Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lJK2ogTVVxFJNzZvNfHcqdW3M0w.roa
File: lJK2ogTVVxFJNzZvNfHcqdW3M0w.roa (raw, json)
Hash identifier: H4vovC2skpYehg/1+bUC5zZ9XWZ5kwVDJe8bpnMWIl8=
Subject key identifier: 94:92:B6:A2:04:D5:57:11:49:37:36:6F:35:F1:DC:A9:D5:B7:33:4C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019538B2972E0AE9C6FBE2349BD2B2AB63B0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lJK2ogTVVxFJNzZvNfHcqdW3M0w.roa
Signing time: Mon 24 Feb 2025 16:03:02 +0000
ROA not before: Mon 24 Feb 2025 16:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
77.105.61.0/24 maxlen: 24
79.175.91.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:b2:97:2e:0a:e9:c6:fb:e2:34:9b:d2:b2:ab:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 24 16:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9492b6a204d557114937366f35f1dca9d5b7334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:38:87:cd:7f:bb:60:48:b0:6a:e9:84:c1:
9e:a8:19:73:b4:7f:c7:c2:66:f1:69:62:59:09:fd:
af:80:d3:f1:64:4b:d6:56:80:7d:ce:d0:c5:27:cf:
47:1e:66:da:40:45:50:99:07:bf:23:05:68:a4:d9:
24:20:f4:73:ca:35:9a:1e:42:67:75:72:67:f0:c0:
87:a5:7b:d6:9d:85:d7:94:1b:a7:e6:11:94:9b:ea:
1a:1b:49:a7:2f:88:c4:fc:6d:a4:75:d1:93:95:e7:
18:21:ba:10:86:00:76:ad:22:5b:ec:fe:5b:75:65:
7f:52:07:e2:e5:20:7b:51:8b:e9:61:a7:bc:73:26:
c7:d7:08:57:bc:6c:24:10:62:5e:e1:86:f1:0f:5d:
32:63:65:da:7d:61:ed:0e:d2:34:a6:58:1d:68:05:
f8:f4:c7:38:e9:5d:10:64:0d:83:bc:06:99:d1:96:
b4:64:56:05:42:02:04:0a:c7:e0:4a:cc:c6:76:da:
ce:78:fc:6b:a2:2d:2b:47:7c:c4:5a:30:e4:fa:aa:
e0:00:35:15:3d:f2:4a:05:ec:fc:05:62:57:14:a3:
7a:ca:fa:bc:e2:00:b5:c0:19:80:30:04:50:20:9b:
eb:0d:39:ae:48:ea:f2:ab:26:21:09:8a:12:fc:34:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:92:B6:A2:04:D5:57:11:49:37:36:6F:35:F1:DC:A9:D5:B7:33:4C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lJK2ogTVVxFJNzZvNfHcqdW3M0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
77.105.61.0/24
79.175.91.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f7:2e:97:60:6c:91:8b:5d:b2:00:12:7c:f8:6e:a7:e1:a6:
ab:0b:ac:fd:d3:e3:68:ed:e0:88:8b:76:80:7b:bb:d3:6e:51:
03:7a:90:2c:1e:c1:00:f7:1c:68:66:76:99:47:87:48:ad:f9:
b2:44:16:97:44:ac:14:aa:ea:4c:7c:c9:76:71:7b:9d:f6:3a:
ea:68:ca:4e:42:9a:8d:32:29:ea:83:49:a3:dc:93:0a:64:5a:
21:00:0c:54:cc:c6:74:6b:0c:d7:1d:c5:63:34:e6:1c:be:a5:
b4:d7:90:2e:cd:d0:fd:54:c5:41:d0:42:f6:b6:f0:91:66:2b:
bd:26:9f:1c:52:2a:ff:2a:05:86:f5:2d:de:41:c1:9b:bf:99:
35:0b:bb:47:44:80:c1:15:7e:dc:1c:c0:86:46:46:6d:18:53:
7d:78:f8:0e:81:b2:7d:86:53:c2:95:c9:f5:50:31:78:01:b4:
d2:12:f5:2c:02:0d:a8:ec:85:15:9e:6d:bc:02:95:1d:33:7f:
20:78:d5:c7:7b:db:8e:91:b7:dc:ca:59:78:2d:3c:6e:3d:78:
dd:80:3e:f9:ad:2c:0c:ca:94:93:7a:b6:86:83:a2:02:2f:ea:
73:ab:31:3f:2c:31:9b:00:20:43:38:57:75:16:4a:25:2e:73:
cb:d5:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:58 2025 by rpki-client