Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KB2kmlmDm9ZiDlZnVFvZs0oyPUI.roa
File: KB2kmlmDm9ZiDlZnVFvZs0oyPUI.roa (raw, json)
Hash identifier: GHGcaLMuxI6grXNDzkOMt1nugFeWcrxOYM7JJhCmEy4=
Subject key identifier: 28:1D:A4:9A:59:83:9B:D6:62:0E:56:67:54:5B:D9:B3:4A:32:3D:42
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195B4082F289C2B24739D93B10EDF83BA0E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KB2kmlmDm9ZiDlZnVFvZs0oyPUI.roa
Signing time: Thu 20 Mar 2025 14:49:49 +0000
ROA not before: Thu 20 Mar 2025 14:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.196.0/24 maxlen: 24
79.172.199.0/24 maxlen: 24
79.172.203.0/24 maxlen: 24
79.172.209.0/24 maxlen: 24
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
79.172.216.0/24 maxlen: 24
79.172.225.0/24 maxlen: 24
79.172.236.0/24 maxlen: 24
79.172.238.0/24 maxlen: 24
79.172.240.0/24 maxlen: 24
79.172.241.0/24 maxlen: 24
79.172.243.0/24 maxlen: 24
79.172.248.0/24 maxlen: 24
79.172.253.0/24 maxlen: 24
79.172.255.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.214.0/24 maxlen: 24
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.59.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:08:2f:28:9c:2b:24:73:9d:93:b1:0e:df:83:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 20 14:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=281da49a59839bd6620e5667545bd9b34a323d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:7a:d3:fc:16:0b:14:97:fd:39:17:76:28:
c7:bf:fa:67:d9:c0:48:43:9c:23:43:59:20:01:76:
79:b2:40:8c:44:20:6c:5e:b1:89:65:2f:c7:1a:8c:
55:ca:32:f0:ea:79:c9:a4:5f:ea:40:e3:43:c0:ba:
5f:8a:de:4f:76:c4:2d:bc:e4:2e:0a:4d:89:72:6b:
36:29:1a:41:85:73:bc:ee:d5:b9:0d:72:3a:49:ac:
94:39:21:8e:0c:5c:db:cc:dd:56:17:ff:69:0d:94:
e0:00:4c:c2:ae:97:a0:4d:87:d5:37:9f:cb:9c:af:
c5:05:a6:12:39:72:26:fc:ef:06:c7:19:ee:83:6c:
29:fd:81:e8:03:cd:1e:ad:9b:2b:c3:0d:6b:d1:6e:
3d:b9:56:1a:94:d8:e0:49:26:27:7a:83:13:2e:33:
5d:ea:d8:12:c2:4a:a5:a0:fd:58:15:ec:85:9d:3a:
8c:31:e6:c5:66:5a:e1:26:f4:a5:42:4d:f8:5b:d4:
5b:43:09:7b:34:05:13:c8:72:34:0c:c8:c0:87:b1:
84:d4:b6:86:11:37:60:5d:8a:03:75:ff:7a:9c:22:
44:ed:e7:42:d2:dd:74:8d:ee:66:2c:06:30:f7:05:
61:f7:1d:fb:ff:b9:8c:07:b0:8d:b2:de:7f:8f:67:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:A4:9A:59:83:9B:D6:62:0E:56:67:54:5B:D9:B3:4A:32:3D:42
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KB2kmlmDm9ZiDlZnVFvZs0oyPUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.196.0/24
79.172.199.0/24
79.172.203.0/24
79.172.209.0/24
79.172.211.0/24
79.172.213.0/24
79.172.216.0/24
79.172.225.0/24
79.172.236.0/24
79.172.238.0/24
79.172.240.0/23
79.172.243.0/24
79.172.248.0/24
79.172.253.0/24
79.172.255.0/24
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.59.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
a2:1e:4d:6f:be:80:ac:ba:22:61:ed:39:a3:bb:43:7c:50:39:
73:52:c3:7d:d5:9b:fe:87:f5:b7:0c:1f:25:53:d1:73:3c:54:
63:12:7f:de:33:91:47:e5:9d:bc:3e:4f:38:8e:b6:6b:24:a6:
45:6f:1a:7f:c7:03:42:0c:ef:a3:30:28:41:96:ba:63:68:5f:
1e:3d:c4:5b:28:72:c9:5c:c9:09:22:3b:0b:be:83:4d:cb:38:
0a:6f:b3:da:0a:ac:9b:30:bc:bd:a7:00:74:d9:c0:f3:6e:25:
c6:2c:39:fc:19:4b:1e:87:a0:60:50:f8:76:cb:18:fa:2e:75:
39:f0:db:c4:83:51:9e:37:2d:06:6d:3d:c0:5b:df:ab:16:5e:
82:a0:50:c5:03:87:7e:fa:5a:da:dc:5b:70:db:82:58:fe:18:
ab:78:c4:ad:09:1a:75:c8:31:a5:04:9a:18:8e:0e:b7:43:70:
3b:6b:c2:24:f0:ad:6d:a1:0b:96:1e:7e:65:fa:79:81:2a:13:
87:47:de:04:91:80:50:90:c8:cc:83:f8:f3:7b:c8:e4:97:ff:
1e:6d:f1:9f:61:27:33:fb:b2:a7:46:30:14:d0:af:4e:81:ff:
4b:fb:62:9a:e4:cd:58:89:12:50:90:8f:cd:e6:e4:99:6e:2a:
97:bb:ac:93
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgISAZW0CC8onCskc52TsQ7fg7oOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMzIwMTQ0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODFkYTQ5YTU5ODM5YmQ2NjIwZTU2Njc1NDViZDliMzRhMzIzZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40F60/wWCxSX/TkXdijHv/pn2cBI
Q5wjQ1kgAXZ5skCMRCBsXrGJZS/HGoxVyjLw6nnJpF/qQONDwLpfit5PdsQtvOQu
Ck2Jcms2KRpBhXO87tW5DXI6SayUOSGODFzbzN1WF/9pDZTgAEzCrpegTYfVN5/L
nK/FBaYSOXIm/O8Gxxnug2wp/YHoA80erZsrww1r0W49uVYalNjgSSYneoMTLjNd
6tgSwkqloP1YFeyFnTqMMebFZlrhJvSlQk34W9RbQwl7NAUTyHI0DMjAh7GE1LaG
ETdgXYoDdf96nCJE7edC0t10je5mLAYw9wVh9x37/7mMB7CNst5/j2e7iQIDAQAB
o4IDbjCCA2owHQYDVR0OBBYEFCgdpJpZg5vWYg5WZ1Rb2bNKMj1CMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvS0Iya21sbURtOVppRGxablZGdlpzMG95UFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBggYIKwYBBQUHAQcBAf8EggFxMIIBbTCCAVoEAgABMIIB
UgMEAE+sxAMEAE+sxwMEAE+sywMEAE+s0QMEAE+s0wMEAE+s1QMEAE+s2AMEAE+s
4QMEAE+s7AMEAE+s7gMEAU+s8AMEAE+s8wMEAE+s+AMEAE+s/QMEAE+s/wMEBVQV
AAMEAFflDwMEAFflGgMEAVflIAMEAFflLTAMAwQAV+U1AwQDV+UwAwQBV+U6MAwD
BABX5UEDBABX5UIwDAMEAFflSQMEAlflSAMEAFflTgMEAFflUzAMAwQAV+VdAwQA
V+VeAwQAV+VgAwQAV+VpMAwDBABX5XEDBABX5XIDBABX5XQDBABX5XYDBABX5XkD
BANfisADBASy7tADBADVtcgDBADVtcwDBADVtc8DBADVtdIDBADVtdsDBADVtd0w
DAMEAdlxMgMEAdlxNAMEANlxOwMEANlxPQMEANlxPzAMAwQE2ZAwAwQA2ZAyAwQD
2ZA4MA0EAgACMAcDBQAqAgcwMA0GCSqGSIb3DQEBCwUAA4IBAQCiHk1vvoCsuiJh
7Tmju0N8UDlzUsN91Zv+h/W3DB8lU9FzPFRjEn/eM5FH5Z28Pk84jrZrJKZFbxp/
xwNCDO+jMChBlrpjaF8ePcRbKHLJXMkJIjsLvoNNyzgKb7PaCqybMLy9pwB02cDz
biXGLDn8GUseh6BgUPh2yxj6LnU58NvEg1GeNy0GbT3AW9+rFl6CoFDFA4d++lra
3Ftw24JY/hireMStCRp1yDGlBJoYjg63Q3A7a8Ik8K1toQuWHn5l+nmBKhOHR94E
kYBQkMjMg/jze8jkl/8ebfGfYScz+7KnRjAU0K9Ogf9L+2Ka5M1YiRJQkI/N5uSZ
biqXu6yT
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:18 2025 by rpki-client