Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YEpDmVvWqqQEEwrn3bYXyv2zXU0.roa
File: YEpDmVvWqqQEEwrn3bYXyv2zXU0.roa (raw, json)
Hash identifier: SZpJF+QKpEfgUnydHZpAT12qGpgbbZ6ZIZDlwb2vkQw=
Subject key identifier: 60:4A:43:99:5B:D6:AA:A4:04:13:0A:E7:DD:B6:17:CA:FD:B3:5D:4D
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 077D9569
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YEpDmVvWqqQEEwrn3bYXyv2zXU0.roa
Signing time: Sat 01 Jan 2022 00:59:02 +0000
ROA not before: Sat 01 Jan 2022 00:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 178.254.164.0/24 maxlen: 24
178.254.166.0/24 maxlen: 24
178.254.160.0/22 maxlen: 22
178.254.167.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
178.254.174.0/24 maxlen: 24
178.254.173.0/24 maxlen: 24
178.254.185.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
109.111.255.0/24 maxlen: 24
89.23.94.0/23 maxlen: 23
109.111.242.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.251.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
89.23.64.0/24 maxlen: 24
89.23.66.0/23 maxlen: 23
185.157.45.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
185.157.47.0/24 maxlen: 24
89.23.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125670761 (0x77d9569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 00:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=604a43995bd6aaa404130ae7ddb617cafdb35d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:fa:aa:34:62:a9:a0:9c:67:0f:c3:bb:bd:
b1:84:e9:df:47:4f:1a:d3:34:69:99:d0:42:9d:7a:
7f:bd:bf:22:69:b9:0a:f5:b4:45:d6:c6:95:8b:cb:
85:84:54:6d:13:bc:09:c0:95:ef:d8:60:52:b9:d2:
bb:d5:0f:81:80:44:bf:5e:82:46:6a:3c:f1:ea:31:
99:00:09:e8:fe:5b:84:72:f0:9d:bd:d4:94:ea:c9:
fc:e3:ce:48:63:2e:a7:70:0d:78:95:7e:4f:b6:2a:
cb:4e:c1:db:b0:b8:23:a4:b2:2b:e6:48:ff:46:6a:
65:33:c1:d2:ee:ec:a8:b3:31:9e:c2:0e:07:76:e3:
fa:8c:0d:05:bc:b0:7b:98:b6:1f:29:6a:c3:a1:86:
53:d4:bd:fd:a1:a6:be:21:03:3e:97:26:21:31:fc:
cd:ba:00:96:07:9b:8d:6f:fe:63:21:9b:da:4e:8f:
b1:8c:c9:50:40:54:9f:60:28:af:e6:d4:88:2d:36:
b7:5d:62:66:08:5b:a4:a6:34:8c:d4:98:c8:34:30:
cd:41:e7:82:43:ee:55:cb:a9:06:44:fb:e3:b0:77:
14:8a:eb:37:77:01:5b:5d:83:a7:ef:4c:5a:74:98:
56:39:1a:80:94:d7:52:65:b0:0f:a8:be:75:94:21:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:43:99:5B:D6:AA:A4:04:13:0A:E7:DD:B6:17:CA:FD:B3:5D:4D
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YEpDmVvWqqQEEwrn3bYXyv2zXU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.64.0/24
89.23.66.0/23
89.23.72.0/23
89.23.94.0/23
109.111.242.0/24
109.111.247.0/24
109.111.249.0/24
109.111.251.0/24
109.111.255.0/24
178.254.160.0-178.254.164.255
178.254.166.0/23
178.254.173.0-178.254.174.255
178.254.178.0/24
178.254.182.0/24
178.254.185.0/24
185.157.45.0-185.157.47.255
Signature Algorithm: sha256WithRSAEncryption
2c:83:c2:66:09:b1:34:24:0b:a4:ee:95:52:fc:1d:40:7d:85:
34:61:3c:11:3c:00:62:59:90:93:42:ab:9c:02:1b:e4:4d:86:
22:2e:b8:5d:44:1a:70:ef:dc:16:f8:0e:14:fd:19:9a:ad:0a:
71:92:95:e6:86:95:c3:a6:35:2a:b8:87:5d:d8:3b:3f:79:39:
43:75:08:fe:61:62:68:f9:b0:67:04:e5:0c:8f:98:0c:90:4c:
6f:a4:01:e5:f4:30:5a:08:57:72:ed:ad:1e:67:11:19:8d:13:
95:b4:88:04:64:1e:26:a7:2b:de:71:e2:89:ef:1e:04:a2:92:
38:43:5d:2e:41:57:ac:ea:ae:3b:8b:b6:e0:de:14:44:f6:ab:
ae:f9:e2:f6:bc:72:43:65:be:a9:57:a9:f0:58:eb:cf:7c:64:
42:27:d5:dc:81:75:81:83:a8:bc:1a:d4:55:c7:d2:38:4c:21:
68:fe:68:98:92:44:7b:5b:31:3c:61:7d:86:ef:51:0c:dc:28:
e7:9a:b8:6b:00:6f:52:4b:6b:f2:5b:d7:9c:b1:21:cd:01:20:
32:a5:77:2c:e7:28:da:5c:18:a6:6d:74:7a:24:e8:93:c5:4e:
27:1f:5e:f9:b0:b2:4e:21:94:dd:ca:33:2f:e2:25:96:2a:d8:
9e:b2:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:10 2025 by rpki-client