Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OIGqCW7d42hwPyPoFKsX0Qwoiww.roa
File: OIGqCW7d42hwPyPoFKsX0Qwoiww.roa (raw, json)
Hash identifier: qGpWCLc62Rnnu2t/hlXucylpuJe8jlgaGZEMpZAKihY=
Subject key identifier: 38:81:AA:09:6E:DD:E3:68:70:3F:23:E8:14:AB:17:D1:0C:28:8B:0C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01922E4074E574C299C254DF2DA4A572AAB9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OIGqCW7d42hwPyPoFKsX0Qwoiww.roa
Signing time: Thu 26 Sep 2024 12:13:49 +0000
ROA not before: Thu 26 Sep 2024 12:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.0.0/17 maxlen: 17
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.64.0/19 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.112.0/20 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:40:74:e5:74:c2:99:c2:54:df:2d:a4:a5:72:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 26 12:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3881aa096edde368703f23e814ab17d10c288b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:54:7f:f1:8b:71:68:cd:41:8c:d4:58:ec:
3f:73:94:d7:6e:26:3b:18:1c:bd:e7:d5:4b:fe:60:
ee:2e:c8:0f:b0:f8:3c:67:7c:ae:f8:16:df:40:29:
22:f5:99:0c:4a:90:b9:1d:d9:74:cc:18:22:19:bc:
d9:4e:43:54:11:3a:fe:61:3a:e3:6d:b3:8b:7b:36:
2f:7a:a6:81:f4:a4:47:4d:d4:34:ce:d7:e3:a4:43:
4f:59:ba:14:0e:bd:06:b8:75:7c:71:e3:a7:ae:8f:
49:a4:c5:4f:3c:51:3e:03:e3:2c:57:31:0b:7f:2f:
79:1a:d6:83:63:46:79:c0:80:79:66:72:18:ed:09:
4e:16:a9:8f:36:91:c2:0a:fb:67:cf:d2:1c:ea:66:
da:6b:63:0b:dd:ea:24:c9:d6:7d:44:d8:fa:8e:52:
4f:46:61:18:9e:b7:f5:3f:cb:ad:62:d8:46:82:00:
d6:db:bc:dd:59:34:2c:43:b8:95:01:bc:b2:b6:05:
c3:5f:85:64:ca:a2:37:09:d8:97:10:4a:15:25:ba:
09:91:56:73:3c:9f:28:7a:35:24:bb:f6:dc:57:4d:
7e:29:c0:8d:a3:60:ed:4a:ed:b7:4c:83:24:35:8b:
02:af:27:3e:9b:20:66:25:70:3d:c1:31:b0:6b:d7:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:AA:09:6E:DD:E3:68:70:3F:23:E8:14:AB:17:D1:0C:28:8B:0C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OIGqCW7d42hwPyPoFKsX0Qwoiww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.0.0/17
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
8b:79:be:b5:d1:4a:f6:1d:d7:66:2c:e4:2b:a3:1e:49:95:13:
f2:e8:a9:aa:1c:05:89:99:e3:e1:b6:4f:e9:57:8e:45:6f:c4:
90:1a:17:07:02:5d:4a:23:9b:96:36:75:89:a8:ad:a2:8d:21:
e8:52:2d:00:b7:73:c5:95:2f:4a:de:c3:64:32:ab:64:f7:ba:
0c:35:a3:82:63:72:64:01:b8:1f:c6:ad:af:ac:2a:df:dd:32:
b5:78:28:99:b0:60:33:6a:0d:89:0f:5a:47:c6:53:b8:74:be:
87:3f:aa:cb:12:2b:02:ce:bd:0c:fb:52:90:ba:c1:71:11:d8:
72:f9:d4:30:92:11:e3:79:38:05:58:2d:1e:27:4e:04:c4:c3:
7a:7c:d3:32:6f:3f:8b:69:19:16:df:38:6a:3a:1b:f6:c6:26:
4e:94:35:3b:df:b9:2a:e4:3d:02:f5:bb:94:95:5e:2f:9e:8b:
cf:d8:4a:e5:a4:21:80:ad:bf:ad:4b:3a:79:f5:1d:42:79:f5:
b7:bc:54:37:29:bc:f1:2c:4a:c6:4c:5d:bd:95:65:8b:dd:6b:
88:c3:f2:80:5f:dd:a5:04:a6:ea:73:0c:75:8f:e4:4a:2c:28:
47:33:42:d9:88:e7:e3:4c:22:d0:77:6d:0a:79:7f:d7:c5:f0:
2c:62:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:43 2025 by rpki-client