Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/JzChO7slAql3py2nkTUo2GmPjk4.roa
File: JzChO7slAql3py2nkTUo2GmPjk4.roa (raw, json)
Hash identifier: X2MtKi44H+iwELgIF/YUIGt1r878TzDe2oM7TCZhtZQ=
Subject key identifier: 27:30:A1:3B:BB:25:02:A9:77:A7:2D:A7:91:35:28:D8:69:8F:8E:4E
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01872DE8E0072FE2F674C6DE6CA38231A759
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/JzChO7slAql3py2nkTUo2GmPjk4.roa
Signing time: Wed 29 Mar 2023 15:07:29 +0000
ROA not before: Wed 29 Mar 2023 15:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58065
IP address blocks: 192.40.94.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
107.150.75.0/24 maxlen: 24
5.157.6.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
5.157.19.0/24 maxlen: 24
107.150.91.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
5.157.26.0/24 maxlen: 24
107.150.94.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
2a02:5740:14::/48 maxlen: 48
2a02:5740:4::/48 maxlen: 48
2a02:5740:9::/48 maxlen: 48
2a02:5740:10::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:e8:e0:07:2f:e2:f6:74:c6:de:6c:a3:82:31:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Mar 29 15:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2730a13bbb2502a977a72da7913528d8698f8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:69:b3:05:df:cc:51:06:4e:c4:e2:b8:c3:
a0:c8:83:f8:7d:89:a9:95:5e:c4:99:ae:06:bf:d6:
88:b9:6a:1c:f7:ab:f5:b2:61:27:d3:db:81:c1:26:
31:cc:40:8e:fa:48:aa:3b:83:d2:97:a8:b6:bf:99:
64:a5:97:d4:25:36:b6:e6:27:1d:5f:8e:e5:14:9f:
f2:b0:e4:bd:35:ed:9c:c8:45:74:b1:9c:a6:04:37:
ab:9c:da:1e:6d:5b:8b:1c:ad:04:c1:d3:1c:f4:a6:
42:ea:31:fe:a7:aa:46:ac:b4:20:70:30:ba:c1:db:
b2:6f:68:1a:3a:13:4d:9e:6a:76:d2:91:10:b6:5e:
74:55:8a:8b:35:c2:04:db:2d:21:d7:2a:21:82:3d:
9e:54:44:62:1e:7e:79:4f:50:31:a8:df:ba:4a:05:
c4:f8:6f:c0:0a:7e:1c:89:bb:fa:1f:0e:69:5f:5c:
13:b6:82:63:44:9f:cc:97:fe:ce:cb:e8:33:32:aa:
04:c7:e7:71:ec:9f:ed:24:a1:ed:bc:4f:80:fb:f0:
15:7a:d5:4d:d7:31:e0:14:a3:77:e5:87:65:fc:50:
80:a2:5f:4a:83:84:1c:6f:dd:9c:8e:ad:36:bb:1d:
11:9e:cb:69:b2:30:93:22:f0:79:71:20:be:07:13:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:A1:3B:BB:25:02:A9:77:A7:2D:A7:91:35:28:D8:69:8F:8E:4E
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/JzChO7slAql3py2nkTUo2GmPjk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.19.0/24
5.157.21.0/24
5.157.23.0-5.157.24.255
5.157.26.0/24
5.157.29.0/24
5.157.32.0-5.157.34.255
5.157.37.0/24
5.157.41.0/24
5.157.43.0/24
5.157.51.0/24
5.157.53.0/24
5.157.55.0/24
23.92.115.0/24
23.92.119.0/24
37.72.186.0/24
104.160.16.0/22
107.150.64.0/23
107.150.67.0/24
107.150.70.0/23
107.150.75.0/24
107.150.88.0/22
107.150.93.0-107.150.94.255
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
192.40.94.0/24
IPv6:
2a02:5740:4::/48
2a02:5740:9::/48
2a02:5740:10::/48
2a02:5740:14::/48
2a02:5740:21::/48
2a02:5740:24::/48
Signature Algorithm: sha256WithRSAEncryption
48:f5:49:7d:33:e6:86:f0:a7:92:af:19:f9:b4:0b:08:42:b7:
23:49:bd:f2:5a:0c:03:46:1a:24:cf:a1:6b:05:6b:17:69:ea:
9a:53:c8:7c:55:8a:7c:c2:88:6d:c1:3a:6b:52:f2:8d:33:bf:
89:87:c8:80:b0:88:09:f2:35:b7:2b:c0:fa:39:6d:eb:29:5b:
10:a0:b8:76:18:2c:31:f1:f5:09:66:76:10:2a:46:48:bb:cb:
d0:56:36:e7:bd:73:05:56:0d:b4:cc:c9:5d:34:61:38:42:a9:
76:13:78:3c:3a:d7:f5:ea:17:2b:33:53:cb:55:dd:3e:1f:6d:
1e:44:3d:1e:27:d3:ad:5d:d6:76:9f:32:26:68:a5:fd:28:48:
e1:fc:85:a1:08:d1:7d:14:6a:d0:da:88:f6:5e:4c:8e:97:77:
9c:53:97:e9:f5:71:e2:33:1b:ee:0b:69:38:ea:a1:31:62:ad:
11:c2:04:c9:89:e5:74:82:cd:28:b5:f4:bb:37:a8:90:da:8d:
b9:c8:d9:2f:a6:95:05:ee:d4:e0:f9:51:f4:dd:f2:2c:af:0f:
98:80:6b:58:e0:d3:44:dc:e0:cf:15:21:f2:05:84:0e:4b:7d:
11:93:74:4e:a8:4d:1c:d8:45:3f:b9:47:45:76:5f:a5:95:fd:
8a:70:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:14 2025 by rpki-client