Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFUpayb43smTaqoTU_JWuigeMgE.roa
File: EFUpayb43smTaqoTU_JWuigeMgE.roa (raw, json)
Hash identifier: FRw1lOUS1H+I9LdqJwD6lO3n4wFa4/oxk9b4ecsJXa4=
Subject key identifier: 10:55:29:6B:26:F8:DE:C9:93:6A:AA:13:53:F2:56:BA:28:1E:32:01
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019325042958A2F51694866C59A96FC9B4AA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFUpayb43smTaqoTU_JWuigeMgE.roa
Signing time: Wed 13 Nov 2024 10:14:09 +0000
ROA not before: Wed 13 Nov 2024 10:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.0.0/24 maxlen: 24
87.229.12.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:04:29:58:a2:f5:16:94:86:6c:59:a9:6f:c9:b4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 13 10:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1055296b26f8dec9936aaa1353f256ba281e3201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:6d:0f:1e:eb:9e:3c:80:58:e9:4d:42:8f:
30:4c:c5:61:99:bd:4c:85:6d:43:65:8a:d7:fd:f3:
7f:cd:37:6c:c6:3d:57:fe:d8:dc:1c:f4:66:e5:80:
c6:f5:45:e7:39:5d:14:14:90:de:c8:c0:0d:89:58:
cf:c3:27:e3:38:12:e8:28:9c:99:cf:25:f3:7a:4b:
bd:09:c3:f0:8b:23:6f:41:62:be:b3:66:8c:be:b4:
46:71:e1:37:12:be:15:8d:de:59:3f:b6:a6:a1:e9:
29:33:8a:43:0d:4f:13:b3:65:2f:e2:d8:fa:a6:bf:
87:a2:31:65:7d:68:e5:27:66:d1:ab:47:c1:a0:7e:
0b:a0:32:19:ed:a2:e1:78:0f:1a:d6:f2:bf:fd:e2:
5d:cb:ae:3e:2f:bb:36:6c:2c:41:32:55:fc:82:5a:
a0:29:1b:88:06:52:df:3b:03:26:36:2d:c5:a1:d9:
eb:a4:6a:19:d6:7b:36:52:bd:cf:71:47:33:af:66:
52:bd:a0:21:7b:f2:25:b5:d9:22:74:89:7d:cb:66:
1a:9f:f2:e9:0a:f1:85:e0:75:9f:50:10:0a:78:4b:
3b:db:bf:96:5a:7a:ef:76:c0:07:e0:6b:01:60:49:
98:1a:51:d3:84:45:55:44:df:a2:4d:1e:99:47:1e:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:29:6B:26:F8:DE:C9:93:6A:AA:13:53:F2:56:BA:28:1E:32:01
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFUpayb43smTaqoTU_JWuigeMgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.0.0/24
87.229.12.0/24
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
3d:e8:8e:a7:f3:66:b1:df:b9:fc:5b:a8:8c:31:73:8e:8b:60:
ce:3a:87:5a:60:56:84:67:12:a0:1d:db:a7:8f:92:c9:28:b3:
6d:04:68:87:a7:9d:23:a7:ff:9b:85:4c:60:30:76:ed:35:29:
a2:e7:ed:3d:7b:2c:95:cf:48:a6:d8:4d:86:7e:b6:cf:27:4f:
72:8f:83:c5:2e:53:f6:2e:3e:61:12:e0:78:8c:78:6c:64:96:
21:23:87:f8:ca:ef:58:f1:87:2c:84:55:58:ad:49:91:03:a4:
9b:7c:10:99:ae:80:ce:50:98:ef:7c:5c:86:70:26:7a:6b:83:
75:d9:23:ca:d4:0f:1d:0d:c9:47:bf:cf:12:e7:47:89:d2:7c:
c6:d2:52:3d:4e:a5:7c:1d:99:26:19:08:97:99:21:c1:06:35:
6a:14:7f:7a:cc:37:44:c3:b4:07:e4:ce:d1:df:d0:d7:88:6e:
31:c7:af:16:dd:91:85:02:66:a9:aa:78:3d:f5:60:3c:cb:3c:
e9:4b:79:5a:7a:62:40:21:e7:ca:6c:9a:38:c6:c0:51:80:01:
78:31:78:af:5f:6d:a8:c3:a8:74:1e:a6:98:73:a3:52:5c:bd:
23:01:46:ba:0b:51:52:52:f4:85:b5:a9:ed:34:a5:5f:07:72:
75:c6:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:57 2025 by rpki-client