34.246.0/24 maxlen: 24
5.34.242.0/24 maxlen: 24
5.34.245.0/24 maxlen: 24
5.34.241.0/24 maxlen: 24
5.34.243.0/24 maxlen: 24
5.34.247.0/24 maxlen: 24
178.216.52.0/24 maxlen: 24
178.216.54.0/24 maxlen: 24
178.216.53.0/24 maxlen: 24
178.216.55.0/24 maxlen: 24
178.216.50.0/24 maxlen: 24
178.216.48.0/24 maxlen: 24
178.216.51.0/24 maxlen: 24
178.216.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:04:6b:8e:e9:23:ed:5d:3c:d3:8d:9b:0c:0d:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 30 14:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef43fa7fd66c88a8b943621041fddee49f2a7986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:c6:1d:5f:4c:e1:46:17:0c:7f:ab:5c:18:
fc:e5:33:66:32:aa:0b:35:83:3f:21:a4:53:36:f1:
e9:c7:87:33:d1:77:32:d1:c4:5e:3a:bf:28:9d:5d:
46:c4:a6:f0:a7:82:09:6a:ef:ad:28:4b:77:ed:1c:
c9:76:a4:d9:e1:62:b3:cb:7a:0b:f4:09:f8:ab:57:
3f:d4:fa:40:af:85:d6:de:a5:35:0a:d2:f5:89:a1:
b6:e7:30:4c:db:da:e2:e1:23:0d:4c:a8:04:17:09:
22:35:c0:ff:54:68:d8:ae:cb:a6:8b:71:9c:63:ab:
83:90:1e:1e:ed:dc:7c:31:b3:46:5d:42:8f:e8:45:
a2:62:44:23:7b:1c:72:46:5a:09:73:f6:5a:2c:4a:
67:59:af:a6:76:bd:83:d0:42:52:9a:5e:f8:8a:17:
cb:65:b3:42:5b:9f:8e:b1:e7:15:89:85:85:9e:ce:
35:d8:82:07:a7:ce:9f:e4:69:24:46:8d:6c:a0:d8:
f9:9e:03:9f:0a:ba:18:96:1c:bc:fa:55:9a:3c:61:
cf:1e:8b:cd:df:12:7c:8c:d8:e3:c2:87:6c:7f:4a:
ec:68:b4:b6:07:8d:61:cf:22:bd:9e:e1:d4:ad:54:
20:87:fb:7d:f3:c7:c6:50:3a:64:7d:be:57:1f:25:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:FA:7F:D6:6C:88:A8:B9:43:62:10:41:FD:DE:E4:9F:2A:79:86
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/70P6f9ZsiKi5Q2IQQf3e5J8qeYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.240.0/21
5.153.232.0/22
5.153.237.0-5.153.238.255
5.157.0.0/23
5.157.5.0/24
5.157.7.0/24
5.157.9.0-5.157.10.255
5.157.12.0/24
5.157.14.0-5.157.16.255
5.157.18.0/24
5.157.20.0/23
5.157.25.0/24
5.157.28.0/24
5.157.34.0-5.157.36.255
5.157.39.0-5.157.40.255
5.157.42.0/24
5.157.44.0/24
5.157.46.0-5.157.52.255
5.157.54.0/24
37.72.187.0-37.72.191.255
37.203.208.0/24
37.203.210.0-37.203.215.255
46.29.248.0/21
91.108.176.0-91.108.182.255
130.185.152.0/24
130.185.154.0-130.185.159.255
151.237.176.0-151.237.185.255
151.237.187.0/24
151.237.189.0-151.237.191.255
176.61.136.0/21
178.216.48.0/21
185.3.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:90:85:c3:02:60:19:e0:df:90:0e:57:7f:be:0e:dc:d3:7e:
88:c3:0c:cd:b4:87:44:0c:ed:fb:5c:6f:5b:a4:40:29:bc:ef:
41:12:cd:24:b1:e1:1e:e8:e6:b7:3d:ae:8b:d8:97:bc:d3:95:
b8:98:3a:6a:dd:8b:f2:99:e2:08:23:9e:9e:aa:00:a6:0c:13:
c2:00:e0:da:d9:4c:df:49:1d:88:d1:de:37:83:19:90:43:68:
13:d2:b6:b2:00:13:1a:2b:d5:81:8b:6e:64:27:77:a1:60:c6:
80:4e:a7:cf:ee:41:e2:e8:4f:7d:08:0b:d8:a5:86:0b:f0:03:
6b:94:04:0d:d9:22:ce:80:d3:ee:ec:b1:5e:be:32:80:bc:1c:
3a:94:00:0c:ce:8a:f1:3d:40:8e:0c:9a:9c:cc:4a:56:0a:19:
5b:d6:51:d1:7a:3e:87:41:8e:4a:2c:12:02:37:cf:df:24:b0:
ba:ab:6d:88:11:df:49:76:91:c3:a4:8e:21:69:84:8d:58:6b:
21:3e:a3:d9:0a:9d:92:22:c7:3f:6d:b2:eb:84:3e:18:47:2f:
9e:9b:70:d9:62:e6:1f:58:4f:14:40:60:19:01:27:3b:20:04:
73:40:da:18:f3:75:dc:1d:1c:fe:75:47:b2:fa:42:01:45:29:
b1:c5:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:03 2025 by rpki-client