Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/77Lxszm6b67-RSjepR0C23JG5dI.roa
File: 77Lxszm6b67-RSjepR0C23JG5dI.roa (raw, json)
Hash identifier: 9Xm4YAYAAgADPugT2wEGkyXGaEUt/FjBjGPJ5p3nqlw=
Subject key identifier: EF:B2:F1:B3:39:BA:6F:AE:FE:45:28:DE:A5:1D:02:DB:72:46:E5:D2
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019425FDEB03A507BD8A58FEF6F42AF0B95B
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/77Lxszm6b67-RSjepR0C23JG5dI.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205806
IP address blocks: 149.249.160.0/19 maxlen: 22
149.249.192.0/19 maxlen: 22
149.249.224.0/20 maxlen: 20
149.249.240.0/22 maxlen: 22
185.147.168.0/22 maxlen: 22
185.178.24.0/22 maxlen: 22
185.206.44.0/22 maxlen: 22
213.208.40.0/21 maxlen: 22
213.208.40.0/22 maxlen: 22
213.208.44.0/22 maxlen: 22
213.208.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:03:a5:07:bd:8a:58:fe:f6:f4:2a:f0:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb2f1b339ba6faefe4528dea51d02db7246e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:c1:23:44:99:65:f9:82:a7:ab:a6:d4:4e:
85:d5:ff:13:18:6e:57:ab:c7:57:6f:24:28:61:0a:
a7:5e:eb:7e:1c:df:d2:01:c1:e2:fe:9f:bc:a7:82:
b9:41:7a:45:cd:89:f9:53:74:3c:c9:3d:02:c6:2e:
05:d0:8d:9a:bb:b1:7a:19:94:15:44:3e:e5:6d:71:
20:92:57:53:d0:67:3b:c8:94:c6:9d:a5:50:3b:f8:
f7:73:c8:d8:70:e5:3e:aa:71:c4:43:dd:83:00:db:
20:d5:54:78:75:21:e3:5e:a5:36:f6:e3:47:af:7e:
97:97:c7:28:7f:42:d6:69:21:be:2e:34:09:03:36:
8a:57:26:f8:4c:30:2c:3e:83:48:88:83:99:75:58:
59:fe:ca:3e:4f:6c:46:e8:20:e3:67:98:75:24:88:
b0:fe:40:66:40:10:3a:5a:b5:71:6f:f4:0b:b7:63:
96:04:84:e3:dd:46:5a:2a:89:de:08:89:6c:0a:0d:
b8:7c:e3:a2:26:e1:f6:41:e6:07:3f:a6:65:ca:d7:
32:b1:bb:32:81:7c:54:a6:8c:5e:91:1b:2d:96:48:
4f:2f:12:00:8b:8d:59:72:8c:fe:39:5c:08:fe:7e:
8a:22:73:c0:0e:a5:fd:1a:a9:77:b7:8b:71:55:63:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:F1:B3:39:BA:6F:AE:FE:45:28:DE:A5:1D:02:DB:72:46:E5:D2
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/77Lxszm6b67-RSjepR0C23JG5dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.160.0-149.249.243.255
185.147.168.0/22
185.178.24.0/22
185.206.44.0/22
213.208.40.0-213.208.51.255
Signature Algorithm: sha256WithRSAEncryption
6d:ba:fc:bd:8b:e3:e6:47:1f:95:4b:41:34:eb:38:c2:f1:e6:
fa:85:9a:7a:34:7c:c7:b0:c6:14:8c:22:3d:e0:c5:09:2d:8d:
c4:4b:80:a4:22:e3:2c:4b:70:11:fb:49:64:54:2b:63:44:2b:
9a:7d:67:40:be:6a:26:90:ae:10:db:58:d5:b0:8c:55:a5:19:
b7:b2:52:1d:6f:54:a9:11:82:34:05:75:3b:c1:bf:e1:03:c7:
93:80:4d:51:30:29:26:5c:b5:2e:88:93:53:c2:20:c8:4d:03:
c6:7e:ea:67:a7:80:61:62:fa:07:4d:22:4a:8a:c9:b2:76:4a:
cb:d0:f3:ff:f4:a8:fa:28:38:ca:e8:ac:c1:95:1b:44:4f:6e:
91:e7:a9:1f:6d:b2:77:46:60:4c:7e:b9:9d:45:50:e6:52:f8:
78:e8:32:4e:1a:4c:d1:12:9e:82:a5:59:e1:44:00:0f:86:4e:
53:3e:47:5b:e0:7d:18:95:36:3b:99:30:81:cb:03:60:ec:c0:
7b:5d:3b:3f:ee:a7:5f:39:07:45:46:fb:f2:9d:46:18:7d:c6:
4d:43:cf:7b:ff:c6:eb:28:b8:6e:db:26:39:21:9d:0c:7f:64:
bb:8b:8f:31:ad:b0:83:7e:79:87:60:06:a8:e6:60:7e:36:46:
5e:da:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net