Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/i9MKvpjRepI8dYh_VvTEXaHKTiY.roa
File: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (raw, json)
Hash identifier: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=
Subject key identifier: 8B:D3:0A:BE:98:D1:7A:92:3C:75:88:7F:56:F4:C4:5D:A1:CA:4E:26
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01956BCEA6ACA6F89BA3CEBC045CDFAC3537
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/i9MKvpjRepI8dYh_VvTEXaHKTiY.roa
Signing time: Thu 06 Mar 2025 14:14:19 +0000
ROA not before: Thu 06 Mar 2025 14:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 79.137.133.0/24 maxlen: 24
79.137.184.0/24 maxlen: 24
79.137.194.0/23 maxlen: 23
79.137.196.0/22 maxlen: 22
79.137.202.0/23 maxlen: 23
79.137.204.0/23 maxlen: 23
79.137.206.0/24 maxlen: 24
79.137.207.0/24 maxlen: 24
79.137.248.0/24 maxlen: 24
85.192.24.0/24 maxlen: 24
85.192.25.0/24 maxlen: 24
85.192.26.0/24 maxlen: 24
85.192.27.0/24 maxlen: 24
85.192.28.0/24 maxlen: 24
85.192.29.0/24 maxlen: 24
85.192.31.0/24 maxlen: 24
85.192.37.0/24 maxlen: 24
85.192.38.0/24 maxlen: 24
85.192.40.0/23 maxlen: 23
85.192.42.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
85.192.60.0/24 maxlen: 24
85.192.61.0/24 maxlen: 24
85.192.63.0/24 maxlen: 24
89.208.96.0/24 maxlen: 24
89.208.97.0/24 maxlen: 24
89.208.103.0/24 maxlen: 24
89.208.104.0/22 maxlen: 22
89.208.113.0/24 maxlen: 24
89.208.137.0/24 maxlen: 24
89.208.142.0/24 maxlen: 24
92.38.240.0/24 maxlen: 24
92.38.241.0/24 maxlen: 24
95.163.152.0/24 maxlen: 24
95.163.153.0/24 maxlen: 24
95.163.176.0/24 maxlen: 24
185.125.100.0/24 maxlen: 24
185.125.101.0/24 maxlen: 24
185.125.102.0/24 maxlen: 24
185.125.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:ce:a6:ac:a6:f8:9b:a3:ce:bc:04:5c:df:ac:35:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Mar 6 14:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bd30abe98d17a923c75887f56f4c45da1ca4e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:66:96:0c:b9:a6:b6:4f:ee:94:b6:75:13:
fd:49:77:10:b6:c1:79:e4:d0:a0:bf:44:07:da:b8:
a9:61:1c:08:09:4e:17:27:ca:06:49:22:8f:2f:54:
59:6a:74:d7:54:c5:70:bc:30:06:60:9e:34:e4:0f:
95:c6:5b:b0:39:51:89:0c:b8:74:e1:60:05:27:f9:
cd:18:82:5d:99:1d:e9:f5:95:86:ea:29:1d:c7:43:
bb:11:ed:13:85:c9:90:2f:31:e1:f0:a0:ef:c6:c0:
a8:3f:6f:1f:54:d5:72:74:65:18:31:3d:18:8d:e6:
c9:db:79:09:47:45:6f:e8:40:bb:42:b3:e6:0c:f8:
12:0f:be:15:aa:37:1a:7c:cf:6f:02:76:76:60:2e:
9f:dd:e3:c2:3a:6b:fd:c4:3b:38:86:df:c7:75:70:
3e:c0:d9:ce:7a:19:91:45:dd:0c:55:2b:26:fe:b3:
16:b1:3b:4f:73:e8:0f:e1:84:cb:d7:40:55:76:a8:
e3:f9:ed:9a:fd:e2:f5:c2:f7:d3:e9:bc:14:28:62:
33:f2:aa:3b:87:4f:42:7e:16:db:d6:b6:0b:86:c5:
4b:b6:9b:6a:74:77:a2:75:f1:15:bb:c4:50:a9:e9:
e0:25:42:13:f7:c0:3d:43:8c:a0:0c:a0:eb:d0:15:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:0A:BE:98:D1:7A:92:3C:75:88:7F:56:F4:C4:5D:A1:CA:4E:26
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/i9MKvpjRepI8dYh_VvTEXaHKTiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.133.0/24
79.137.184.0/24
79.137.194.0-79.137.199.255
79.137.202.0-79.137.207.255
79.137.248.0/24
85.192.24.0-85.192.29.255
85.192.31.0/24
85.192.37.0-85.192.38.255
85.192.40.0-85.192.42.255
85.192.56.0/24
85.192.60.0/23
85.192.63.0/24
89.208.96.0/23
89.208.103.0-89.208.107.255
89.208.113.0/24
89.208.137.0/24
89.208.142.0/24
92.38.240.0/23
95.163.152.0/23
95.163.176.0/24
185.125.100.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c7:5e:bb:74:77:7e:fb:77:cc:f6:b1:16:ac:42:8e:ec:78:
d8:77:31:d3:88:b0:4a:25:21:c9:f7:1d:e5:b0:4a:f0:cb:fa:
22:36:3c:26:58:24:90:db:7e:18:b7:1e:ea:ef:1d:b3:46:f3:
eb:7e:89:b2:c3:17:0c:c2:1f:e2:d3:cc:d8:f1:56:03:03:2e:
5b:25:bd:4a:5f:16:d4:16:53:08:b8:7c:26:a3:4d:c0:44:48:
a2:64:22:22:00:e4:81:7c:7d:5f:54:d4:cd:89:6c:43:a4:16:
2e:70:dc:3c:21:74:2b:1b:e8:26:7c:6a:62:a8:4a:b5:cb:6c:
34:fd:1a:4d:67:db:fc:48:88:71:72:f2:04:75:c4:a6:8b:b4:
af:13:50:ae:72:4d:51:0c:df:de:1e:b3:bc:f6:a5:ad:3b:1d:
82:f2:65:8d:00:02:36:37:20:f8:c0:08:91:38:d4:1b:11:21:
a6:49:22:87:b0:d7:1e:8b:7e:95:28:e6:72:56:15:c8:f6:ba:
21:53:5c:8b:b7:88:59:96:ab:9d:a5:f3:87:3c:01:e3:28:c2:
42:bb:12:dc:a1:fa:55:90:25:b5:63:41:87:38:3b:2f:a2:12:
50:1f:d4:04:d0:3b:0d:6a:20:b7:27:9e:ff:73:5a:d2:67:7f:
7c:83:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:30 2025 by rpki-client