Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MQnoC2-uAjnyF31_pPnonfmkzRE.roa
File: MQnoC2-uAjnyF31_pPnonfmkzRE.roa (raw, json)
Hash identifier: OQRPQDDHLI6nuUXLxm6SujdOQNaUnwekcXQCTHpmTqM=
Subject key identifier: 31:09:E8:0B:6F:AE:02:39:F2:17:7D:7F:A4:F9:E8:9D:F9:A4:CD:11
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 0186030559456EFA3429306FFF3065FC34E6
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MQnoC2-uAjnyF31_pPnonfmkzRE.roa
Signing time: Mon 30 Jan 2023 14:12:07 +0000
ROA not before: Mon 30 Jan 2023 14:12:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46805
IP address blocks: 192.40.89.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.90.0/24 maxlen: 24
192.40.93.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.92.0/24 maxlen: 24
192.40.94.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.0.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.0.0/22 maxlen: 22
104.160.4.0/22 maxlen: 22
104.160.1.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
104.160.10.0/23 maxlen: 23
104.160.8.0/23 maxlen: 23
104.160.9.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.14.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.24.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
104.160.22.0/24 maxlen: 24
104.160.23.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.21.0/24 maxlen: 24
104.160.26.0/24 maxlen: 24
104.160.28.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.25.0/24 maxlen: 24
104.160.27.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
104.160.31.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
23.92.112.0/24 maxlen: 24
23.92.116.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.114.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.113.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
23.92.126.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
107.150.69.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
5.157.6.0/24 maxlen: 24
107.150.72.0/22 maxlen: 22
107.150.73.0/24 maxlen: 24
107.150.75.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.78.0/24 maxlen: 24
107.150.76.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.81.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.79.0/24 maxlen: 24
107.150.83.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.80.0/23 maxlen: 23
107.150.82.0/23 maxlen: 23
107.150.80.0/24 maxlen: 24
107.150.84.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
107.150.92.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:05:59:45:6e:fa:34:29:30:6f:ff:30:65:fc:34:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 30 14:12:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3109e80b6fae0239f2177d7fa4f9e89df9a4cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:be:c3:3f:ad:d9:c2:81:e5:40:ae:65:1c:
9c:66:09:42:0b:10:70:20:14:a3:41:c6:a3:a7:f0:
0a:9e:b8:00:0e:89:fb:bc:8f:41:3d:de:8d:fd:35:
d4:b4:f8:5f:40:58:8c:9e:c6:50:00:39:65:df:70:
aa:a4:5c:14:9a:22:2b:9a:53:ca:a1:1c:70:a9:89:
ee:2e:d9:c2:bb:c4:f7:57:29:f1:cb:38:27:1e:cb:
bc:90:bc:96:92:e0:29:38:9b:73:ae:e8:a3:1f:df:
9f:cc:e1:d5:9c:34:c1:1c:67:28:6e:d9:5a:9c:e5:
07:1c:67:8b:41:c5:45:18:11:cb:fe:4b:3a:08:4d:
bd:2b:95:0c:13:0e:8c:25:34:8b:c3:bd:47:df:9b:
77:d2:41:08:9f:32:56:41:15:25:12:49:14:ec:d5:
85:d8:52:90:9f:23:a0:2d:72:98:ed:c3:7e:b9:8c:
c6:4f:41:eb:ec:51:ba:31:93:8b:0c:ab:ba:80:ec:
0c:77:ee:02:65:7a:f3:57:bd:60:8f:19:7b:2f:88:
c0:44:e8:32:53:d2:87:7e:4b:97:ff:a3:68:77:b8:
42:8a:8f:5a:b9:4b:8b:eb:ff:a7:71:b4:91:e7:cc:
5d:8f:aa:df:f9:f0:92:36:ed:0d:b2:8f:e8:42:78:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:E8:0B:6F:AE:02:39:F2:17:7D:7F:A4:F9:E8:9D:F9:A4:CD:11
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MQnoC2-uAjnyF31_pPnonfmkzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.23.0-5.157.24.255
5.157.29.0/24
5.157.32.0/23
5.157.37.0/24
5.157.43.0/24
5.157.53.0/24
5.157.55.0/24
23.92.112.0-23.92.126.255
37.72.186.0/24
104.160.0.0-104.160.11.255
104.160.14.0-104.160.19.255
104.160.21.0-104.160.31.255
107.150.64.0-107.150.90.255
107.150.92.0/23
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
192.40.89.0-192.40.95.255
Signature Algorithm: sha256WithRSAEncryption
02:3c:66:33:23:63:f3:75:88:17:b2:3e:d5:4a:82:53:d8:c6:
05:76:eb:f9:21:5d:54:5e:c8:d7:c4:bd:73:41:ab:11:7c:2a:
b6:64:7a:39:cb:7a:97:2e:92:4a:8d:1a:04:36:e2:93:f7:5e:
6e:97:1d:fd:3e:9f:33:4f:3b:9b:95:0f:10:cc:14:06:1f:95:
fe:d0:5d:eb:93:3b:db:73:bb:a9:d4:98:53:55:25:53:76:55:
66:db:29:92:9e:8b:ef:e8:b3:53:b4:f9:55:d1:ab:14:7d:14:
ac:b2:66:ea:46:f9:75:e3:ee:32:a7:e3:8e:6e:90:27:32:f5:
7f:e8:a2:32:a3:e1:53:b9:4e:5a:aa:36:be:2f:10:12:92:0b:
e9:6b:1d:20:09:b9:f2:10:e6:f1:a5:64:08:27:9f:1c:fb:42:
54:5b:8c:79:a9:f0:94:a1:05:e3:61:21:d6:2c:c0:7b:c8:b8:
8c:dc:6e:22:73:fe:d8:60:82:f2:34:71:c3:cb:e2:7f:cb:c1:
04:a8:d9:ec:a8:fd:a7:50:69:a2:15:f8:4d:fc:54:81:67:43:
b0:f1:f7:05:00:8f:20:b1:e7:41:83:51:d4:55:54:44:49:78:
18:a0:3c:7b:87:90:32:7c:12:a0:01:97:36:60:c3:63:ea:9e:
9d:23:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:31:03 2025 by rpki-client