Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lB7340zFnhCJ5jM9jpgqtd8HFDM.roa
File: lB7340zFnhCJ5jM9jpgqtd8HFDM.roa (raw, json)
Hash identifier: Di2e6lPSI/T3KouTlBQsAKt4U1LxrIeXXUeNgN55Yr8=
Subject key identifier: 94:1E:F7:E3:4C:C5:9E:10:89:E6:33:3D:8E:98:2A:B5:DF:07:14:33
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0186E0B9F0A488F0C1983912F4DE32BBAFF8
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lB7340zFnhCJ5jM9jpgqtd8HFDM.roa
Signing time: Tue 14 Mar 2023 15:25:27 +0000
ROA not before: Tue 14 Mar 2023 15:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.142.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.34.0/23 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.36.0/22 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:b9:f0:a4:88:f0:c1:98:39:12:f4:de:32:bb:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 14 15:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=941ef7e34cc59e1089e6333d8e982ab5df071433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:c0:e2:04:d5:f6:a0:20:d3:6a:71:71:3d:
81:e4:82:96:14:ef:b2:bb:e3:7e:01:c4:41:17:93:
b8:13:4d:f5:73:4f:a9:51:9e:f8:d5:dd:4d:99:b7:
30:5c:1d:f0:64:bb:93:dc:9a:68:04:e7:d4:14:b1:
9d:44:db:6e:7b:83:da:6d:b0:fd:70:8b:a7:68:d3:
68:b0:7e:b1:ea:93:96:0f:9a:58:4e:9c:c4:b5:27:
7c:18:79:32:03:a3:2f:de:70:11:d6:50:f4:91:e7:
13:1f:11:80:6b:20:c9:00:b6:88:ab:30:49:d5:cd:
fb:0b:e1:aa:dd:03:50:95:b4:fc:48:75:e8:a9:24:
9f:e3:b0:45:4f:ca:2c:b0:fc:90:82:5f:01:fc:3b:
ac:9d:85:b9:4a:99:29:cb:30:cd:9c:32:46:4e:d9:
6e:73:03:58:3d:ba:64:81:46:ab:8d:3e:bd:8c:c6:
90:45:35:87:c4:6a:21:45:c2:1d:a3:53:ad:bc:58:
94:15:7f:e3:5d:ce:b3:0c:98:0c:09:08:8f:c8:20:
d3:92:a3:98:fe:35:66:94:d2:77:23:d6:e9:9e:17:
38:0c:f5:a4:c8:2a:a4:e6:e3:48:61:e6:71:0b:ec:
a9:c0:fc:d5:18:2a:a0:98:bf:25:89:6f:2e:b5:02:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:F7:E3:4C:C5:9E:10:89:E6:33:3D:8E:98:2A:B5:DF:07:14:33
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lB7340zFnhCJ5jM9jpgqtd8HFDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.185.255
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
6d:32:0b:52:8a:b1:f3:4b:70:3f:0e:2e:81:6a:97:c6:65:cd:
c3:3c:ca:10:cd:c5:ad:94:24:22:a7:d0:85:28:21:70:f5:a2:
72:38:85:3f:dd:62:25:fe:28:05:9f:ef:49:3d:a6:c9:69:6f:
40:90:fe:44:d5:6e:38:6f:10:87:09:3f:c4:9f:7c:09:dc:54:
cf:8b:b1:66:80:cd:c6:9b:ac:fa:60:16:34:30:0f:bd:ea:3e:
17:ed:6e:5a:59:5e:10:b6:cd:07:96:b5:8f:36:3f:1a:90:a5:
dc:18:20:fa:13:ca:61:a2:62:da:bd:58:50:d1:7a:33:0a:7f:
87:1d:e6:7c:d0:5c:8f:84:25:64:8a:bf:31:8f:bb:e3:c7:c1:
86:35:0b:6a:63:5e:23:66:c5:85:a4:04:94:7a:15:c2:d7:55:
99:b8:1d:a0:84:68:cd:5c:67:29:f7:f3:9a:4d:69:65:e6:cf:
05:65:15:fa:5c:a6:ba:2c:35:a0:45:a7:65:b7:a2:0d:7b:6d:
cd:6b:eb:9c:6a:eb:8e:6c:45:17:35:a9:e1:77:6a:94:e2:8b:
73:8f:38:0c:ba:15:cf:0d:94:e8:82:5c:0b:59:7e:a4:c1:9a:
64:98:4d:1b:6b:a4:0a:45:52:cc:f7:80:c4:c3:8b:e4:68:ba:
31:a4:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:51:39 2025 by rpki-client