Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/VxT65LZX5OJbZTHZNAIInJvh5YE.roa
File: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (raw, json)
Hash identifier: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=
Subject key identifier: 57:14:FA:E4:B6:57:E4:E2:5B:65:31:D9:34:02:08:9C:9B:E1:E5:81
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 019426D9CDB3AD9763BBFFB666295CDD9812
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/VxT65LZX5OJbZTHZNAIInJvh5YE.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34397
IP address blocks: 79.172.128.0/18 maxlen: 18
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.0.0/18 maxlen: 18
88.213.6.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.64.0/21 maxlen: 21
88.213.64.0/22 maxlen: 22
88.213.72.0/21 maxlen: 21
88.213.78.0/24 maxlen: 24
88.213.126.0/23 maxlen: 23
89.4.0.0/15 maxlen: 15
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
93.98.0.0/16 maxlen: 16
93.98.127.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.32.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
212.71.35.0/24 maxlen: 24
212.71.37.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.97.0/24 maxlen: 24
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.117.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.81.0/24 maxlen: 24
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
212.119.93.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.181.190.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.196.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
213.210.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:b3:ad:97:63:bb:ff:b6:66:29:5c:dd:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5714fae4b657e4e25b6531d93402089c9be1e581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:04:aa:a4:b2:c7:d2:8b:c4:a5:5c:1e:63:
0d:00:78:9c:80:e4:e4:de:4f:01:7c:9d:0c:56:ac:
90:80:cf:f4:5e:e0:89:64:5f:e9:3c:61:af:4e:c0:
87:9a:ad:a0:12:8e:70:87:a6:b5:3b:0f:7e:f1:24:
d6:f9:f8:b9:4f:65:f2:4b:2c:63:2a:07:be:d3:b3:
71:75:c7:23:74:da:7a:ed:23:5e:32:b6:0d:fa:a5:
60:e0:fe:ab:b9:83:65:79:ef:3b:83:9e:be:51:1d:
da:89:cf:a4:f1:61:d8:37:58:ee:31:c3:19:df:56:
1f:6c:97:f3:a2:cb:c2:55:03:be:5b:c3:a1:cb:88:
aa:ea:48:cf:0c:9a:93:5b:00:eb:51:8a:ee:8d:7c:
9e:96:b9:9e:74:66:9d:5f:af:ac:6b:ec:7f:23:f6:
50:78:e8:0c:a1:bd:c0:c7:bc:b7:5f:37:aa:3a:15:
78:5f:50:97:08:18:24:b5:ec:cc:61:b6:2d:dc:91:
bc:ce:a2:84:4e:56:3c:4c:af:80:41:e5:7a:8a:ba:
83:47:8c:ab:9a:b3:a3:42:c1:0d:fc:fb:3b:9d:ec:
20:d3:26:0c:2a:b0:5c:bd:c5:1d:9e:8f:6f:3c:a8:
ae:bd:01:44:9a:07:d2:85:48:88:41:0b:58:19:ee:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:FA:E4:B6:57:E4:E2:5B:65:31:D9:34:02:08:9C:9B:E1:E5:81
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/VxT65LZX5OJbZTHZNAIInJvh5YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:7c:21:c9:93:3d:c9:f8:f4:0a:d8:37:54:33:72:e1:a2:95:
73:84:ad:e1:eb:39:89:37:0a:3d:b6:bc:73:9c:78:44:62:db:
af:03:a7:55:24:a1:47:7f:7f:b8:64:fe:27:28:3e:65:60:de:
90:03:fc:40:d6:12:16:88:a1:8d:6d:16:95:ff:8b:e0:6b:e1:
45:8a:be:d6:97:f8:7c:41:bd:f9:a2:e2:1e:83:5c:5c:a7:68:
2b:9d:a3:02:6a:23:66:7f:79:91:09:b0:73:6f:07:2e:2b:75:
0f:63:d5:00:87:7b:1e:61:67:17:1d:08:54:f0:0e:d1:92:62:
7f:ac:69:a6:4b:61:41:ab:97:23:65:60:3b:55:64:d8:3f:e9:
a5:1b:77:71:24:2c:76:87:ce:d3:be:09:47:74:f8:6b:f9:fb:
98:f3:d9:22:f8:f2:e2:46:a7:82:40:86:cb:d0:54:5d:3e:6a:
35:d0:70:91:d3:eb:2a:53:a5:73:b2:5d:a6:0a:a8:f7:d8:97:
b5:6d:2d:47:b9:e9:80:e9:24:7c:27:39:87:d7:58:5d:ba:14:
32:e5:2c:ba:97:8d:84:b7:d6:cf:d9:dd:ef:4f:90:d7:be:cb:
0f:50:ff:06:15:01:9e:b6:05:9c:5c:cf:d5:a6:30:fd:62:75:
45:e5:4e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:02 2025 by rpki-client