Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_RL3y4grT3Jbop3KufY8oxgGet8.roa
File: _RL3y4grT3Jbop3KufY8oxgGet8.roa (raw, json)
Hash identifier: aMCDlVM03bC/PWh5TyuQIK/WQKogLpv79S7Ri0Nt/UQ=
Subject key identifier: FD:12:F7:CB:88:2B:4F:72:5B:A2:9D:CA:B9:F6:3C:A3:18:06:7A:DF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827B82B5113FBA4A4C85D9D72E30549
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_RL3y4grT3Jbop3KufY8oxgGet8.roa
Signing time: Thu 02 Jan 2025 17:54:39 +0000
ROA not before: Thu 02 Jan 2025 17:54:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b8:2b:51:13:fb:a4:a4:c8:5d:9d:72:e3:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd12f7cb882b4f725ba29dcab9f63ca318067adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:46:45:ee:40:56:d1:f5:37:97:83:9f:8c:
46:20:8d:10:67:da:f5:a5:c9:bf:98:0b:91:29:4e:
1f:1f:b5:b9:eb:af:b8:8f:cf:71:1d:20:37:20:c0:
90:40:92:a4:25:5e:fe:7f:f1:fd:2d:3d:44:9a:4f:
bf:ff:b1:aa:ec:32:34:8e:1c:29:66:4f:bd:d9:7b:
d3:73:84:8c:1a:f7:13:1a:38:05:f7:a8:7b:f0:af:
31:d9:86:91:11:ac:95:8f:0e:0d:3a:7d:0b:08:50:
76:41:4d:59:32:77:69:1e:2e:e4:3f:89:fd:17:a1:
c2:68:a1:0c:8f:f1:da:b4:45:08:e3:fb:bc:db:20:
fb:ba:18:32:96:5a:77:08:82:6a:de:f4:ec:86:79:
38:99:d1:b2:77:8d:18:33:9e:44:56:03:cb:fb:e5:
82:81:34:0d:44:32:64:60:eb:55:57:c3:a8:3f:28:
ae:55:f9:91:2a:53:13:88:c0:81:7f:25:5c:f6:9b:
14:90:0d:2c:19:f8:70:b7:76:4d:05:81:16:23:ce:
fe:7b:0f:0d:64:34:31:34:20:9f:f2:89:27:87:47:
29:5e:23:ed:96:46:0a:71:fc:48:95:33:52:24:8f:
de:46:b8:6d:cd:d0:b8:01:bb:79:ba:89:c1:f5:96:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:F7:CB:88:2B:4F:72:5B:A2:9D:CA:B9:F6:3C:A3:18:06:7A:DF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/_RL3y4grT3Jbop3KufY8oxgGet8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
14:59:97:4b:d7:25:71:f7:0f:4a:54:79:86:99:97:67:17:15:
b4:09:2f:27:39:cc:2c:d8:7d:9c:d3:81:7c:6a:42:a8:37:a6:
81:b3:01:ee:1e:22:f7:11:af:f9:56:91:35:e9:b9:d7:a4:69:
51:ed:69:78:67:58:40:2d:c6:e2:f5:92:05:f0:96:6a:24:14:
e1:c0:33:99:18:78:b8:a2:8e:2e:93:c6:f7:ab:4e:45:0a:f5:
15:48:af:05:c8:13:f1:ef:13:40:38:ab:b1:c3:7e:69:bd:6d:
7e:b7:9b:c3:89:61:1e:4e:39:ab:15:88:bf:dc:ac:98:52:cc:
fb:be:d8:bc:9b:55:f6:7d:70:2d:41:9e:59:4a:c2:d6:fa:bf:
3c:3f:47:bb:90:5d:9d:cb:ab:48:0c:e3:9a:1a:be:b8:f1:66:
5a:20:b7:9a:f6:44:f2:2f:e0:a4:48:30:ad:1c:02:8f:3a:fb:
25:86:da:93:68:13:96:33:16:6e:82:6a:10:d9:71:df:e2:9c:
f2:96:1f:af:d9:54:66:21:9a:17:fa:c0:ee:71:47:c6:af:70:
6d:42:f5:b0:e0:96:27:45:9c:fe:6a:1a:c4:04:6d:0d:47:be:
d8:d2:a5:e1:e5:87:2c:32:32:8e:6b:01:ea:e9:04:9b:cb:54:
a2:5b:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:14 2025 by rpki-client