Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/_O3zMYMXEEQtKtWfpX-fb6FVXuc.roa
File: _O3zMYMXEEQtKtWfpX-fb6FVXuc.roa (raw, json)
Hash identifier: o195v39/8svKVFU7knNQRoKmWjh74jx8M0QnJvD3Icc=
Subject key identifier: FC:ED:F3:31:83:17:10:44:2D:2A:D5:9F:A5:7F:9F:6F:A1:55:5E:E7
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018571309F002EC9A7400B614F7FEF39B280
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/_O3zMYMXEEQtKtWfpX-fb6FVXuc.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57858
IP address blocks: 37.72.189.0/24 maxlen: 24
37.72.191.0/24 maxlen: 24
37.72.187.0/24 maxlen: 24
37.72.190.0/24 maxlen: 24
37.72.188.0/24 maxlen: 24
5.153.233.0/24 maxlen: 24
5.153.232.0/24 maxlen: 24
5.153.235.0/24 maxlen: 24
5.153.237.0/24 maxlen: 24
5.153.234.0/24 maxlen: 24
5.153.238.0/24 maxlen: 24
130.185.152.0/24 maxlen: 24
130.185.157.0/24 maxlen: 24
130.185.155.0/24 maxlen: 24
130.185.159.0/24 maxlen: 24
130.185.156.0/24 maxlen: 24
130.185.158.0/24 maxlen: 24
130.185.154.0/24 maxlen: 24
185.3.132.0/24 maxlen: 24
185.3.135.0/24 maxlen: 24
185.3.133.0/24 maxlen: 24
185.3.134.0/24 maxlen: 24
46.29.253.0/24 maxlen: 24
46.29.252.0/24 maxlen: 24
46.29.248.0/23 maxlen: 23
46.29.250.0/23 maxlen: 23
46.29.255.0/24 maxlen: 24
46.29.254.0/24 maxlen: 24
151.237.176.0/24 maxlen: 24
151.237.178.0/24 maxlen: 24
151.237.177.0/24 maxlen: 24
151.237.179.0/24 maxlen: 24
151.237.182.0/24 maxlen: 24
151.237.184.0/24 maxlen: 24
151.237.180.0/24 maxlen: 24
151.237.183.0/24 maxlen: 24
151.237.181.0/24 maxlen: 24
151.237.185.0/24 maxlen: 24
151.237.190.0/24 maxlen: 24
151.237.189.0/24 maxlen: 24
151.237.191.0/24 maxlen: 24
151.237.187.0/24 maxlen: 24
5.157.0.0/24 maxlen: 24
5.157.1.0/24 maxlen: 24
5.157.10.0/24 maxlen: 24
5.157.9.0/24 maxlen: 24
5.157.5.0/24 maxlen: 24
5.157.7.0/24 maxlen: 24
37.203.208.0/24 maxlen: 24
37.203.210.0/24 maxlen: 24
37.203.212.0/24 maxlen: 24
37.203.211.0/24 maxlen: 24
37.203.213.0/24 maxlen: 24
37.203.214.0/24 maxlen: 24
37.203.215.0/24 maxlen: 24
5.157.15.0/24 maxlen: 24
5.157.16.0/24 maxlen: 24
5.157.12.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.18.0/24 maxlen: 24
5.157.20.0/24 maxlen: 24
5.157.31.0/24 maxlen: 24
5.157.25.0/24 maxlen: 24
5.157.28.0/24 maxlen: 24
5.157.35.0/24 maxlen: 24
5.157.36.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.39.0/24 maxlen: 24
5.157.44.0/24 maxlen: 24
5.157.40.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.47.0/24 maxlen: 24
5.157.49.0/24 maxlen: 24
5.157.50.0/24 maxlen: 24
5.157.46.0/24 maxlen: 24
5.157.48.0/24 maxlen: 24
5.157.52.0/24 maxlen: 24
5.157.54.0/24 maxlen: 24
5.34.240.0/24 maxlen: 24
91.108.177.0/24 maxlen: 24
91.108.179.0/24 maxlen: 24
176.61.136.0/24 maxlen: 24
176.61.138.0/24 maxlen: 24
91.108.176.0/24 maxlen: 24
91.108.178.0/24 maxlen: 24
176.61.137.0/24 maxlen: 24
176.61.139.0/24 maxlen: 24
91.108.181.0/24 maxlen: 24
176.61.140.0/24 maxlen: 24
176.61.142.0/24 maxlen: 24
91.108.180.0/24 maxlen: 24
91.108.182.0/24 maxlen: 24
176.61.141.0/24 maxlen: 24
176.61.143.0/24 maxlen: 24
5.34.244.0/24 maxlen: 24
5.34.246.0/24 maxlen: 24
5.34.242.0/24 maxlen: 24
5.34.245.0/24 maxlen: 24
5.34.241.0/24 maxlen: 24
5.34.243.0/24 maxlen: 24
5.34.247.0/24 maxlen: 24
178.216.52.0/24 maxlen: 24
178.216.54.0/24 maxlen: 24
178.216.53.0/24 maxlen: 24
178.216.55.0/24 maxlen: 24
178.216.50.0/24 maxlen: 24
178.216.48.0/24 maxlen: 24
178.216.51.0/24 maxlen: 24
178.216.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9f:00:2e:c9:a7:40:0b:61:4f:7f:ef:39:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcedf331831710442d2ad59fa57f9f6fa1555ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:60:2d:f7:57:ba:e3:28:9e:1e:3f:5c:46:
f7:91:25:86:92:d7:2a:93:22:b0:76:a6:3f:d9:0f:
d8:e7:2a:83:a8:0f:e6:ab:ca:73:26:34:f6:3b:c5:
37:98:e6:a5:61:88:ff:50:38:04:5d:36:2f:91:ba:
34:6c:28:ae:df:66:f4:b3:fc:a8:18:3f:12:a5:c6:
56:fb:a8:ec:ea:25:64:8a:e7:99:ca:08:0d:31:da:
18:d7:4c:a7:3c:a7:98:49:b2:79:3e:5a:f3:90:1a:
0f:5b:b8:3c:4f:9f:da:65:49:ec:1e:1e:7d:a5:83:
ca:95:f6:3f:34:26:62:1d:66:a4:58:1c:f3:e8:e2:
dc:4b:3e:58:67:fe:d8:1c:61:6a:73:5c:d7:d4:59:
7b:ee:3d:6d:51:e1:ee:07:d5:c4:09:98:cc:31:ca:
4a:f3:f6:83:54:fc:92:04:a9:63:4a:5e:86:62:0b:
c9:19:90:77:c4:37:f2:47:2a:f0:53:b4:d5:95:9d:
cf:26:18:95:01:4e:b2:72:5b:ae:27:e6:ce:70:8d:
e8:e2:cc:50:40:89:0c:c0:ee:23:d3:95:63:6a:d1:
f0:64:cf:0c:3b:22:57:7c:47:4c:fa:33:84:fb:83:
01:9f:5b:5c:c6:34:8f:50:13:bc:2c:c3:b7:fb:83:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:F3:31:83:17:10:44:2D:2A:D5:9F:A5:7F:9F:6F:A1:55:5E:E7
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/_O3zMYMXEEQtKtWfpX-fb6FVXuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.240.0/21
5.153.232.0/22
5.153.237.0-5.153.238.255
5.157.0.0/23
5.157.5.0/24
5.157.7.0/24
5.157.9.0-5.157.10.255
5.157.12.0/24
5.157.14.0-5.157.16.255
5.157.18.0/24
5.157.20.0/23
5.157.25.0/24
5.157.28.0/24
5.157.31.0/24
5.157.34.0-5.157.36.255
5.157.39.0-5.157.40.255
5.157.42.0/24
5.157.44.0/24
5.157.46.0-5.157.52.255
5.157.54.0/24
37.72.187.0-37.72.191.255
37.203.208.0/24
37.203.210.0-37.203.215.255
46.29.248.0/21
91.108.176.0-91.108.182.255
130.185.152.0/24
130.185.154.0-130.185.159.255
151.237.176.0-151.237.185.255
151.237.187.0/24
151.237.189.0-151.237.191.255
176.61.136.0/21
178.216.48.0/21
185.3.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:8d:09:80:a1:34:7b:b0:34:19:b8:b9:7f:b2:68:de:c1:ef:
67:5b:da:24:f0:dd:ef:1f:d3:8b:a6:51:3f:c5:8b:ef:ba:51:
c2:41:f7:b5:3b:21:67:ab:2d:73:dc:62:2b:2b:b3:7c:b0:fc:
d3:7a:98:96:66:72:a3:38:c1:63:30:b5:9c:f7:8c:77:cd:27:
c3:e3:be:29:81:d4:b6:59:d9:32:c8:b4:86:b9:c1:3e:59:5b:
25:00:d5:f5:6a:65:b0:40:3e:53:98:56:9b:ab:93:90:e2:95:
25:55:f7:48:dd:93:04:61:e0:9f:dd:c9:00:e9:3b:f4:e5:92:
45:47:2a:b2:f0:b3:5a:76:97:ba:5e:c9:61:99:02:8c:6d:42:
6d:e8:6d:12:8d:5b:1e:32:98:c5:7d:89:31:65:d8:c5:d2:4f:
07:8e:e5:f7:d3:9b:c2:38:34:55:fc:2d:fe:eb:5f:1e:10:95:
c0:79:7f:ae:54:31:42:d8:bb:c5:e5:87:66:07:34:41:0f:33:
19:9d:82:f3:26:77:a7:88:60:3a:f2:a3:bf:fb:2c:f2:a3:52:
f4:62:cc:d5:17:36:77:0e:12:dd:b2:75:da:b1:c0:14:c3:f1:
89:a1:ae:80:9e:c7:dc:1a:63:e4:de:79:61:eb:ea:2a:28:35:
ef:98:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:29 2025 by rpki-client