Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/78qzTXd1x9Fq51bVnqtwUpES8tE.roa
File: 78qzTXd1x9Fq51bVnqtwUpES8tE.roa (raw, json)
Hash identifier: cFYT5YQ4faJqGDT5XV6eOPdhzfgW7hK/0zl0h4kFiw8=
Subject key identifier: EF:CA:B3:4D:77:75:C7:D1:6A:E7:56:D5:9E:AB:70:52:91:12:F2:D1
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0195FA1DC49817FB715E645FB93327393A16
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/78qzTXd1x9Fq51bVnqtwUpES8tE.roa
Signing time: Thu 03 Apr 2025 05:26:49 +0000
ROA not before: Thu 03 Apr 2025 05:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30815
IP address blocks: 88.209.128.0/22 maxlen: 22
88.209.128.0/24 maxlen: 24
88.209.129.0/24 maxlen: 24
88.209.130.0/24 maxlen: 24
88.209.132.0/22 maxlen: 22
88.209.132.0/24 maxlen: 24
88.209.135.0/24 maxlen: 24
88.209.136.0/24 maxlen: 24
88.209.137.0/24 maxlen: 24
88.209.138.0/24 maxlen: 24
88.209.160.0/21 maxlen: 21
88.209.160.0/22 maxlen: 22
88.209.160.0/24 maxlen: 24
88.209.161.0/24 maxlen: 24
88.209.162.0/24 maxlen: 24
88.209.163.0/24 maxlen: 24
88.209.164.0/22 maxlen: 22
88.209.164.0/23 maxlen: 23
88.209.164.0/24 maxlen: 24
88.209.165.0/24 maxlen: 24
88.209.166.0/24 maxlen: 24
88.209.167.0/24 maxlen: 24
88.209.190.0/24 maxlen: 24
88.209.191.0/24 maxlen: 24
93.189.96.0/21 maxlen: 21
93.189.96.0/23 maxlen: 23
93.189.96.0/24 maxlen: 24
93.189.97.0/24 maxlen: 24
93.189.98.0/23 maxlen: 23
93.189.98.0/24 maxlen: 24
93.189.99.0/24 maxlen: 24
93.189.100.0/23 maxlen: 23
93.189.100.0/24 maxlen: 24
93.189.101.0/24 maxlen: 24
93.189.102.0/23 maxlen: 23
93.189.102.0/24 maxlen: 24
93.189.103.0/24 maxlen: 24
185.63.232.0/22 maxlen: 22
185.63.232.0/23 maxlen: 23
185.63.232.0/24 maxlen: 24
185.63.233.0/24 maxlen: 24
185.63.234.0/24 maxlen: 24
185.63.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:1d:c4:98:17:fb:71:5e:64:5f:b9:33:27:39:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Apr 3 05:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efcab34d7775c7d16ae756d59eab70529112f2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:b0:24:cb:af:eb:2e:92:54:6d:9d:aa:f3:
ed:e0:d7:64:f7:2b:6a:15:7d:ad:f4:be:a6:3c:a5:
c0:d0:37:67:bf:95:cb:b2:22:5a:02:21:7e:95:fd:
fd:cd:4e:42:9e:2c:e4:b0:09:df:67:d7:16:40:61:
31:01:66:1f:15:8d:6a:b6:b8:c3:8d:b5:b8:22:39:
36:dd:52:f4:38:72:f1:9f:12:59:59:ed:51:09:72:
3e:79:a0:9f:a9:38:9e:84:ae:fa:86:52:c2:2c:bc:
b1:4b:c2:81:25:46:0c:3f:8a:71:4d:58:1b:22:68:
31:53:32:74:25:e5:9b:16:74:f1:2a:68:7d:6e:a9:
ba:12:31:f6:bc:34:73:39:f6:b3:81:98:d5:1c:01:
8a:b5:2c:a2:c7:75:c4:c7:0b:d9:02:4b:c9:c6:24:
56:0f:f5:8d:8a:79:42:32:88:f1:2e:5e:a2:b8:8e:
aa:c4:86:59:9e:d8:b1:af:e5:3c:85:9e:95:0e:d6:
f5:19:21:dc:5e:5d:85:5d:92:57:cd:35:a8:12:d3:
8a:d0:a7:4a:d5:cd:a8:57:66:34:d1:bc:a9:7b:17:
57:7b:ca:bf:5c:98:9a:08:4d:0f:57:e3:00:cc:e4:
bf:fa:6b:f2:c7:dc:a8:6e:e0:d7:f8:c7:7c:e2:13:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:B3:4D:77:75:C7:D1:6A:E7:56:D5:9E:AB:70:52:91:12:F2:D1
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/78qzTXd1x9Fq51bVnqtwUpES8tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.128.0-88.209.138.255
88.209.160.0/21
88.209.190.0/23
93.189.96.0/21
185.63.232.0/22
Signature Algorithm: sha256WithRSAEncryption
25:39:b8:f9:85:8b:5d:fa:2f:fa:48:51:59:3b:d4:41:d1:46:
b3:33:a1:c3:e1:b9:fc:0b:b0:9c:4d:0c:d7:b3:98:31:b3:33:
25:ad:5f:cf:bf:5b:96:3d:70:c2:75:a4:2d:45:ee:f5:0e:6c:
55:0e:c9:7e:48:cf:53:48:50:e3:10:a7:84:33:14:7a:44:04:
6e:ee:e8:7b:1c:a1:8a:b5:97:95:5f:4d:5a:71:95:46:ea:7f:
e9:c6:b5:68:15:47:78:a4:6a:b3:cf:4e:42:cb:9a:8f:9d:2f:
1a:c5:7b:43:12:93:97:8a:b1:72:c6:10:66:de:9a:1c:5d:cf:
52:6f:36:5f:e7:48:cb:de:b6:9b:b5:ae:94:6f:8e:71:93:f9:
4e:0a:74:8d:54:c1:35:68:ae:ff:0a:28:09:d7:af:c9:eb:8f:
f7:aa:47:ba:89:c0:60:64:7e:3c:92:9c:83:5e:f4:8a:b7:79:
d5:92:ac:85:6d:02:e0:5f:c5:93:64:d6:bf:5e:73:63:e2:40:
de:29:0c:2d:a3:59:91:6d:a1:a3:1d:cb:89:c2:dd:2d:3f:2c:
84:75:4c:ac:8f:c2:ff:09:63:75:d8:d0:93:b8:84:80:3f:66:
41:bf:2c:8f:06:ae:97:4d:e9:bf:f1:5d:0a:20:49:44:35:a4:
63:74:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net