Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_ASZiPv7hZdRHPYNayxoSPr5BZI.roa
File: _ASZiPv7hZdRHPYNayxoSPr5BZI.roa (raw, json)
Hash identifier: Ckq+XOCrDSGiAy5WF6l/e8L9omGzxK8ZY92a0XmtBxc=
Subject key identifier: FC:04:99:88:FB:FB:85:97:51:1C:F6:0D:6B:2C:68:48:FA:F9:05:92
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0194941B820491BD0B8BB64E63C74DC6CBFC
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_ASZiPv7hZdRHPYNayxoSPr5BZI.roa
Signing time: Thu 23 Jan 2025 17:00:18 +0000
ROA not before: Thu 23 Jan 2025 17:00:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216271
IP address blocks: 77.95.172.0/24 maxlen: 24
185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:1140::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:1b:82:04:91:bd:0b:8b:b6:4e:63:c7:4d:c6:cb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 23 17:00:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc049988fbfb8597511cf60d6b2c6848faf90592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:f6:62:1f:a9:03:c3:b9:2e:a5:06:87:a3:
a5:4c:2e:9d:65:7e:57:2d:cf:22:c9:39:60:38:8d:
e3:5a:94:23:0c:74:4b:6b:22:77:b9:53:f0:a3:ca:
2d:c7:45:cc:4a:af:f3:a3:e6:fb:34:a5:66:e7:20:
11:89:e2:0c:47:a0:a2:c8:50:8d:c9:c7:be:19:07:
8d:ea:fb:bb:ae:51:27:78:26:ac:95:f7:6c:d4:3f:
d5:d3:f3:a2:1e:0a:2c:94:53:73:ec:3c:db:a0:78:
6c:ba:24:02:e7:c0:c3:78:07:55:a2:10:03:54:25:
5b:d0:0a:c0:ac:3c:e5:55:d0:18:48:17:89:b7:36:
f3:e8:cb:ae:41:4c:86:e9:7d:59:80:a4:25:bd:8e:
d7:27:78:b5:6e:54:0c:b7:7f:59:cc:7b:fe:82:b0:
75:d8:1f:cc:e1:91:86:57:39:d4:2e:44:9a:74:66:
97:ca:68:89:4b:5b:6b:e2:4f:c1:a1:d6:52:27:8c:
7d:a4:4d:4f:4b:0f:1e:98:16:ee:32:33:d9:5e:e4:
03:12:5d:95:b7:8b:ce:5e:ac:6a:bf:cf:1f:f4:04:
f9:f2:f6:0c:0f:9b:96:0b:99:23:bb:23:a4:9c:59:
dd:8c:7f:a8:3a:8b:e1:45:80:1d:91:e2:7a:b2:09:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:99:88:FB:FB:85:97:51:1C:F6:0D:6B:2C:68:48:FA:F9:05:92
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_ASZiPv7hZdRHPYNayxoSPr5BZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.172.0/24
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a0f:e000::/29
2a11:1140::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a11:f140::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
60:21:f9:c6:49:e8:d4:a5:02:ee:49:18:9b:77:44:91:9c:23:
de:14:3f:ba:df:40:e8:ff:c6:9d:a7:7f:22:d9:03:a0:e9:c0:
0e:16:3f:c9:d2:27:86:b0:4c:85:aa:65:d0:fe:7e:06:00:37:
13:cd:25:af:75:26:95:a4:0f:ba:cb:cd:87:13:fa:43:ea:4a:
a7:a5:6f:4a:ef:a7:6e:5d:bf:03:c6:c6:37:f6:b1:71:90:7a:
2b:91:59:1f:c1:18:16:56:9b:a4:04:24:ea:5d:f2:06:f8:64:
3f:a6:ba:47:b6:fa:81:e6:e5:83:c7:50:cf:bf:9c:1f:d1:aa:
41:bb:cf:ca:4e:59:10:51:3e:e6:51:96:0e:1e:14:56:f3:23:
df:dc:9f:bd:ff:f2:46:e8:a2:56:92:b8:2e:30:e9:16:d3:40:
60:00:67:9a:87:b6:14:ae:14:82:38:e3:f0:59:59:59:8d:7e:
17:a5:86:7e:7b:3c:92:c1:9b:30:0b:70:63:bf:45:87:65:2c:
2e:03:24:25:45:be:48:ed:5e:cd:e9:70:2d:74:ef:c6:32:f4:
a7:7f:3b:85:9a:81:a4:e0:24:47:f9:e7:68:95:09:05:76:ed:
ac:e0:13:0d:49:f9:a4:e6:7c:5b:2c:46:75:be:6b:09:5a:3f:
31:f2:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:14 2025 by rpki-client