Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nEmBjdQ7sfK98oOtswYedi1gfVk.roa
File: nEmBjdQ7sfK98oOtswYedi1gfVk.roa (raw, json)
Hash identifier: YiCU2MqRIHPgNsRklSdtuyO6DHqq7hQimRUrM2Ar7GI=
Subject key identifier: 9C:49:81:8D:D4:3B:B1:F2:BD:F2:83:AD:B3:06:1E:76:2D:60:7D:59
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01957FA7D481300919F9B8B0850EDF0E5EE7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nEmBjdQ7sfK98oOtswYedi1gfVk.roa
Signing time: Mon 10 Mar 2025 10:44:20 +0000
ROA not before: Mon 10 Mar 2025 10:44:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
79.172.196.0/24 maxlen: 24
79.172.199.0/24 maxlen: 24
79.172.203.0/24 maxlen: 24
79.172.209.0/24 maxlen: 24
79.172.211.0/24 maxlen: 24
79.172.213.0/24 maxlen: 24
79.172.216.0/24 maxlen: 24
79.172.225.0/24 maxlen: 24
79.172.236.0/24 maxlen: 24
79.172.238.0/24 maxlen: 24
79.172.240.0/24 maxlen: 24
79.172.241.0/24 maxlen: 24
79.172.243.0/24 maxlen: 24
79.172.248.0/24 maxlen: 24
79.172.253.0/24 maxlen: 24
79.172.255.0/24 maxlen: 24
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.15.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.59.0/24 maxlen: 24
87.229.65.0/24 maxlen: 24
87.229.66.0/24 maxlen: 24
87.229.73.0/24 maxlen: 24
87.229.74.0/23 maxlen: 23
87.229.78.0/24 maxlen: 24
87.229.83.0/24 maxlen: 24
87.229.93.0/24 maxlen: 24
87.229.94.0/24 maxlen: 24
87.229.96.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.113.0/24 maxlen: 24
87.229.114.0/24 maxlen: 24
87.229.116.0/24 maxlen: 24
87.229.118.0/24 maxlen: 24
87.229.121.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
213.181.221.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.52.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
217.144.56.0/21 maxlen: 21
217.144.62.0/24 maxlen: 24
2a02:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:a7:d4:81:30:09:19:f9:b8:b0:85:0e:df:0e:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 10 10:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c49818dd43bb1f2bdf283adb3061e762d607d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:60:f7:89:5a:7b:24:25:20:b1:69:04:20:
28:e6:bf:2d:33:f8:8a:d1:10:40:72:2e:4f:24:12:
d6:85:95:7b:18:00:69:0c:c1:37:42:c5:60:9d:29:
b3:21:1d:6d:e7:ca:94:66:b0:da:d9:f9:15:47:2c:
44:14:f5:59:da:08:e4:ca:38:31:9a:3d:7e:bf:4f:
cb:ac:bf:52:57:a3:05:06:ef:e0:68:f8:8c:dd:d4:
e7:cc:04:df:6f:3d:12:c4:15:c4:20:41:53:cd:2b:
f6:cc:28:db:a4:33:a8:08:7d:31:c4:72:b7:84:a1:
d3:a7:95:9d:ba:96:65:4c:aa:fd:d4:f6:1e:0e:d9:
08:5d:19:6b:31:ca:79:ff:bc:58:ea:73:9e:13:0e:
2f:f5:55:cd:0f:42:fd:31:34:62:e8:df:9b:60:9a:
5d:f8:0a:8a:ec:41:5b:c6:e5:04:f4:73:8a:f3:68:
aa:43:cb:96:cc:5d:c4:68:3c:16:e8:9d:ce:23:c7:
81:14:ca:f3:7b:95:80:4a:3d:9b:87:8c:89:66:64:
ee:b6:da:cb:1f:5e:00:1e:3c:23:f4:39:de:b5:41:
5a:ad:70:e0:0a:d0:68:7f:9b:ed:ff:4f:69:e0:c9:
b9:62:a6:be:b9:a5:75:d5:aa:78:82:56:b9:8b:74:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:81:8D:D4:3B:B1:F2:BD:F2:83:AD:B3:06:1E:76:2D:60:7D:59
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nEmBjdQ7sfK98oOtswYedi1gfVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.15.0/24
87.229.26.0/24
87.229.32.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/23
87.229.65.0-87.229.66.255
87.229.73.0-87.229.75.255
87.229.78.0/24
87.229.83.0/24
87.229.93.0-87.229.94.255
87.229.96.0/24
87.229.105.0/24
87.229.113.0-87.229.114.255
87.229.116.0/24
87.229.118.0/24
87.229.121.0/24
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/24
213.181.207.0/24
213.181.210.0/24
213.181.219.0/24
213.181.221.0/24
217.113.50.0-217.113.53.255
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
217.144.56.0/21
IPv6:
2a02:730::/32
Signature Algorithm: sha256WithRSAEncryption
57:07:90:ea:6c:36:20:31:09:89:a6:e0:f7:d8:1f:b6:98:14:
51:c6:d0:23:c9:79:1b:cd:3d:83:b1:e7:88:6c:d7:d5:5a:09:
5b:ec:24:5f:4f:5d:10:d5:27:26:a5:14:89:2a:61:27:aa:e9:
2f:24:b6:30:16:ad:a8:41:1e:c6:89:41:93:02:c5:38:5d:6f:
d8:17:46:6c:81:80:df:d2:33:d8:f1:48:c0:ef:01:c0:2b:c8:
59:4b:e7:0f:e4:02:26:15:ee:85:e6:ed:15:c4:5f:de:fe:e3:
eb:db:3d:02:ce:48:16:ba:4b:ab:48:20:b0:05:10:68:f8:50:
1a:6a:ef:b5:75:3f:ef:93:93:4d:0a:14:2e:3d:42:54:d4:05:
95:99:9a:2d:72:a4:8a:b9:03:39:75:e1:4c:8f:3c:7a:b2:f5:
22:95:54:a4:e2:4a:30:7a:4b:f1:64:e7:a0:21:44:e3:46:17:
d5:c5:f1:80:40:d6:0a:90:a0:f2:88:c5:9b:fb:f9:02:9a:e3:
1f:49:c0:f1:c4:40:c5:4b:62:0b:58:b4:f1:45:a0:61:9e:fb:
e6:88:7b:8c:e0:99:23:c9:48:44:c3:0d:88:78:24:b4:7d:32:
a0:70:c7:03:f4:b3:08:a1:ce:06:2c:2e:32:2f:b1:9e:48:b0:
d3:d1:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:43 2025 by rpki-client