Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9a9F0A8XzPuP80d9xnNrpEZT6UI.roa
File: 9a9F0A8XzPuP80d9xnNrpEZT6UI.roa (raw, json)
Hash identifier: bKaTc2XWhS47a1mC22VzREaV4htsapmXRQ0PGEdR93s=
Subject key identifier: F5:AF:45:D0:0F:17:CC:FB:8F:F3:47:7D:C6:73:6B:A4:46:53:E9:42
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1578F64B
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9a9F0A8XzPuP80d9xnNrpEZT6UI.roa
Signing time: Sat 01 Jan 2022 14:03:41 +0000
ROA not before: Sat 01 Jan 2022 14:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63119
IP address blocks: 192.40.90.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.92.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.93.0/24 maxlen: 24
158.222.0.0/20 maxlen: 20
158.222.4.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
5.157.4.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.78.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.9.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.10.0/23 maxlen: 23
104.160.14.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.13.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
104.160.31.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.84.0/24 maxlen: 24
107.150.82.0/23 maxlen: 23
107.150.81.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
2a02:5740::/48 maxlen: 48
2a02:5740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360248907 (0x1578f64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5af45d00f17ccfb8ff3477dc6736ba44653e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:a1:d6:6d:21:8b:5c:85:79:f2:7b:ff:15:
fa:ce:c0:20:c3:00:21:0f:ef:6f:8a:5e:6c:fe:fa:
a5:41:e7:a6:13:55:59:81:57:13:93:63:d0:ba:81:
98:6d:8a:ed:10:68:08:80:28:b5:78:53:18:91:40:
18:9c:20:e2:11:7d:bd:05:96:74:3c:16:db:06:f4:
a6:af:64:e5:47:62:3a:7f:6a:87:db:b3:39:f5:7c:
ce:ca:74:02:83:83:1f:94:dd:77:da:73:40:63:b6:
19:09:9b:46:a0:b7:f9:19:e1:c0:74:66:4f:41:95:
0a:07:8f:48:4f:65:05:e1:52:c8:44:8e:a7:7d:eb:
5a:2f:d2:a8:10:8b:18:83:dd:7b:e5:ca:15:3e:8b:
f7:4e:c1:af:e8:53:b2:a0:a6:38:60:8a:51:05:99:
47:60:58:fc:c5:38:bc:8c:99:14:7d:f3:12:f3:62:
56:aa:7f:df:0a:d0:57:06:5e:0b:bc:9e:cd:16:14:
99:05:ae:ef:e3:2a:e5:59:71:35:3e:1a:8b:82:5d:
6c:4b:05:26:39:74:eb:b1:43:1b:e9:af:37:75:1a:
01:b8:be:8e:1a:9b:17:ac:03:43:b2:68:dd:6f:bb:
bf:6a:b6:73:cd:5c:f5:40:2c:ac:50:a3:e8:38:3a:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:45:D0:0F:17:CC:FB:8F:F3:47:7D:C6:73:6B:A4:46:53:E9:42
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9a9F0A8XzPuP80d9xnNrpEZT6UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.4.0/24
23.92.116.0-23.92.126.255
104.160.1.0/24
104.160.3.0/24
104.160.5.0/24
104.160.7.0/24
104.160.9.0-104.160.11.255
104.160.13.0-104.160.15.255
104.160.28.0/22
107.150.66.0/24
107.150.68.0/23
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0/20
192.40.90.0-192.40.93.255
IPv6:
2a02:5740::/32
Signature Algorithm: sha256WithRSAEncryption
37:ed:70:b9:a6:32:3d:b6:83:81:09:b8:66:85:38:ce:23:e0:
76:9b:98:74:1d:3e:a6:18:14:fd:f7:2f:e1:19:8a:8a:8b:11:
99:67:d2:d3:74:15:74:08:f2:e9:2f:d6:f9:ea:cd:64:bc:55:
d4:2b:78:d6:b7:fc:1b:61:de:8b:a0:90:88:81:0b:aa:f2:0e:
93:af:3b:76:d0:58:13:e9:10:9c:e1:24:90:16:ba:41:77:3a:
65:5f:f3:22:b4:9d:c2:26:ae:f0:75:10:ab:06:9c:0f:26:e4:
81:19:24:69:c7:b8:2e:22:b0:ac:ce:d9:0b:e8:c9:34:cc:dc:
13:9c:58:26:b1:eb:18:5b:cd:e6:b8:0a:fa:b0:de:d8:87:60:
7b:d0:47:42:38:e5:58:a7:c6:ea:44:fd:b3:ad:a5:87:eb:98:
29:82:cf:c2:14:dd:03:f0:70:8f:40:c4:8c:5d:ce:0b:3b:26:
0e:b8:f2:e9:fe:6e:6b:06:fc:36:44:20:3e:c2:ac:dc:f8:a6:
c1:07:6d:07:0d:7d:0f:b6:70:b1:05:59:03:53:e9:52:fa:95:
e5:70:f0:79:27:d4:00:41:1e:49:75:e0:e9:9a:c1:65:57:2f:
1a:95:8b:b8:eb:81:12:d0:78:67:75:87:54:39:34:ec:21:d1:
eb:36:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:54:49 2025 by rpki-client