Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U2fFS5KO-Pc40Ly5-jElaXBID_0.roa
File: U2fFS5KO-Pc40Ly5-jElaXBID_0.roa (raw, json)
Hash identifier: F9WhAyTRn7ypDIubaTdXVgJ/AJothxNcVTBtrRdeb6w=
Subject key identifier: 53:67:C5:4B:92:8E:F8:F7:38:D0:BC:B9:FA:31:25:69:70:48:0F:FD
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01922ECB9DB09BD63DAC3DE18FA884671CDF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U2fFS5KO-Pc40Ly5-jElaXBID_0.roa
Signing time: Thu 26 Sep 2024 14:45:48 +0000
ROA not before: Thu 26 Sep 2024 14:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.64.0/19 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.112.0/20 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:cb:9d:b0:9b:d6:3d:ac:3d:e1:8f:a8:84:67:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 26 14:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5367c54b928ef8f738d0bcb9fa31256970480ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:6c:70:97:63:d5:22:73:8a:c4:93:ea:fd:
c9:22:ac:7b:6f:7e:5d:6b:cd:71:a9:16:e6:b9:64:
0e:b1:43:54:91:55:6d:c7:f6:75:15:21:4b:36:4b:
ee:fd:6b:b0:4c:bd:a3:03:eb:7f:30:f2:86:cf:05:
e2:9a:5e:3a:dd:1b:05:57:d4:f9:14:57:a4:84:d9:
b0:b7:7d:7d:23:0e:7d:31:98:fc:47:67:ca:3e:fc:
d2:cc:d2:6f:9a:97:93:b3:1a:e9:6c:47:8c:ba:16:
80:09:a0:2f:09:6e:48:4d:c6:80:ae:2f:70:a4:22:
c0:16:4e:bd:90:49:61:fb:72:64:ef:d4:d1:e2:54:
13:6b:5f:3d:30:34:69:d5:f9:7a:50:f5:92:f0:7c:
e8:27:af:61:be:4c:dc:5a:a0:b5:f5:76:29:98:63:
b6:52:a5:52:68:e9:ea:e3:62:71:56:50:cc:24:c7:
fc:51:17:36:5e:1c:33:e0:40:8b:0d:1d:7e:d0:3c:
a6:67:fd:51:ec:0a:ab:e0:ae:5d:12:99:69:b6:49:
5b:07:f3:72:ab:c1:65:e5:d7:db:5a:6e:16:dc:57:
5e:7a:75:b2:b4:b1:2d:e0:26:9c:44:24:5a:49:a4:
12:34:cf:60:df:c4:5d:1e:e5:45:58:84:ac:40:43:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:67:C5:4B:92:8E:F8:F7:38:D0:BC:B9:FA:31:25:69:70:48:0F:FD
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U2fFS5KO-Pc40Ly5-jElaXBID_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.64.0-87.229.96.255
87.229.105.0/24
87.229.112.0/20
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
85:7e:6c:1a:ad:9b:f5:0b:4f:5b:d3:5a:28:fd:61:81:db:b0:
ea:04:86:db:4f:7f:06:89:75:83:08:58:4d:08:76:a9:5b:4a:
aa:fc:c3:7d:18:75:46:06:aa:4a:b4:67:88:a9:5a:af:35:ff:
52:92:e2:c9:0c:2f:9c:c2:11:2c:ca:fe:f4:d6:97:24:ef:a0:
61:a5:4e:8d:d0:c4:9a:b3:a1:8d:08:c1:81:ce:7e:be:76:18:
55:1d:c8:c6:63:d6:ec:9d:c1:00:82:63:47:9b:3a:45:36:11:
65:f2:bf:41:66:cc:90:d6:3c:9c:22:a3:7c:e9:cd:37:a0:59:
db:b4:0e:a5:28:ab:f3:ab:d3:21:dd:d6:28:98:74:01:9e:2f:
69:f9:5e:19:69:0a:bb:34:29:dd:d9:4b:c3:61:1b:ff:a0:13:
e0:96:ff:62:07:b1:c1:55:25:8c:a6:95:5d:63:b4:3f:b9:33:
bc:10:f9:45:fa:4e:91:9f:bd:90:c0:d7:2e:47:a8:b1:60:41:
8c:24:1c:be:0c:3f:6f:9d:9c:a9:51:9f:57:4b:d8:32:ae:73:
5c:a9:df:82:4e:fb:89:a7:40:80:98:e5:bf:9f:7b:93:68:ce:
9b:f1:04:44:fb:c6:61:d0:05:93:21:d3:83:d0:d1:a7:6c:8c:
ca:61:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:28 2025 by rpki-client