Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/V--Xpc6cs0kSXaBRUWWDiWnzMMM.roa
File: V--Xpc6cs0kSXaBRUWWDiWnzMMM.roa (raw, json)
Hash identifier: TJDNiND8h0AcafwnRjOSjVFIY0zqyyETkQ9sMlT5cPk=
Subject key identifier: 57:EF:97:A5:CE:9C:B3:49:12:5D:A0:51:51:65:83:89:69:F3:30:C3
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01847B798CA85A337681785C06ECBA78D753
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/V--Xpc6cs0kSXaBRUWWDiWnzMMM.roa
Signing time: Tue 15 Nov 2022 13:27:54 +0000
ROA not before: Tue 15 Nov 2022 13:27:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.140.0/22 maxlen: 22
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:79:8c:a8:5a:33:76:81:78:5c:06:ec:ba:78:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 15 13:27:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57ef97a5ce9cb349125da0515165838969f330c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:d7:cc:24:f1:93:18:3b:a5:97:fe:9a:78:
34:8a:17:88:39:1b:83:29:6c:e9:a3:69:cf:9f:ea:
c8:a3:46:f7:bd:c7:6b:40:d6:62:4e:da:34:7b:14:
db:28:27:0a:73:bd:a4:81:ed:64:7d:42:cc:73:86:
03:4b:40:d2:f2:d3:54:1b:6b:43:a8:8a:7e:33:d8:
1e:ca:1e:08:d2:bf:c0:2b:bf:a5:7f:b4:a2:ab:83:
02:29:04:c7:6f:9d:96:7f:38:1d:a0:b3:ce:da:2a:
48:e5:61:90:65:3b:bf:48:b5:57:e4:12:f0:4b:c1:
10:e4:74:bb:bc:43:2e:80:d8:4c:35:c3:01:1a:67:
e3:74:4c:6f:c1:43:56:d7:d8:72:d7:63:ab:21:5c:
84:ee:72:81:c7:5c:9e:b5:20:55:60:29:8c:52:2f:
c6:67:ef:8c:79:9f:e0:f1:e1:ed:c8:df:bb:00:92:
f4:b8:7e:df:39:8c:18:42:22:dd:5d:e9:96:be:82:
4b:95:ff:b9:2b:52:af:cf:26:93:c3:93:70:2d:dc:
13:d0:a8:22:38:9f:98:93:43:50:71:9a:80:c0:fe:
47:62:f1:40:b6:a6:81:6a:bc:2f:01:dc:9b:76:38:
9e:b7:89:fe:8f:cb:ae:30:bb:07:68:7b:e7:5f:a8:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EF:97:A5:CE:9C:B3:49:12:5D:A0:51:51:65:83:89:69:F3:30:C3
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/V--Xpc6cs0kSXaBRUWWDiWnzMMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.38.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.169.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
39:57:6c:22:81:36:47:89:12:cf:1e:5f:c9:79:41:a1:ea:06:
af:91:9d:19:10:1a:60:81:9a:54:ef:c4:a0:31:ba:f5:aa:64:
3e:d2:2e:a7:6e:47:64:94:9c:6e:22:e8:6d:e5:8e:0b:35:59:
57:aa:ef:a2:c5:07:12:2f:45:3e:39:b2:32:99:2d:1f:f8:e1:
ab:02:8e:f4:7c:5c:c1:e6:21:3d:78:a5:b8:cc:cd:fd:8c:d3:
c4:2e:e7:f5:c4:92:85:f2:5a:6f:c7:c5:6d:00:b7:5f:14:5b:
b8:e2:40:3a:aa:a9:60:9d:22:cf:23:a6:43:41:39:f3:7f:1b:
28:55:39:d7:4a:0a:36:bd:98:1e:15:84:3a:57:56:fa:3c:d7:
18:39:69:b4:de:91:9d:4c:a6:37:d8:09:53:ab:dd:dc:a8:39:
ed:8f:af:a9:2f:94:f7:d2:f8:06:9c:16:61:cf:a6:11:8b:2f:
51:f2:80:45:f7:e1:2e:51:6e:7c:aa:fe:85:73:ec:63:d9:b1:
5c:1d:85:36:e7:7a:8a:4f:42:fc:f7:ed:52:e6:77:86:19:2a:
5a:de:a3:9a:d4:f8:a4:02:77:78:de:d3:b5:f4:e6:da:64:90:
15:55:94:2f:b9:00:24:c2:8e:93:e2:b8:32:6c:8c:e3:fc:19:
c4:b4:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:03 2025 by rpki-client