Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa
File: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (raw, json)
Hash identifier: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=
Subject key identifier: ED:F5:28:FA:81:94:C9:19:FD:FB:D0:0D:77:22:CB:57:82:00:13:3B
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 01942144494E91F77D31BF838314B1433A10
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60664
IP address blocks: 145.14.130.0/24 maxlen: 24
147.75.144.0/20 maxlen: 24
153.92.64.0/24 maxlen: 24
153.92.65.0/24 maxlen: 24
153.92.66.0/24 maxlen: 24
153.92.67.0/24 maxlen: 24
153.92.68.0/24 maxlen: 24
153.92.69.0/24 maxlen: 24
153.92.70.0/24 maxlen: 24
153.92.71.0/24 maxlen: 24
153.92.124.0/24 maxlen: 24
153.92.160.0/24 maxlen: 24
153.92.161.0/24 maxlen: 24
153.92.162.0/24 maxlen: 24
153.92.163.0/24 maxlen: 24
153.92.164.0/24 maxlen: 24
153.92.165.0/24 maxlen: 24
153.92.166.0/24 maxlen: 24
153.92.167.0/24 maxlen: 24
153.92.168.0/24 maxlen: 24
153.92.169.0/24 maxlen: 24
153.92.170.0/24 maxlen: 24
153.92.171.0/24 maxlen: 24
153.92.172.0/24 maxlen: 24
153.92.173.0/24 maxlen: 24
153.92.174.0/24 maxlen: 24
153.92.175.0/24 maxlen: 24
157.97.76.0/23 maxlen: 23
157.97.78.0/23 maxlen: 23
157.180.192.0/24 maxlen: 24
157.180.193.0/24 maxlen: 24
157.180.194.0/24 maxlen: 24
157.180.195.0/24 maxlen: 24
157.180.196.0/23 maxlen: 23
157.180.196.0/24 maxlen: 24
157.180.197.0/24 maxlen: 24
157.180.198.0/23 maxlen: 23
157.180.198.0/24 maxlen: 24
157.180.199.0/24 maxlen: 24
158.220.64.0/21 maxlen: 24
185.27.180.0/23 maxlen: 23
185.27.180.0/24 maxlen: 24
185.27.181.0/24 maxlen: 24
185.27.182.0/23 maxlen: 23
185.27.182.0/24 maxlen: 24
185.27.183.0/24 maxlen: 24
185.74.64.0/23 maxlen: 23
185.74.64.0/24 maxlen: 24
185.74.65.0/24 maxlen: 24
185.74.66.0/23 maxlen: 23
185.74.66.0/24 maxlen: 24
185.74.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:49:4e:91:f7:7d:31:bf:83:83:14:b1:43:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf528fa8194c919fdfbd00d7722cb578200133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:02:bd:fc:7c:1e:3b:24:93:d0:fd:d8:42:
ee:d5:86:11:63:38:b7:cd:92:8b:be:14:e8:52:80:
a4:09:50:97:84:84:8d:20:60:25:4d:fc:1f:08:cf:
c5:4a:d5:00:a8:bd:4e:08:08:b5:c6:b7:f1:db:50:
7d:41:da:a3:88:91:e0:a3:5a:1c:8f:99:ca:76:8e:
3a:db:5f:6a:c8:34:35:db:ab:c9:7f:5a:ff:2b:11:
8f:f9:4d:82:89:b0:96:bc:0e:cd:5f:7f:3e:4b:0c:
06:cb:90:81:a2:6b:a7:1d:84:87:b9:a1:e1:7f:74:
26:01:2b:e9:8b:ba:f7:a6:45:59:87:0e:52:59:71:
d5:b2:db:40:c7:a8:bb:b9:93:04:50:5b:44:5e:c9:
c4:a0:1b:36:b9:e9:d7:09:ef:16:1a:de:69:62:aa:
98:d1:cb:90:4e:71:74:85:39:ca:c2:bf:4f:34:b3:
fa:7a:4f:c2:39:ba:83:be:5d:84:7f:58:72:50:e5:
c0:dd:77:ed:fb:77:88:f7:e5:ef:49:b5:f0:ca:50:
63:91:23:d7:d3:79:43:f4:47:0f:cb:24:c6:5e:2f:
8f:7a:39:67:b0:b3:67:96:30:cc:7b:a7:e9:54:94:
f4:fb:ef:10:f8:eb:6b:e7:78:16:e8:01:4d:03:fb:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:28:FA:81:94:C9:19:FD:FB:D0:0D:77:22:CB:57:82:00:13:3B
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.130.0/24
147.75.144.0/20
153.92.64.0/21
153.92.124.0/24
153.92.160.0/20
157.97.76.0/22
157.180.192.0/21
158.220.64.0/21
185.27.180.0/22
185.74.64.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b2:98:10:c4:df:af:4c:a1:cd:ff:6b:24:10:6f:69:d1:f5:
bb:c9:bc:08:50:65:d1:2c:ac:3d:98:13:56:f9:3d:fd:d0:97:
6c:25:af:fb:00:fd:13:94:f7:ff:86:37:43:ca:bd:cd:65:0c:
0c:8a:5e:bc:0f:3f:3c:af:38:c4:f4:93:ae:df:a3:e0:a3:6d:
37:e2:64:a4:5f:fd:39:e0:bc:88:5f:66:fd:4d:9c:25:bb:01:
91:65:4b:83:88:64:d0:98:08:29:c3:90:09:5b:c6:41:6e:df:
53:e5:17:c4:b8:b9:07:a0:09:45:1e:0f:1a:7b:78:85:2b:af:
4c:c4:35:cb:f2:90:f6:6b:99:dc:84:ea:95:ac:62:86:72:3a:
0d:80:06:c1:bc:8c:09:7a:4a:4d:12:24:5a:34:40:f5:5c:8c:
01:a2:da:76:d6:f1:88:bf:93:b5:35:5c:a0:f3:4f:77:30:11:
27:bb:2f:47:bf:6c:f2:9b:4d:99:20:87:6c:af:c0:0f:13:4e:
6c:84:81:77:49:64:fc:47:01:a1:07:5c:69:7b:90:3e:f5:3a:
21:40:b1:d8:eb:8f:6d:7d:1a:c7:03:0e:55:e4:9e:f4:8f:27:
04:e8:e4:07:a4:76:ae:e5:95:39:87:33:c8:0c:0e:08:53:01:
23:e0:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net