Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eFeA20837tj2exu1GM3XUwhTTl8.roa
File: eFeA20837tj2exu1GM3XUwhTTl8.roa (raw, json)
Hash identifier: v42n+vDWEioVORAzkftIe3/ujuNDYbmt5C5p2K0FtDA=
Subject key identifier: 78:57:80:DB:4F:37:EE:D8:F6:7B:1B:B5:18:CD:D7:53:08:53:4E:5F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0195D7F349FD42BB4D32A0F090829C52B4A1
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eFeA20837tj2exu1GM3XUwhTTl8.roa
Signing time: Thu 27 Mar 2025 14:13:20 +0000
ROA not before: Thu 27 Mar 2025 14:13:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
46.102.191.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.64.0/23 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
176.223.163.0/24 maxlen: 24
188.215.78.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:f3:49:fd:42:bb:4d:32:a0:f0:90:82:9c:52:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 27 14:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=785780db4f37eed8f67b1bb518cdd75308534e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:36:17:f3:da:c7:8c:e0:39:6f:7d:f2:4c:
be:40:29:8c:77:e0:82:0c:fb:7d:2e:6d:a8:0d:73:
b3:13:69:4f:14:e3:55:c7:ba:72:79:12:cc:73:3c:
76:00:49:cf:8d:f3:d4:a9:66:10:30:63:4d:5d:a0:
5b:1f:b0:83:02:1c:8a:83:c7:91:f6:33:17:3a:87:
0f:a6:46:cc:04:f2:47:85:ee:49:f7:a5:1d:c5:9b:
c4:ae:47:67:d3:f4:5e:e2:8a:b6:d1:9c:60:4f:60:
39:93:0b:28:dc:e9:5d:a8:c9:18:f3:ed:74:8b:a5:
44:79:23:f8:b6:18:7e:2d:3c:85:ce:8d:9d:bd:67:
bf:0c:71:d7:e8:52:60:1b:61:19:c6:5f:9f:63:1e:
c0:87:d8:32:87:42:0f:b2:1f:0d:2d:f1:2e:f3:49:
2b:41:cf:50:af:41:3b:03:74:60:2d:d7:cc:21:52:
d6:a3:a3:bc:cf:b7:05:b4:68:88:15:ee:db:b3:9e:
57:90:58:32:ec:10:88:22:e2:ca:3d:c6:f8:bc:3b:
3c:3f:11:a7:71:4b:59:88:aa:69:cc:6d:88:9d:57:
99:8f:4f:e5:86:0c:d5:59:05:37:db:f3:6d:e2:87:
8d:1f:c1:7b:4f:a3:41:28:4a:77:41:97:01:fb:f3:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:80:DB:4F:37:EE:D8:F6:7B:1B:B5:18:CD:D7:53:08:53:4E:5F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eFeA20837tj2exu1GM3XUwhTTl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
46.102.191.0/24
77.81.183.0/24
84.247.36.0/22
86.105.151.0/24
86.105.224.0/24
86.107.47.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.64.0/23
89.39.80.0/24
89.39.90.0/24
89.40.65.0/24
89.40.69.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.117.175.0/24
94.176.3.0/24
94.177.58.0/24
176.223.163.0/24
188.215.78.0/24
188.240.17.0/24
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:8d:51:9e:87:c3:38:36:3b:8d:5e:d0:b6:04:69:46:84:
35:d5:8b:f3:92:ec:90:e0:60:bf:a4:78:b9:ce:5b:13:40:b7:
dd:80:38:5f:8b:2d:a0:3e:ea:cd:ef:eb:9a:05:2f:53:be:c9:
3d:4c:27:1c:fd:ab:e4:be:d6:29:d9:27:a7:ae:e0:fb:a3:8a:
ff:57:a2:0c:7d:ed:92:6f:78:10:91:f9:f4:fd:b7:5a:25:c8:
7e:c0:6f:81:46:84:f4:ee:fb:51:30:90:c6:59:04:20:19:b2:
24:d3:19:1f:4c:d3:a6:7b:46:d7:ef:71:47:37:bf:94:6d:86:
72:1c:ee:aa:87:f1:97:2e:be:94:60:6d:03:6f:3b:9c:b8:c8:
45:6e:1e:16:36:31:c5:ec:b0:45:c3:08:4c:a8:01:bb:28:35:
09:01:0e:59:cb:ae:c7:51:af:80:a3:85:25:ab:e9:b0:e9:d6:
89:f3:0a:da:02:48:57:7e:81:6e:d1:80:1a:3b:e8:80:de:d2:
b1:f7:64:ad:dc:b1:0c:82:18:35:55:ed:72:cf:50:2e:b0:26:
45:d1:3d:64:8d:ff:91:2f:77:e1:2a:f0:ba:c0:02:4b:28:cf:
42:43:2a:1c:e7:8d:42:76:6e:83:d5:a4:c2:10:11:f9:26:cb:
7d:5c:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:54:23 2025 by rpki-client on console.sobornost.net