Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa
File: Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa (raw, json)
Hash identifier: wlFaCzv/BxgMEgp0yQqyJXxYnRAML7mlxN04EDVXED8=
Subject key identifier: 43:C7:7C:84:53:B5:67:94:06:B7:4B:32:F5:4A:91:15:79:38:99:3A
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0195182AF4299338277AF76B0326FF115090
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa
Signing time: Tue 18 Feb 2025 08:27:02 +0000
ROA not before: Tue 18 Feb 2025 08:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.8.0/23 maxlen: 24
77.120.9.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:2a:f4:29:93:38:27:7a:f7:6b:03:26:ff:11:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Feb 18 08:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c77c8453b5679406b74b32f54a91157938993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:c2:03:89:15:61:a4:39:f3:bb:2c:d0:b1:
01:d6:2a:43:0f:79:ee:9c:53:d9:16:ad:e1:86:66:
9f:17:96:b4:a9:71:28:4b:ef:26:d7:43:77:6a:eb:
a9:fc:a8:00:76:50:9a:20:48:cf:70:8d:f9:a9:02:
1d:fb:c7:37:ee:b2:47:00:cf:35:c1:fc:ac:9e:3e:
24:9d:af:86:ba:17:06:31:24:47:f7:5f:ad:58:69:
e6:84:85:8c:a2:2a:f4:9a:63:0b:7b:78:90:ad:64:
cc:63:70:87:10:58:0d:9a:2a:53:1e:79:c6:14:6e:
01:34:5e:3c:fc:1f:c7:f7:de:dc:64:de:2e:83:3f:
0a:a4:bf:3c:17:4f:8a:d7:25:48:ca:0f:6a:02:9b:
68:c0:a1:4d:72:e2:dd:c3:fd:91:cc:39:30:25:01:
ce:20:c0:6f:e4:c6:e4:fc:5c:e6:cd:c5:d0:99:dc:
8c:61:3a:58:31:be:c0:30:d5:a5:a1:20:a5:b4:b5:
4e:f5:6f:b6:91:4a:b8:0a:b8:41:e2:aa:98:ae:bd:
13:5d:0a:f6:98:88:c5:8b:05:cb:1d:6f:cc:4b:b5:
cf:38:25:c0:b8:9d:a0:ef:32:cb:d2:50:8d:84:38:
f2:65:7f:13:ca:49:45:25:90:c8:99:19:a2:54:63:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:7C:84:53:B5:67:94:06:B7:4B:32:F5:4A:91:15:79:38:99:3A
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
00:7e:b0:72:66:a9:72:17:be:8d:1f:d9:0c:53:43:30:0f:61:
8d:6f:22:03:d8:b5:8a:82:c2:df:17:47:43:b3:5d:02:37:61:
53:dd:f5:6d:bc:fa:be:03:77:0c:f0:1d:14:46:43:32:ff:a4:
5a:f8:7d:65:22:14:52:b7:ee:a7:bd:be:77:56:85:e6:ca:e7:
24:11:40:a9:62:39:0f:43:71:4a:70:61:20:3b:85:bb:ce:18:
a3:a3:47:50:0d:b1:2f:21:ec:35:dd:9a:ae:0b:5b:29:d4:12:
b7:47:a2:a9:85:78:88:57:38:00:75:66:0e:77:fc:e5:8d:76:
dc:1d:83:9f:ab:21:9b:ab:68:10:cc:f9:48:4e:b8:a4:68:3f:
f0:8e:61:9f:71:2e:d1:c7:7f:e6:ce:5a:72:35:2f:fb:ce:61:
68:10:97:fa:6f:b0:77:d9:5c:ca:c4:22:41:51:07:ab:08:0c:
26:2e:28:69:3c:aa:46:09:c7:07:3f:f8:2b:06:b2:8c:34:43:
fb:44:14:eb:8e:23:ee:a7:ab:f8:56:f8:79:af:7f:b7:58:9f:
9e:ec:35:d6:52:11:4b:7c:e4:a8:2d:92:9f:8c:f3:cf:04:95:
21:1a:db:ba:20:fa:8c:10:57:e5:0c:2a:1b:63:e3:2a:5f:48:
ef:7a:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net