Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/W_2O3yytUqqiwfeatjGhgzLoJsU.roa
File: W_2O3yytUqqiwfeatjGhgzLoJsU.roa (raw, json)
Hash identifier: mdynzGwOuMybRvsYmk+mfphVtGQmqhYO3HHdva+b0AQ=
Subject key identifier: 5B:FD:8E:DF:2C:AD:52:AA:A2:C1:F7:9A:B6:31:A1:83:32:E8:26:C5
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01849C55C303E825EAFF269170F41D984B4D
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/W_2O3yytUqqiwfeatjGhgzLoJsU.roa
Signing time: Mon 21 Nov 2022 22:36:16 +0000
ROA not before: Mon 21 Nov 2022 22:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:55:c3:03:e8:25:ea:ff:26:91:70:f4:1d:98:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 21 22:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bfd8edf2cad52aaa2c1f79ab631a18332e826c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:a7:b9:af:56:54:4d:12:53:2f:d4:2d:7c:
4d:69:92:12:db:fd:e5:0e:84:5e:fc:9e:78:24:35:
a9:4a:30:c6:30:f3:25:0f:22:83:22:cb:68:14:71:
cc:dd:60:ba:43:45:d5:9e:44:ab:8f:0d:4b:8d:49:
78:d8:48:88:12:eb:b4:b8:31:24:d6:18:f4:e7:8b:
1a:14:9f:4c:d6:32:21:a7:12:30:99:d7:91:d2:93:
50:dd:b5:e2:1c:5b:d3:50:8c:30:ba:53:a5:2d:24:
cc:23:4b:aa:e7:83:41:e3:a2:fb:96:0a:2e:45:68:
18:dc:20:5a:cb:60:96:09:a7:f6:9e:87:07:27:3e:
e2:87:6f:60:b5:00:44:00:98:47:57:03:3c:38:e4:
38:28:b5:bb:be:7a:d7:74:2e:cc:3f:0f:80:58:0c:
c7:42:0e:c9:82:f1:73:4b:a3:69:02:9b:7e:b4:bf:
5a:45:a7:4f:26:0a:93:99:91:38:a1:5a:b6:88:6f:
dd:0c:48:4a:85:f6:e5:60:93:1a:07:b3:34:85:a1:
82:08:50:b9:91:82:f4:f1:a5:85:c5:70:a6:a7:53:
4c:7d:9d:b8:7f:5d:bb:d1:92:04:66:17:b8:cc:81:
b9:6b:bd:d2:1d:2f:08:72:c9:5e:4c:5f:71:98:a4:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:8E:DF:2C:AD:52:AA:A2:C1:F7:9A:B6:31:A1:83:32:E8:26:C5
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/W_2O3yytUqqiwfeatjGhgzLoJsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.38.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
83:9f:c9:da:a5:d3:4e:49:b8:6a:9c:c8:49:39:6e:ac:34:89:
2d:b7:e4:ea:cb:f6:0a:f3:dd:3f:0f:8b:69:b9:47:13:9c:a8:
9c:cb:f8:4d:41:24:6d:e1:a2:dd:73:7d:ef:a5:8c:84:c7:78:
53:d9:42:39:ff:9a:5f:2a:ad:85:a4:ab:3d:48:b9:ab:ab:b9:
e9:be:8f:50:23:7f:92:c8:e9:61:64:ee:71:d0:bf:33:f0:f1:
a3:f6:88:64:d4:0c:5f:4b:4e:4a:9e:93:9b:49:c2:eb:d9:ab:
30:52:7c:d2:d9:0a:1a:57:e7:59:db:4a:6e:5b:3e:f9:2c:12:
9b:75:de:34:a1:ca:48:02:c3:ff:7c:da:e5:1f:da:e8:3b:2d:
ec:68:08:a9:fc:b2:f8:4b:f4:18:7e:d0:5a:19:3f:ad:61:d9:
7d:5b:f6:af:81:17:6e:2c:eb:21:bc:4f:e9:e5:f2:8d:21:a2:
7e:b3:f1:f4:7c:50:26:d9:2f:7b:6b:16:9d:41:52:73:de:ce:
07:21:b6:33:c6:21:eb:88:c3:a1:2c:54:12:7e:f2:25:ce:56:
da:63:d1:3c:f7:e4:2c:ff:50:c4:15:58:92:7e:6b:fe:cd:e2:
4b:28:02:0e:60:8e:58:80:dd:23:87:77:31:d5:76:fa:e8:9a:
8c:43:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:30 2025 by rpki-client