Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa
File: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (raw, json)
Hash identifier: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=
Subject key identifier: 7E:36:76:3B:A5:F5:76:B0:F8:BB:69:10:52:90:92:64:E8:0F:12:04
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019425FD8C895E3A440CFE3E235C356EDC96
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa
Signing time: Thu 02 Jan 2025 07:49:21 +0000
ROA not before: Thu 02 Jan 2025 07:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 37.61.208.0/20 maxlen: 24
37.61.212.0/24 maxlen: 24
37.61.214.0/24 maxlen: 24
37.61.215.0/24 maxlen: 24
37.61.221.0/24 maxlen: 24
37.61.223.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.97.0/24 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.126.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
85.195.75.0/24 maxlen: 24
85.195.76.0/24 maxlen: 24
85.195.82.0/24 maxlen: 24
85.195.83.0/24 maxlen: 24
85.195.85.0/24 maxlen: 24
85.195.86.0/24 maxlen: 24
85.195.88.0/24 maxlen: 24
85.195.89.0/24 maxlen: 24
85.195.90.0/24 maxlen: 24
85.195.91.0/24 maxlen: 24
85.195.92.0/24 maxlen: 24
85.195.93.0/24 maxlen: 24
85.195.95.0/24 maxlen: 24
85.195.96.0/24 maxlen: 24
85.195.98.0/24 maxlen: 24
85.195.99.0/24 maxlen: 24
85.195.100.0/24 maxlen: 24
85.195.102.0/24 maxlen: 24
85.195.103.0/24 maxlen: 24
85.195.107.0/24 maxlen: 24
85.195.109.0/24 maxlen: 24
85.195.110.0/24 maxlen: 24
85.195.114.0/24 maxlen: 24
85.195.115.0/24 maxlen: 24
85.195.116.0/24 maxlen: 24
85.195.119.0/24 maxlen: 24
85.195.120.0/24 maxlen: 24
85.195.124.0/24 maxlen: 24
85.195.127.0/24 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.160.0/19 maxlen: 24
92.204.162.0/24 maxlen: 24
92.204.186.0/24 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
134.119.182.0/24 maxlen: 24
134.119.207.0/24 maxlen: 24
146.0.224.0/19 maxlen: 24
146.0.226.0/24 maxlen: 24
146.0.227.0/24 maxlen: 24
146.0.228.0/24 maxlen: 24
146.0.230.0/24 maxlen: 24
146.0.232.0/24 maxlen: 24
146.0.234.0/24 maxlen: 24
146.0.235.0/24 maxlen: 24
146.0.236.0/24 maxlen: 24
146.0.237.0/24 maxlen: 24
146.0.245.0/24 maxlen: 24
146.0.247.0/24 maxlen: 24
146.0.249.0/24 maxlen: 24
146.0.250.0/24 maxlen: 24
146.0.251.0/24 maxlen: 24
146.0.255.0/24 maxlen: 24
151.106.14.0/24 maxlen: 24
151.106.31.0/24 maxlen: 24
151.106.57.0/24 maxlen: 24
185.19.216.0/22 maxlen: 24
185.19.216.0/24 maxlen: 24
185.19.217.0/24 maxlen: 24
185.19.218.0/24 maxlen: 24
185.19.219.0/24 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.158.0/24 maxlen: 24
185.136.160.0/21 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8c:89:5e:3a:44:0c:fe:3e:23:5c:35:6e:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jan 2 07:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e36763ba5f576b0f8bb691052909264e80f1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:96:e0:94:46:0f:f5:93:42:c0:71:28:da:
8e:78:4c:ea:1a:59:7e:84:a4:d0:fb:ea:5f:ec:74:
a8:dc:26:88:3e:d2:c1:1a:9d:19:34:99:94:d4:75:
b7:31:29:ab:c1:76:b4:8b:99:8c:3d:e3:f9:20:8a:
ee:13:f7:03:df:5d:70:65:15:fc:02:00:19:49:a5:
10:7b:43:fd:84:95:28:0d:3e:99:f4:f7:3a:12:71:
d2:8d:ab:80:bf:31:ff:fc:a0:c6:61:82:cc:7f:cd:
d4:3c:a0:1c:d7:98:d0:06:25:52:c7:13:57:61:6c:
b0:c8:2f:44:8d:c3:f5:f8:c1:fd:e6:83:73:01:b0:
fc:51:50:f7:51:90:86:b2:be:b6:64:82:f1:37:10:
66:5e:c5:58:6f:be:97:40:a0:68:03:7b:e6:50:da:
a5:1f:a6:c7:02:f4:07:dd:64:c8:ce:08:45:5e:92:
bd:8c:06:44:9a:b1:a8:aa:6d:19:58:2a:b3:0c:f4:
fa:d0:a9:c2:6f:1b:90:ff:d3:6a:ca:4c:05:6e:37:
1f:1a:62:f2:bc:0b:e8:e2:ae:b1:b4:cf:b3:39:c7:
03:8d:87:e4:03:dd:fa:d8:55:29:54:41:7b:ad:54:
03:02:df:21:6c:6b:b3:27:a9:b3:fa:43:e6:f8:80:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:76:3B:A5:F5:76:B0:F8:BB:69:10:52:90:92:64:E8:0F:12:04
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
78.138.96.0-78.138.107.255
78.138.126.0/23
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.160.0/19
92.204.194.0/23
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.182.0/24
134.119.207.0/24
146.0.224.0/19
151.106.14.0/24
151.106.31.0/24
151.106.57.0/24
185.19.216.0/22
185.136.156.0-185.136.167.255
Signature Algorithm: sha256WithRSAEncryption
aa:48:23:33:20:b1:17:7e:7e:82:95:eb:86:a5:1e:d6:6b:96:
1d:99:07:9c:7e:64:84:00:6d:28:66:a6:f4:d7:1b:67:c9:d3:
8c:c6:c3:44:68:e3:bb:9b:0a:ba:fa:ab:1a:b1:60:fd:d7:56:
56:ef:08:ee:28:16:c0:ba:a9:ae:58:fd:ad:07:86:8c:fc:f4:
36:36:9f:54:29:1a:64:ed:16:51:45:67:3c:38:1b:e9:43:75:
20:f3:1e:d6:ca:58:90:6b:bc:82:10:9a:cc:77:8a:3a:08:86:
d3:65:2f:ff:38:03:51:40:0d:4e:30:29:c5:93:e0:e4:8b:ad:
63:44:40:e9:1c:25:1a:5e:8e:2e:d9:a2:22:11:fc:5a:a4:f4:
95:70:c4:26:3e:22:60:45:df:28:bb:25:c5:75:06:2e:a2:41:
74:89:12:25:cb:91:5f:d7:ab:45:a0:cf:d4:c5:d6:3f:92:1b:
4d:96:50:93:72:c1:0b:9c:a2:a8:ee:81:4a:47:48:53:b0:a6:
11:81:16:ca:99:95:02:26:ed:dd:a8:e2:22:be:da:69:a5:be:
40:2a:4c:08:c0:df:ec:d9:53:3b:90:af:0c:36:08:34:33:60:
19:5b:7f:94:bf:8c:f6:bd:71:9e:a9:d2:f8:c8:54:c6:d5:e9:
a5:f7:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:39 2025 by rpki-client