Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9inHWinM2rLS5xXsfH71ZeOIzaQ.roa
File: 9inHWinM2rLS5xXsfH71ZeOIzaQ.roa (raw, json)
Hash identifier: GXYEe8McuRV/UNl31KphJW7tn6kQbxU0+q8sz+u3AKs=
Subject key identifier: F6:29:C7:5A:29:CC:DA:B2:D2:E7:15:EC:7C:7E:F5:65:E3:88:CD:A4
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01857130A3DF8B39BA879CDE2A13F40337AE
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9inHWinM2rLS5xXsfH71ZeOIzaQ.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206146
IP address blocks: 107.150.64.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
192.40.94.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a3:df:8b:39:ba:87:9c:de:2a:13:f4:03:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f629c75a29ccdab2d2e715ec7c7ef565e388cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:9b:4d:c2:d7:c9:ea:6d:ac:dd:d6:4a:18:
b1:4e:1e:8c:c3:6c:4c:35:5c:e8:d0:98:a2:c0:58:
9c:02:6c:a7:7d:da:ac:90:07:e6:c2:6e:65:b7:d0:
bc:41:71:36:e2:3f:a8:f7:00:c1:c9:c2:7c:ce:0c:
c5:58:bc:90:33:1d:8d:25:fe:9b:f6:77:bf:ff:50:
db:f2:38:d6:b5:60:60:f9:d0:51:a1:0d:ad:a0:e2:
ab:bc:d8:84:c3:05:e0:75:e2:31:7d:58:20:e0:4b:
0f:68:c9:51:f6:42:2b:0d:f8:db:ce:03:6d:96:1d:
f0:bc:2c:9d:95:a5:9b:ed:00:01:ee:a4:19:df:7a:
26:6a:70:b4:9b:ea:4f:39:15:17:05:d3:96:4b:29:
43:2f:8b:6f:77:51:76:74:51:48:52:b5:2c:e5:a1:
98:fd:5f:9d:b0:29:87:ad:bf:9f:fc:c9:e2:f5:ab:
c6:78:45:af:ce:a0:77:de:57:c7:0d:01:e6:92:2e:
a8:41:72:a8:ae:a7:a2:69:2b:da:74:60:d4:13:3c:
21:5b:09:3f:00:15:c5:b2:b8:78:46:e4:88:26:ee:
b9:0a:42:05:e0:14:d0:47:a1:ac:73:16:b8:8f:4d:
06:ab:9f:42:31:97:90:9b:9b:7a:2c:f0:5f:39:b2:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:C7:5A:29:CC:DA:B2:D2:E7:15:EC:7C:7E:F5:65:E3:88:CD:A4
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/9inHWinM2rLS5xXsfH71ZeOIzaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.115.0/24
104.160.16.0/22
107.150.64.0/23
107.150.67.0/24
107.150.70.0/23
107.150.89.0/24
107.150.93.0/24
162.212.168.0/21
192.40.94.0/24
Signature Algorithm: sha256WithRSAEncryption
19:07:97:d5:85:47:f6:4d:eb:8e:37:f7:b3:e5:60:cc:12:a1:
b5:30:dd:38:7f:6a:38:53:eb:2a:d9:49:03:cc:c8:f7:8a:77:
8b:3a:ae:91:9c:45:7c:e4:ac:93:11:32:06:b2:be:18:de:08:
51:66:2c:20:db:3d:93:37:53:df:92:3c:03:7d:39:27:15:96:
f4:79:2d:19:38:0c:3e:f0:17:5a:9f:32:dc:6a:47:9a:a0:56:
5b:42:3a:cf:62:85:5a:55:7a:85:e9:97:6e:b2:77:d4:a5:1e:
dd:4d:aa:c3:54:3b:00:a6:4f:48:81:4c:b3:cd:50:77:ad:4b:
c0:28:7d:82:2b:21:1a:52:92:e5:8b:68:89:9a:95:b0:91:bf:
21:21:97:2a:83:8c:7f:29:9e:92:e2:24:74:49:b5:17:54:cc:
47:fa:4c:1d:52:0c:db:11:72:5e:ac:1a:83:49:5a:30:8f:0d:
c1:f5:fa:cf:a1:bc:91:2c:7b:db:86:b2:26:26:7b:74:39:4d:
d0:65:52:19:82:41:c4:4d:3d:97:f2:04:e8:0e:6f:46:9e:e5:
e3:45:ea:bd:3d:b2:0d:af:04:43:59:88:4b:8d:5d:12:fe:79:
51:56:f6:03:54:25:d0:48:93:f9:de:0c:7f:0c:99:12:d7:93:
23:79:87:de
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYVxMKPfizm6h5zeKhP0AzeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM3NmRmNWY5ZWY0ODdjODJiMzFhODc1YzZhNDk2ZDc5
Y2EwZDcwHhcNMjMwMTAyMDYzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI5Yzc1YTI5Y2NkYWIyZDJlNzE1ZWM3YzdlZjU2NWUzODhjZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2bTcLXyeptrN3WShixTh6Mw2xM
NVzo0JiiwFicAmynfdqskAfmwm5lt9C8QXE24j+o9wDBycJ8zgzFWLyQMx2NJf6b
9ne//1Db8jjWtWBg+dBRoQ2toOKrvNiEwwXgdeIxfVgg4EsPaMlR9kIrDfjbzgNt
lh3wvCydlaWb7QAB7qQZ33omanC0m+pPORUXBdOWSylDL4tvd1F2dFFIUrUs5aGY
/V+dsCmHrb+f/Mni9avGeEWvzqB33lfHDQHmki6oQXKorqeiaSvadGDUEzwhWwk/
ABXFsrh4RuSIJu65CkIF4BTQR6Gscxa4j00Gq59CMZeQm5t6LPBfObKvbQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFPYpx1opzNqy0ucV7Hx+9WXjiM2kMB8GA1UdIwQY
MBaAFIDzdt9fnvSHyCsxqHXGpJbXnKDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMt
YTRiYzI4MTY2NDNhLzEvOWluSFdpbk0yckxTNXhYc2ZINzFaZU9JemFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMtYTRiYzI4MTY2NDNh
LzEvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAF1xzAwQC
aKAQAwQBa5ZAAwQAa5ZDAwQBa5ZGAwQAa5ZZAwQAa5ZdAwQDotSoAwQAwCheMA0G
CSqGSIb3DQEBCwUAA4IBAQAZB5fVhUf2TeuON/ez5WDMEqG1MN04f2o4U+sq2UkD
zMj3ineLOq6RnEV85KyTETIGsr4Y3ghRZiwg2z2TN1PfkjwDfTknFZb0eS0ZOAw+
8BdanzLcakeaoFZbQjrPYoVaVXqF6ZdusnfUpR7dTarDVDsApk9IgUyzzVB3rUvA
KH2CKyEaUpLli2iJmpWwkb8hIZcqg4x/KZ6S4iR0SbUXVMxH+kwdUgzbEXJerBqD
SVowjw3B9frPobyRLHvbhrImJnt0OU3QZVIZgkHETT2X8gToDm9GnuXjReq9PbIN
rwRDWYhLjV0S/nlRVvYDVCXQSJP53gx/DJkS15MjeYfe
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:48:13 2025 by rpki-client