Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/eUNZLAFY7V58KzVP3pX1kM8uk3g.roa
File: eUNZLAFY7V58KzVP3pX1kM8uk3g.roa (raw, json)
Hash identifier: QzJqGUT77nwCNE5CAZIhKl9HSWY+02pOC6GAach9iyo=
Subject key identifier: 79:43:59:2C:01:58:ED:5E:7C:2B:35:4F:DE:95:F5:90:CF:2E:93:78
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01857130A0385CCF4E358B6AB05E4D50EF3B
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/eUNZLAFY7V58KzVP3pX1kM8uk3g.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58065
IP address blocks: 192.40.94.0/24 maxlen: 24
151.237.188.0/24 maxlen: 24
37.72.186.0/24 maxlen: 24
107.150.64.0/24 maxlen: 24
107.150.70.0/24 maxlen: 24
107.150.71.0/24 maxlen: 24
107.150.65.0/24 maxlen: 24
107.150.67.0/24 maxlen: 24
5.157.11.0/24 maxlen: 24
107.150.75.0/24 maxlen: 24
5.157.6.0/24 maxlen: 24
104.160.17.0/24 maxlen: 24
104.160.16.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
107.150.90.0/24 maxlen: 24
5.157.24.0/24 maxlen: 24
107.150.88.0/24 maxlen: 24
107.150.89.0/24 maxlen: 24
5.157.19.0/24 maxlen: 24
107.150.91.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
5.157.23.0/24 maxlen: 24
5.157.26.0/24 maxlen: 24
107.150.94.0/24 maxlen: 24
5.157.29.0/24 maxlen: 24
107.150.93.0/24 maxlen: 24
5.157.32.0/24 maxlen: 24
5.157.34.0/24 maxlen: 24
5.157.33.0/24 maxlen: 24
5.157.37.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.43.0/24 maxlen: 24
5.157.51.0/24 maxlen: 24
5.157.53.0/24 maxlen: 24
5.157.55.0/24 maxlen: 24
23.92.115.0/24 maxlen: 24
130.185.153.0/24 maxlen: 24
162.212.168.0/24 maxlen: 24
162.212.170.0/24 maxlen: 24
162.212.172.0/24 maxlen: 24
162.212.169.0/24 maxlen: 24
162.212.171.0/24 maxlen: 24
162.212.173.0/24 maxlen: 24
162.212.175.0/24 maxlen: 24
162.212.174.0/24 maxlen: 24
2a02:5740:14::/48 maxlen: 48
2a02:5740:4::/48 maxlen: 48
2a02:5740:9::/48 maxlen: 48
2a02:5740:10::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a0:38:5c:cf:4e:35:8b:6a:b0:5e:4d:50:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7943592c0158ed5e7c2b354fde95f590cf2e9378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:5a:9f:20:b9:4e:59:5b:8b:9c:8a:d7:c8:
b0:7a:29:f8:cd:7e:58:4d:33:1f:2a:8c:b1:c6:29:
1b:7d:b7:78:c0:4b:91:37:ed:fa:fd:36:83:d6:64:
33:cc:1d:53:7c:ff:4b:74:97:a0:e5:ea:8a:45:85:
bc:25:82:1e:e4:bb:b3:37:cd:76:3f:ca:6e:8c:9e:
a1:7d:a0:7d:95:dd:ed:16:2d:12:3f:0b:ba:a4:b5:
ef:3f:1d:02:72:af:ff:e6:86:5e:7a:f1:40:b5:39:
ee:ec:38:91:43:00:06:c4:f0:f1:39:36:6e:00:a2:
d7:31:ac:70:59:6e:4e:69:c4:78:b7:80:d3:65:2c:
39:26:8a:6b:d5:0a:09:59:c5:d6:2c:23:11:7e:1c:
b9:3f:31:23:06:7c:56:ca:e6:e4:6c:aa:f4:7d:3f:
05:67:2b:d3:3c:f4:94:0e:2f:d9:df:da:d3:6a:3b:
1b:8b:5b:53:74:ee:80:c1:a8:07:01:ae:ac:f5:6c:
bc:f4:0c:d5:37:e9:26:9a:fa:49:f9:12:94:a6:75:
66:ad:80:0a:70:0f:64:0a:da:82:52:bb:2f:c4:ca:
33:9c:4c:97:4d:81:b8:0e:a8:e1:c7:37:37:a4:85:
a8:13:d7:01:32:26:69:1d:5c:69:7f:28:ac:0d:c4:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:43:59:2C:01:58:ED:5E:7C:2B:35:4F:DE:95:F5:90:CF:2E:93:78
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/eUNZLAFY7V58KzVP3pX1kM8uk3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.6.0/24
5.157.11.0/24
5.157.19.0/24
5.157.21.0/24
5.157.23.0-5.157.24.255
5.157.26.0/24
5.157.29.0/24
5.157.32.0-5.157.34.255
5.157.37.0/24
5.157.41.0/24
5.157.43.0/24
5.157.51.0/24
5.157.53.0/24
5.157.55.0/24
23.92.115.0/24
37.72.186.0/24
104.160.16.0/22
107.150.64.0/23
107.150.67.0/24
107.150.70.0/23
107.150.75.0/24
107.150.88.0/22
107.150.93.0-107.150.94.255
130.185.153.0/24
151.237.188.0/24
162.212.168.0/21
192.40.94.0/24
IPv6:
2a02:5740:4::/48
2a02:5740:9::/48
2a02:5740:10::/48
2a02:5740:14::/48
2a02:5740:21::/48
2a02:5740:24::/48
Signature Algorithm: sha256WithRSAEncryption
67:cf:76:62:60:d2:e1:94:9c:1b:d2:38:44:17:98:a0:5a:d0:
14:12:7f:06:30:fe:41:5c:b9:e0:09:24:5d:21:8a:9a:e6:31:
4b:c1:d0:51:34:ff:e8:59:57:c0:30:d8:44:9f:dd:8d:33:5c:
7a:9d:31:ca:48:77:0b:63:24:21:7c:c1:37:c2:28:97:29:8f:
cb:e7:ba:3d:5e:8e:b6:6c:e8:34:eb:2e:21:3d:67:fe:07:5a:
93:df:c9:12:e9:58:11:fb:18:86:2b:5a:bb:86:75:68:10:35:
89:6e:18:d5:0a:bf:f7:55:5b:7c:da:47:e3:0d:27:cb:10:ab:
03:92:26:4b:62:47:e3:5f:87:e9:57:a0:7c:14:95:dc:14:2d:
58:69:f3:47:d0:be:b0:67:0c:f2:d7:0e:a4:cf:08:2d:9c:64:
a6:42:7b:0a:27:f2:52:01:f9:e1:2d:b5:d0:bb:e4:d4:d1:fd:
bf:ed:95:c8:65:4e:14:5e:24:38:e3:d7:6c:0f:4f:85:ee:28:
90:ce:d6:1a:9f:18:4c:1a:9c:cc:f4:a2:a5:8e:0c:d1:fb:12:
68:30:cb:2b:7b:7d:d0:dc:6d:88:0f:f8:41:ab:ac:fe:ad:8d:
48:98:e5:41:ef:2e:df:41:38:e2:0c:c9:29:57:61:36:0b:c0:
46:bc:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:50:28 2025 by rpki-client