Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_-OksWvRk8gKDPoCZ1jz4XC_kww.roa
File: _-OksWvRk8gKDPoCZ1jz4XC_kww.roa (raw, json)
Hash identifier: c6za4c+DhEQBfWTtI6kiNI+UQxFXbmCExntWO3Xtwnw=
Subject key identifier: FF:E3:A4:B1:6B:D1:93:C8:0A:0C:FA:02:67:58:F3:E1:70:BF:93:0C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0188EE5919AEB8F92779669D9669E6441AEA
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_-OksWvRk8gKDPoCZ1jz4XC_kww.roa
Signing time: Sat 24 Jun 2023 16:59:56 +0000
ROA not before: Sat 24 Jun 2023 16:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.150.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:59:19:ae:b8:f9:27:79:66:9d:96:69:e6:44:1a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 24 16:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe3a4b16bd193c80a0cfa026758f3e170bf930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:62:ab:38:54:34:b4:61:39:f3:40:26:66:
2f:1c:eb:df:83:9d:52:c5:3b:87:15:5e:40:0a:8d:
36:da:5d:46:e6:6a:51:d4:9b:90:36:86:85:22:d2:
6d:a5:36:75:a7:a8:1e:24:d3:d2:c5:18:69:90:12:
3d:bc:dd:ab:fc:78:0f:d2:76:8e:3f:7a:60:c6:cf:
8e:dd:d9:99:42:33:db:a4:74:fd:bd:13:bc:37:5e:
1d:8a:df:cb:3c:1d:eb:ea:50:3c:16:68:3c:34:e6:
5f:30:73:0d:49:9a:25:18:85:79:4a:4f:6d:55:a2:
3d:96:c4:77:f9:23:1d:d6:2a:75:69:65:d4:96:68:
43:d6:11:27:3c:17:14:f8:1e:12:3e:a0:f3:5b:14:
79:83:9f:1e:25:44:55:e7:fb:90:cc:c9:10:3f:99:
2f:e0:d9:07:3e:b2:be:f2:a3:0f:47:f6:98:9e:54:
6f:00:3e:c2:6b:f9:3f:db:38:4c:6c:4a:04:b5:43:
69:d9:72:75:39:b1:f4:d3:1b:1a:f1:7e:99:9e:c5:
e1:73:b5:e6:2c:03:4e:2e:e2:ec:c9:67:27:d7:51:
56:6d:8f:6a:c3:59:20:9d:6a:0c:9d:3c:db:05:9c:
b4:08:ae:7b:0a:98:7f:18:dd:91:62:00:f2:49:84:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:A4:B1:6B:D1:93:C8:0A:0C:FA:02:67:58:F3:E1:70:BF:93:0C
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_-OksWvRk8gKDPoCZ1jz4XC_kww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/23
45.141.235.0/24
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.205.0-93.152.210.255
93.152.212.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
12:55:7f:bb:13:85:69:f5:4a:eb:4d:78:13:f9:48:03:d9:db:
fd:a7:62:d8:eb:75:31:a6:cb:09:65:14:ee:2d:73:f9:bd:dd:
f5:8e:58:68:85:76:ba:1b:00:b5:de:c5:97:19:36:65:9f:d3:
d4:be:76:6e:7d:3b:c3:b7:ed:5a:70:02:ce:bc:83:0d:c3:3a:
96:c9:76:62:f6:e7:25:b3:45:d1:27:de:29:3a:f3:a2:38:b6:
f9:92:e6:55:5b:ba:93:a8:a4:96:9c:73:4f:4b:b6:01:b4:d2:
7c:e6:bf:a7:5d:d5:ee:5e:62:c4:3c:a6:8d:1c:3e:6c:7a:88:
f2:94:84:de:f9:3b:1d:1e:21:4b:6d:93:63:5b:90:c7:ee:be:
f7:41:c8:97:72:80:c0:02:41:32:35:0b:86:f7:22:50:5b:68:
9e:b8:b5:36:91:12:01:01:6c:d1:16:75:2f:7b:43:7c:ef:e9:
4e:8f:a1:aa:84:1b:e3:3e:a8:f5:31:67:3d:e5:2b:bb:be:99:
c2:07:ce:08:81:1c:01:b5:25:a1:8b:99:e5:fd:09:10:46:97:
60:ee:3b:48:6e:a5:3d:a0:e7:78:8b:56:ed:57:58:26:46:bf:
ed:ed:36:08:5b:5e:3e:83:95:b2:86:e4:9d:41:ca:41:f1:6c:
a0:21:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:26:10 2025 by rpki-client