Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa
File: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (raw, json)
Hash identifier: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=
Subject key identifier: 81:8E:D9:1A:F3:F3:A0:7F:82:5F:D1:9E:51:24:F3:6A:A4:17:A2:F6
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 0194244587B7406E2D38506BB163E633C5CE
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39737
IP address blocks: 77.93.160.0/23 maxlen: 23
77.93.162.0/24 maxlen: 24
77.93.164.0/22 maxlen: 22
77.93.168.0/22 maxlen: 22
77.93.176.0/20 maxlen: 20
86.105.181.0/24 maxlen: 24
86.107.183.0/24 maxlen: 24
87.243.0.0/21 maxlen: 21
89.18.0.0/20 maxlen: 20
89.18.0.0/21 maxlen: 21
89.18.0.0/24 maxlen: 24
89.18.1.0/24 maxlen: 24
89.18.2.0/24 maxlen: 24
89.18.3.0/24 maxlen: 24
89.18.4.0/24 maxlen: 24
89.18.5.0/24 maxlen: 24
89.18.6.0/24 maxlen: 24
89.18.7.0/24 maxlen: 24
89.18.8.0/24 maxlen: 24
89.18.9.0/24 maxlen: 24
89.18.10.0/24 maxlen: 24
89.18.11.0/24 maxlen: 24
89.18.12.0/24 maxlen: 24
89.18.13.0/24 maxlen: 24
89.18.14.0/24 maxlen: 24
89.18.15.0/24 maxlen: 24
89.18.31.0/24 maxlen: 24
89.34.72.0/23 maxlen: 23
89.35.74.0/23 maxlen: 23
89.37.120.0/21 maxlen: 21
89.38.140.0/22 maxlen: 22
89.43.193.0/24 maxlen: 24
89.44.232.0/22 maxlen: 22
89.46.160.0/22 maxlen: 22
89.47.224.0/21 maxlen: 21
92.55.131.0/24 maxlen: 24
92.55.132.0/24 maxlen: 24
92.55.134.0/24 maxlen: 24
92.55.135.0/24 maxlen: 24
92.55.144.0/21 maxlen: 21
92.55.152.0/24 maxlen: 24
92.55.153.0/24 maxlen: 24
92.55.154.0/24 maxlen: 24
94.177.32.0/21 maxlen: 21
94.177.40.0/21 maxlen: 21
188.247.129.0/24 maxlen: 24
188.247.132.0/23 maxlen: 23
188.247.226.0/23 maxlen: 23
188.247.238.0/24 maxlen: 24
188.247.239.0/24 maxlen: 24
188.247.240.0/21 maxlen: 21
188.247.248.0/21 maxlen: 21
188.247.252.0/22 maxlen: 22
193.58.243.0/24 maxlen: 24
193.254.242.0/23 maxlen: 23
194.102.221.0/24 maxlen: 24
195.20.145.0/24 maxlen: 24
2a00:1480::/48 maxlen: 48
2a00:1480:1::/48 maxlen: 48
2a00:1480:5::/48 maxlen: 48
2a00:1480:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:87:b7:40:6e:2d:38:50:6b:b1:63:e6:33:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=818ed91af3f3a07f825fd19e5124f36aa417a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:16:a0:aa:89:55:6f:a6:7c:9e:e2:3a:28:
b8:3f:a9:11:95:0b:b1:f5:ed:74:b2:47:95:e2:48:
83:f7:42:8c:e7:cb:5f:10:a5:e1:e0:33:e2:b9:64:
54:a8:70:3a:5f:0c:8f:62:0f:0b:06:06:10:b0:f5:
0e:77:75:f7:0f:49:a8:60:ce:04:6b:82:dd:29:ec:
05:e1:49:a3:3e:e1:e2:9f:3a:5e:b6:31:00:f1:fb:
b5:00:ef:40:42:7e:8b:62:4f:60:52:b4:ca:33:fd:
3d:93:86:5f:b7:c5:18:64:46:9e:61:49:d9:6c:85:
a6:5f:23:54:36:03:01:db:6f:ed:ae:bf:75:9b:9e:
cd:75:9f:cf:f5:af:cb:32:b0:c1:a7:00:73:e0:3f:
15:95:c4:e8:ea:5d:30:4d:4f:77:7f:f3:1a:73:1f:
fb:83:8e:b6:98:01:22:14:18:3e:2b:75:15:52:00:
95:ee:fb:2a:a1:cb:a5:7d:2a:bd:94:93:c9:10:4d:
b5:d7:0b:99:69:54:98:68:7b:fe:c4:7d:ba:57:cb:
c7:f6:9c:e7:99:68:3a:b0:d8:16:30:33:d2:11:07:
65:67:4c:17:72:c9:1c:ef:54:1f:93:aa:5d:1b:ca:
f9:52:8b:52:c9:69:c3:cd:b7:b3:fe:94:ce:77:06:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:D9:1A:F3:F3:A0:7F:82:5F:D1:9E:51:24:F3:6A:A4:17:A2:F6
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.160.0-77.93.162.255
77.93.164.0-77.93.171.255
77.93.176.0/20
86.105.181.0/24
86.107.183.0/24
87.243.0.0/21
89.18.0.0/20
89.18.31.0/24
89.34.72.0/23
89.35.74.0/23
89.37.120.0/21
89.38.140.0/22
89.43.193.0/24
89.44.232.0/22
89.46.160.0/22
89.47.224.0/21
92.55.131.0-92.55.132.255
92.55.134.0/23
92.55.144.0-92.55.154.255
94.177.32.0/20
188.247.129.0/24
188.247.132.0/23
188.247.226.0/23
188.247.238.0-188.247.255.255
193.58.243.0/24
193.254.242.0/23
194.102.221.0/24
195.20.145.0/24
IPv6:
2a00:1480::/47
2a00:1480:5::-2a00:1480:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:7f:db:37:46:19:29:02:ca:d7:24:39:fc:1f:56:3b:c7:fd:
58:07:24:21:8b:87:1f:85:f7:e9:c8:88:05:6e:90:58:6c:ed:
42:8a:14:e6:14:41:31:1e:0b:d3:4d:18:3b:f9:33:a4:8b:57:
93:b8:df:d4:cf:af:18:00:60:56:da:e3:80:85:13:0f:6a:2f:
15:c8:eb:94:9a:40:c1:cb:23:0d:94:76:b3:d9:1f:c0:f6:ec:
65:67:ea:18:73:60:0f:6e:fa:b9:74:86:59:f0:23:d3:cc:37:
05:25:f3:8a:7a:4e:75:cf:00:51:af:6d:e6:44:1f:87:38:c5:
34:30:c4:be:06:6d:53:37:ba:76:d1:9d:b2:1c:a9:c5:4a:29:
90:58:ef:c6:f5:bf:84:a0:ad:f2:83:19:35:ee:4e:22:f2:1f:
a7:fa:e7:27:21:a7:87:bd:14:51:14:73:8c:36:21:ad:8f:5a:
ce:41:3d:93:3c:b1:2d:76:e1:ad:fc:52:17:00:00:f5:b0:06:
8c:f4:c9:a8:4c:0c:cc:63:55:92:f7:28:65:22:60:eb:89:af:
1c:3a:bc:79:0c:63:ef:66:b9:30:88:fc:d9:d7:72:b8:f9:35:
bb:6b:9f:6a:ca:2a:a4:2e:7a:91:97:6e:83:ba:d7:e4:af:36:
5e:24:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:46 2025 by rpki-client