Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ePJeWVTAdZT_Wr3OYR6GjKSITgU.roa
File: ePJeWVTAdZT_Wr3OYR6GjKSITgU.roa (raw, json)
Hash identifier: klWWeDelEbUTnfh8FrnhieoEbxuIBTXbZQXnpDFAChk=
Subject key identifier: 78:F2:5E:59:54:C0:75:94:FF:5A:BD:CE:61:1E:86:8C:A4:88:4E:05
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01951B3B8E86FFC9A0D885C8429789E12BF7
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ePJeWVTAdZT_Wr3OYR6GjKSITgU.roa
Signing time: Tue 18 Feb 2025 22:44:02 +0000
ROA not before: Tue 18 Feb 2025 22:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42908
IP address blocks: 5.102.48.0/20 maxlen: 20
31.10.56.0/21 maxlen: 21
45.159.116.0/22 maxlen: 22
46.183.56.0/21 maxlen: 21
46.231.72.0/21 maxlen: 21
77.95.192.0/21 maxlen: 21
78.136.128.0/18 maxlen: 18
80.78.136.0/22 maxlen: 22
80.79.0.0/22 maxlen: 22
80.87.176.0/20 maxlen: 20
80.90.128.0/20 maxlen: 20
80.243.236.0/22 maxlen: 22
80.251.240.0/20 maxlen: 20
88.81.64.0/19 maxlen: 19
91.187.32.0/19 maxlen: 19
92.61.80.0/20 maxlen: 20
93.92.48.0/21 maxlen: 21
93.93.32.0/21 maxlen: 21
94.241.64.0/18 maxlen: 18
109.108.96.0/19 maxlen: 19
176.102.128.0/19 maxlen: 19
178.17.80.0/20 maxlen: 20
185.78.12.0/22 maxlen: 22
185.82.236.0/22 maxlen: 22
185.108.60.0/22 maxlen: 22
185.157.240.0/22 maxlen: 22
188.119.96.0/22 maxlen: 22
193.42.128.0/22 maxlen: 22
193.107.252.0/22 maxlen: 22
213.19.0.0/17 maxlen: 17
213.155.32.0/19 maxlen: 19
213.250.192.0/18 maxlen: 18
217.170.96.0/20 maxlen: 20
217.196.112.0/20 maxlen: 20
217.197.144.0/20 maxlen: 20
2001:67c:13c4::/48 maxlen: 48
2a00:e4c0::/32 maxlen: 32
2a01:9f40::/29 maxlen: 29
2a02:2088::/32 maxlen: 32
2a02:2088:1000::/36 maxlen: 36
2a02:2428::/32 maxlen: 32
2a02:2588::/29 maxlen: 29
2a03:1600::/32 maxlen: 32
2a03:7a00::/32 maxlen: 32
2a03:a820::/32 maxlen: 32
2a07:cc80::/29 maxlen: 29
2a0c:8b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1b:3b:8e:86:ff:c9:a0:d8:85:c8:42:97:89:e1:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 18 22:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f25e5954c07594ff5abdce611e868ca4884e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:2a:33:ea:6d:59:fd:4d:84:af:25:d0:f4:
95:cc:87:4c:77:47:18:3a:72:f5:d8:f0:b3:89:16:
b3:c9:df:0f:34:cf:2f:b9:af:1e:65:51:ca:54:5a:
13:04:9c:bb:79:2b:56:5b:21:5e:af:63:56:f1:a2:
ce:7a:08:b7:b9:da:8a:f9:66:ef:7f:8c:52:f2:f9:
e6:90:53:18:69:26:7f:23:cf:ab:79:7d:3c:71:c8:
1e:6d:1a:b0:b9:3c:b3:8b:dc:dc:76:76:eb:88:08:
aa:91:98:3e:ec:39:e0:5c:25:32:10:35:a3:da:1c:
86:a5:e5:b8:90:a8:1d:cf:5b:ca:72:f7:3d:0f:07:
03:0f:68:51:15:42:ec:6f:e4:14:08:89:33:ae:a4:
0c:de:c2:31:1d:f5:1e:a2:6c:6b:9b:c9:b6:00:6c:
3c:50:56:ea:54:46:86:aa:d6:72:2b:27:84:b9:7c:
f7:9b:be:92:7d:2e:4c:52:53:3f:1c:b3:18:6c:c8:
bb:9f:64:8f:e8:8f:22:1e:a4:25:80:35:9a:1b:da:
a9:53:26:d5:6e:d1:95:d2:34:2a:ec:28:d7:78:56:
b0:9f:55:0f:c9:69:9c:a2:c6:dc:d3:62:12:a0:72:
db:dc:a4:d6:10:80:37:85:d5:76:99:56:38:15:eb:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:5E:59:54:C0:75:94:FF:5A:BD:CE:61:1E:86:8C:A4:88:4E:05
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ePJeWVTAdZT_Wr3OYR6GjKSITgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.48.0/20
31.10.56.0/21
45.159.116.0/22
46.183.56.0/21
46.231.72.0/21
77.95.192.0/21
78.136.128.0/18
80.78.136.0/22
80.79.0.0/22
80.87.176.0/20
80.90.128.0/20
80.243.236.0/22
80.251.240.0/20
88.81.64.0/19
91.187.32.0/19
92.61.80.0/20
93.92.48.0/21
93.93.32.0/21
94.241.64.0/18
109.108.96.0/19
176.102.128.0/19
178.17.80.0/20
185.78.12.0/22
185.82.236.0/22
185.108.60.0/22
185.157.240.0/22
188.119.96.0/22
193.42.128.0/22
193.107.252.0/22
213.19.0.0/17
213.155.32.0/19
213.250.192.0/18
217.170.96.0/20
217.196.112.0/20
217.197.144.0/20
IPv6:
2001:67c:13c4::/48
2a00:e4c0::/32
2a01:9f40::/29
2a02:2088::/32
2a02:2428::/32
2a02:2588::/29
2a03:1600::/32
2a03:7a00::/32
2a03:a820::/32
2a07:cc80::/29
2a0c:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:0a:43:fd:08:54:d2:d2:cb:5e:99:fe:c1:fd:81:86:b3:ec:
03:d9:5b:58:c9:7c:be:bc:1a:ca:b9:81:92:5f:4b:fb:11:c8:
d2:20:22:78:da:9d:20:73:ae:83:f7:32:25:b2:d4:cc:96:e4:
68:10:55:cd:d3:c3:0c:73:92:2a:39:48:55:cf:b5:7f:8e:52:
83:11:dd:f7:b0:5e:d6:17:b2:5e:1b:06:49:ad:86:6c:6b:86:
ff:32:c6:f7:9b:65:39:4b:06:5b:bd:60:78:f6:54:68:07:79:
21:40:df:f2:fa:cf:ae:62:d3:ad:da:a3:67:e8:1c:99:13:51:
50:db:20:e1:c2:81:39:06:29:e0:cf:22:a5:a0:8c:cb:50:c8:
ff:5b:48:03:ba:98:b2:d9:f5:b5:b0:99:dc:1a:fb:47:18:44:
f2:38:bb:e2:aa:59:6f:55:5d:66:bd:a5:3b:80:5c:21:4e:bd:
cf:34:44:56:c6:9b:5f:64:17:e1:b2:3e:12:99:d3:8e:4b:ca:
12:75:2e:8b:b0:7a:25:2f:c1:a2:3e:40:c3:5f:09:43:4b:38:
c4:91:e3:c6:46:19:46:33:78:cd:1f:c2:e1:6f:b6:1c:ae:46:
9f:92:e7:00:0d:c2:69:a0:a8:fd:a1:40:18:57:00:65:b5:57:
52:7c:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:51:38 2025 by rpki-client on console.sobornost.net