Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ejDt9Ic1oMzzrtp7-f5rigXm6ds.roa
File: ejDt9Ic1oMzzrtp7-f5rigXm6ds.roa (raw, json)
Hash identifier: aMsXHYbv0kyXq+5azGXscjTbXUQW1SA4xqGurX/QLU4=
Subject key identifier: 7A:30:ED:F4:87:35:A0:CC:F3:AE:DA:7B:F9:FE:6B:8A:05:E6:E9:DB
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019548843A3588AC7C40297E9D72C04A32EC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ejDt9Ic1oMzzrtp7-f5rigXm6ds.roa
Signing time: Thu 27 Feb 2025 17:46:19 +0000
ROA not before: Thu 27 Feb 2025 17:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
85.204.241.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.39.214.0/24 maxlen: 24
89.39.245.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.115.56.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
176.223.163.0/24 maxlen: 24
176.223.168.0/22 maxlen: 24
188.212.131.0/24 maxlen: 24
188.214.111.0/24 maxlen: 24
188.215.68.0/23 maxlen: 24
188.215.78.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
188.241.66.0/23 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.128.0/22 maxlen: 24
188.241.132.0/23 maxlen: 24
188.241.138.0/23 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:84:3a:35:88:ac:7c:40:29:7e:9d:72:c0:4a:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 27 17:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a30edf48735a0ccf3aeda7bf9fe6b8a05e6e9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:e1:2b:76:9d:a5:81:58:62:61:7a:95:87:
3d:2c:90:53:ae:c3:2e:67:a2:e4:31:5f:1c:51:e1:
2f:84:e3:60:95:8d:dd:ec:df:1c:a2:dc:08:a4:89:
02:3a:e8:b8:bc:ed:e7:4e:39:cd:ad:6c:3b:83:48:
d3:4b:39:e3:a5:b8:bb:04:47:8d:da:8f:7e:14:22:
15:6b:1d:3a:16:76:7f:50:00:b0:0c:b9:82:66:36:
73:4b:1c:8c:b2:e8:65:cc:14:2c:f7:fc:bf:97:a1:
50:68:e4:19:f6:61:7f:dc:cc:5e:aa:b6:1e:f6:f6:
f8:60:f7:d0:ec:7b:d5:40:55:d9:d1:f8:2e:08:7a:
1e:9b:b1:cc:95:8b:95:35:15:56:0f:ae:c2:3d:7d:
6f:b1:19:a1:63:c4:c4:d3:4b:f8:09:df:5a:5f:7d:
1c:48:ac:f3:37:23:d9:33:51:ba:da:7a:87:90:ae:
77:57:ae:ce:51:d2:cc:80:3d:3e:aa:d5:6c:0e:ad:
fa:e6:d7:b2:a8:98:10:f2:2d:ec:70:8e:66:06:7e:
92:15:7a:48:31:1d:7f:26:03:ca:4e:19:b0:94:01:
0f:0a:83:47:39:c4:54:87:06:2e:f4:a2:ba:a4:d2:
90:39:ee:62:b1:bc:09:64:65:46:38:ad:52:ec:2d:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:ED:F4:87:35:A0:CC:F3:AE:DA:7B:F9:FE:6B:8A:05:E6:E9:DB
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ejDt9Ic1oMzzrtp7-f5rigXm6ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
77.81.183.0/24
84.247.36.0/22
85.204.241.0/24
86.105.151.0/24
86.105.224.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.80.0/24
89.39.90.0/24
89.39.214.0/24
89.39.245.0/24
89.40.65.0/24
89.40.69.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.115.56.0/23
93.117.175.0/24
94.176.3.0/24
176.223.163.0/24
176.223.168.0/22
188.212.131.0/24
188.214.111.0/24
188.215.68.0/23
188.215.78.0/24
188.240.17.0/24
188.241.66.0/23
188.241.127.0-188.241.133.255
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:d1:28:63:ec:5b:0a:45:d2:d5:f3:d3:e3:f6:60:1c:67:c2:
71:2e:9b:ab:b9:74:c1:84:67:ab:23:51:49:a2:b0:b8:55:a8:
b2:0d:c2:d7:54:81:31:8e:e7:45:9b:8e:44:3d:6e:e5:7d:c2:
b6:b3:55:21:7c:9d:34:20:b7:a2:5c:0b:64:e8:00:9a:c2:38:
b1:34:a2:a8:a4:75:dc:25:45:b5:cf:a4:ac:fe:9f:c8:85:df:
67:fc:06:9e:6b:9d:e6:40:dc:f1:fd:e4:5c:be:d2:38:cb:85:
a3:3e:02:0e:1b:e5:28:82:e2:ac:32:cc:87:6e:79:69:14:2e:
c6:77:73:02:19:19:be:ce:ff:7c:c0:b8:34:02:c7:0a:5d:db:
15:e2:23:ba:75:db:a7:34:91:b1:79:b3:f8:22:55:e1:39:1a:
e5:19:18:5f:a2:58:2a:6e:d9:97:2b:a7:0b:44:3e:e9:f2:e6:
9d:d6:42:dc:29:15:12:83:0b:02:66:15:97:a0:f6:fe:64:8f:
8f:91:59:4e:4f:d4:ca:29:50:93:00:5a:2f:72:fb:d8:67:5f:
aa:f9:bd:32:a4:5a:79:39:fe:d8:da:27:35:ff:00:7d:78:37:
75:ae:5f:33:79:39:e9:4f:7c:b6:0a:6c:f9:3f:b7:c1:4f:65:
38:01:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:41 2025 by rpki-client on console.sobornost.net