Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/e3cJSga3Yh1nty2lrWuX2iqgng0.roa
File: e3cJSga3Yh1nty2lrWuX2iqgng0.roa (raw, json)
Hash identifier: AFKhYb0wa+IlKHS+Ikatf8ZXSb2Bp2nEjl+dIBrFnMk=
Subject key identifier: 7B:77:09:4A:06:B7:62:1D:67:B7:2D:A5:AD:6B:97:DA:2A:A0:9E:0D
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 157826AA
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/e3cJSga3Yh1nty2lrWuX2iqgng0.roa
Signing time: Sat 01 Jan 2022 14:03:41 +0000
ROA not before: Sat 01 Jan 2022 14:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58065
IP address blocks: 192.40.94.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
107.150.75.0/24 maxlen: 24
5.157.6.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
5.157.19.0/24 maxlen: 24
107.150.91.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
5.157.26.0/24 maxlen: 24
107.150.94.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
2a02:5740:14::/48 maxlen: 48
2a02:5740:4::/48 maxlen: 48
2a02:5740:9::/48 maxlen: 48
2a02:5740:10::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360195754 (0x157826aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b77094a06b7621d67b72da5ad6b97da2aa09e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:15:6d:01:eb:db:e9:46:7c:51:5a:50:93:
a5:ca:79:4c:81:68:ba:e0:9f:3f:74:79:8e:c4:a4:
28:88:d3:51:20:76:ec:9f:94:f4:94:8f:1c:48:dd:
c3:ae:cd:9b:3b:c9:18:0b:35:06:df:1c:d7:c9:22:
e8:2e:ad:53:84:21:29:ca:00:c6:5f:28:bd:ff:ad:
e3:b7:bb:4d:ce:8a:6c:45:c6:fd:be:50:bd:d7:47:
6b:7e:c6:54:7a:9a:c4:81:dc:e3:f0:51:04:68:5b:
ca:34:17:e9:18:0f:49:6c:ab:61:15:07:76:70:1a:
bd:ce:82:33:4e:87:2c:1a:52:b1:79:67:d8:01:16:
ab:6c:04:d1:07:27:a3:2d:23:15:31:36:44:3f:9a:
11:22:3c:d9:05:e8:4a:3d:a8:f1:1b:fa:c0:24:f8:
72:ba:76:cb:4b:31:1c:9a:8d:dd:d5:00:09:a9:25:
57:29:f7:a5:fc:ca:b7:02:c0:e9:11:5d:2d:bf:4c:
a8:71:2e:50:9d:77:66:ca:71:08:34:f0:8e:ef:ce:
43:7a:32:ff:8a:33:dc:97:03:65:37:96:1c:de:2f:
14:28:e5:fc:71:ec:0f:fd:0c:39:c3:f9:4e:40:49:
9a:1e:7e:94:1c:d8:bd:3f:84:20:6c:0b:f6:4f:21:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:09:4A:06:B7:62:1D:67:B7:2D:A5:AD:6B:97:DA:2A:A0:9E:0D
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/e3cJSga3Yh1nty2lrWuX2iqgng0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.19.0/24
5.157.21.0/24
5.157.23.0-5.157.24.255
5.157.26.0/24
5.157.29.0/24
5.157.32.0-5.157.34.255
5.157.37.0/24
5.157.41.0/24
5.157.43.0/24
5.157.51.0/24
5.157.53.0/24
5.157.55.0/24
23.92.115.0/24
37.72.186.0/24
104.160.16.0/22
107.150.64.0/23
107.150.67.0/24
107.150.70.0/23
107.150.75.0/24
107.150.88.0/22
107.150.93.0-107.150.94.255
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
192.40.94.0/24
IPv6:
2a02:5740:4::/48
2a02:5740:9::/48
2a02:5740:10::/48
2a02:5740:14::/48
2a02:5740:21::/48
2a02:5740:24::/48
Signature Algorithm: sha256WithRSAEncryption
2c:53:96:33:a2:fa:45:aa:9c:be:ca:77:41:25:0a:c2:b5:34:
f6:4a:24:d9:f7:38:67:5c:be:b9:9e:f5:5d:fc:b8:00:a1:1b:
68:1a:2d:3f:59:c2:ca:fe:84:2b:be:14:f7:8c:b7:f3:16:f2:
fd:1c:e5:20:9f:16:36:78:2c:86:e6:ff:b4:3c:a7:55:bc:40:
c4:12:1b:ab:b9:62:1d:ed:f4:d8:70:d2:89:0f:13:44:10:ee:
fc:6c:a9:c9:64:aa:c4:b4:7a:d4:a7:80:c9:04:6c:e3:2c:18:
c3:3b:c9:72:cb:78:ad:d0:f3:40:91:ac:5d:ee:86:97:0f:57:
5e:4e:58:03:bd:d6:82:af:d3:b9:6e:bb:c2:96:64:5b:8f:7b:
d5:d7:cf:7c:d3:0f:a9:de:0d:78:e3:4c:56:91:c0:b6:4f:cf:
bd:a8:64:f2:47:2d:44:e9:d2:a9:6b:6d:58:2e:41:d3:8e:c6:
74:9d:93:2b:b3:bd:16:77:98:be:eb:88:d2:a0:b4:1c:f8:9d:
c0:7a:ca:ca:9c:7a:ec:f0:73:ac:6e:dd:f0:13:9a:06:0b:1b:
0f:86:e7:16:72:2a:b4:c4:7e:88:87:cb:28:fa:a8:c7:92:ff:
31:ab:e3:18:f7:02:c2:3c:41:e5:6e:f5:eb:b4:f5:ba:9a:d9:
2f:a1:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:05 2025 by rpki-client