Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/r0FM5yUx8SmA2KkXJPkJzZycRZU.roa
File: r0FM5yUx8SmA2KkXJPkJzZycRZU.roa (raw, json)
Hash identifier: SYSZSCX6h66ywH9RwZZtXZZHdyWx5Q4tJekvEzd5sRo=
Subject key identifier: AF:41:4C:E7:25:31:F1:29:80:D8:A9:17:24:F9:09:CD:9C:9C:45:95
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018703A525A1AA1F45F2CD640A1D15405537
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/r0FM5yUx8SmA2KkXJPkJzZycRZU.roa
Signing time: Tue 21 Mar 2023 10:09:27 +0000
ROA not before: Tue 21 Mar 2023 10:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.142.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.34.0/23 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.36.0/22 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:a5:25:a1:aa:1f:45:f2:cd:64:0a:1d:15:40:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 21 10:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af414ce72531f12980d8a91724f909cd9c9c4595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:08:c6:c6:e5:ca:ad:de:cf:a5:28:51:c3:
a0:37:74:ab:42:85:18:93:dd:09:09:6a:e4:2c:d1:
cc:ed:ed:55:d7:4f:03:db:b8:60:6b:a1:16:4b:cd:
d7:a0:60:f8:43:01:0f:ed:50:ca:bb:6c:46:6d:fa:
29:8d:0c:ec:ab:f7:4b:d8:fe:b4:bd:b9:87:84:75:
4a:c1:1e:54:18:2a:a2:c6:94:a3:22:76:85:ab:c6:
48:ac:ec:36:11:2e:df:98:8c:3b:bc:89:1f:ac:9f:
70:9b:c0:c4:8d:dc:fd:85:46:70:a4:7f:26:50:6e:
23:5e:80:bb:1d:85:38:6e:70:f8:b0:87:e7:c5:ee:
08:91:0a:9f:81:b5:8a:a7:ba:7f:83:51:33:51:b1:
d2:91:a5:8d:e2:9d:e9:6e:c7:f3:1d:98:a0:78:7e:
c7:4d:d4:e1:92:3c:a4:5d:bf:c5:e7:ed:f1:16:bc:
12:d1:b0:a3:41:79:36:82:57:26:20:43:05:a2:d6:
f8:66:ff:f4:37:4f:65:4d:19:95:72:28:0d:d4:b7:
61:00:38:23:99:ad:dd:36:4b:2b:65:b2:24:51:fb:
91:34:54:48:c1:3b:c3:c8:c9:95:49:29:d5:d4:c5:
51:7b:ed:c5:98:ca:55:2c:bb:2f:8e:06:0d:f6:8f:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:4C:E7:25:31:F1:29:80:D8:A9:17:24:F9:09:CD:9C:9C:45:95
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/r0FM5yUx8SmA2KkXJPkJzZycRZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.185.255
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
54:1b:b5:5e:d4:d7:23:7d:32:cf:13:2e:6e:ed:ba:32:e3:3b:
0e:66:df:e4:04:38:60:fd:06:e8:8e:9b:19:3c:07:67:b8:bf:
14:2b:07:b8:1e:93:8c:46:e9:ee:3d:db:d1:6e:a2:f0:d8:c8:
c4:6a:da:d9:05:55:7e:f7:9f:83:bd:81:35:0c:09:92:c9:44:
54:7c:98:65:d2:80:be:1e:d1:47:20:9f:dd:fb:86:76:6b:e7:
9b:02:cd:80:b1:86:c8:ed:cd:1f:d1:3f:76:77:d5:ea:2d:db:
49:cd:4b:d0:00:84:6b:04:43:96:a3:82:26:ed:d4:02:0f:b4:
cf:17:a9:65:b5:b9:b0:cb:bb:be:3b:1b:bc:b6:cd:ce:6a:11:
4b:f5:02:be:d0:e3:45:16:d9:9b:4e:2a:33:94:f1:56:81:9a:
7e:72:c3:04:f0:69:b2:2f:49:e4:88:cf:fe:5a:ec:ff:a0:a7:
47:21:c9:1e:57:4b:95:66:c6:2b:32:51:8b:86:06:d5:b8:63:
1e:80:a7:b0:e0:f6:64:0f:e2:38:63:95:73:e9:13:10:c0:25:
f1:2b:66:ed:53:8e:34:e2:96:c2:e9:45:c3:04:bd:70:49:4b:
4c:62:a4:a0:06:b7:b9:8b:55:72:2b:74:40:18:9c:d9:55:8b:
4c:f6:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:00:46 2025 by rpki-client