Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5pOsa3MLZFwUCXdteVWkiNz5mmY.roa
File: 5pOsa3MLZFwUCXdteVWkiNz5mmY.roa (raw, json)
Hash identifier: fXBQvJ6yWSPDmUVWzipRsK8vC0NGt34ZxmXAx6AtwQ0=
Subject key identifier: E6:93:AC:6B:73:0B:64:5C:14:09:77:6D:79:55:A4:88:DC:F9:9A:66
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019325BFD8B936C3B51E9F6BC2EA376D18C5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5pOsa3MLZFwUCXdteVWkiNz5mmY.roa
Signing time: Wed 13 Nov 2024 13:39:10 +0000
ROA not before: Wed 13 Nov 2024 13:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:bf:d8:b9:36:c3:b5:1e:9f:6b:c2:ea:37:6d:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 13 13:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e693ac6b730b645c1409776d7955a488dcf99a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:d6:84:8a:69:b8:38:d3:a7:40:10:28:cd:
6d:ab:71:53:c7:cd:d8:60:f5:d6:23:2b:5c:e1:f8:
34:57:30:bb:74:fd:29:0c:eb:09:77:70:ca:96:67:
10:4e:7f:6a:c4:dd:01:bc:54:35:c2:89:3c:0c:a5:
7a:63:ac:53:c7:eb:02:85:54:a6:81:0e:a8:d1:73:
78:50:37:8c:aa:27:a9:62:f8:42:74:b9:8a:63:95:
64:d2:6b:26:e8:13:28:c2:cf:d5:d8:7b:26:f2:71:
3c:fa:99:cc:fc:fe:2e:42:27:be:0d:ae:07:95:a9:
23:60:4c:46:c3:27:36:65:e2:0d:d2:97:ee:b1:d9:
45:2a:a0:2b:e9:8f:c3:d3:6a:c1:50:13:2c:2b:77:
4c:ae:10:6f:8c:1c:2e:e6:ba:ab:a7:43:01:36:0c:
60:72:d1:e2:f0:33:16:f4:f8:00:99:4a:09:1d:66:
e7:1f:c9:4f:52:d0:95:55:44:c2:91:f5:40:2c:a8:
fc:48:f0:f6:55:c8:9c:2b:83:a0:95:82:c3:e2:62:
75:8e:4d:af:ab:df:27:a3:cd:29:c5:97:4c:ee:3a:
a1:f9:7e:96:c8:da:ab:4a:10:63:09:5c:3e:64:1b:
47:8b:7e:9b:e3:89:e4:ed:06:af:4a:ec:df:9c:2d:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:AC:6B:73:0B:64:5C:14:09:77:6D:79:55:A4:88:DC:F9:9A:66
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/5pOsa3MLZFwUCXdteVWkiNz5mmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
8e:5f:4b:30:42:c4:3f:4d:6b:90:7b:1d:26:1c:b0:29:0f:38:
86:df:b4:cc:f2:6b:b8:54:ff:6b:20:e9:9b:c2:30:28:95:3d:
67:ae:05:83:25:54:56:e6:3a:95:dd:69:f2:60:ac:6d:82:ff:
ec:20:13:a8:6d:18:28:01:1d:45:3e:a0:70:6b:8a:45:43:3b:
8d:da:30:cd:ca:73:ae:86:96:39:6f:5f:9f:2b:6a:55:a7:b5:
ec:bf:e1:cb:83:68:cc:43:f7:52:83:04:6d:da:56:8a:9e:00:
24:ad:be:82:0a:6d:53:e1:10:0a:e6:e3:4b:a4:bb:43:61:2e:
de:49:8b:cc:aa:8a:4e:61:b1:78:73:d1:44:ca:fd:1e:f9:fe:
c9:95:db:44:b2:56:38:2e:42:ed:9e:63:d4:84:a8:7a:08:7e:
2f:60:6f:9a:5c:cd:9c:27:9c:12:ec:9f:a2:b9:17:98:1b:e7:
2e:61:39:25:d4:c5:b6:2b:da:21:5f:5e:9b:67:4b:2f:4b:b0:
50:3a:a4:91:32:ad:5c:69:c8:c7:97:f7:8d:7b:2a:7b:05:f7:
89:2e:05:3a:68:fe:c8:27:7f:ea:0e:53:00:b3:1f:e0:2e:48:
f0:37:9e:79:9d:5f:1e:52:42:93:ed:b2:1b:7b:1c:a5:1a:28:
cf:93:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:26 2025 by rpki-client