Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/7thlYJak5fYckr-PgIU9VB1zcAE.roa
File: 7thlYJak5fYckr-PgIU9VB1zcAE.roa (raw, json)
Hash identifier: XgaLhq4lZSM0kZFmxLYb0vu0fOCo+oxIrr8RP4xz7UE=
Subject key identifier: EE:D8:65:60:96:A4:E5:F6:1C:92:BF:8F:80:85:3D:54:1D:73:70:01
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0194206837C0ED5509B10B0C14C84D3576F5
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/7thlYJak5fYckr-PgIU9VB1zcAE.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41176
IP address blocks: 89.108.0.0/18 maxlen: 18
89.108.26.0/23 maxlen: 23
89.108.26.0/24 maxlen: 24
89.108.27.0/24 maxlen: 24
89.108.28.0/24 maxlen: 24
89.108.29.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
185.20.152.0/22 maxlen: 22
185.20.152.0/24 maxlen: 24
188.117.64.0/18 maxlen: 18
188.117.72.0/22 maxlen: 22
188.117.76.0/22 maxlen: 22
188.117.76.0/24 maxlen: 24
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.80.0/23 maxlen: 23
188.117.80.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.100.0/23 maxlen: 23
188.117.104.0/24 maxlen: 24
188.117.107.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.64.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.70.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.36.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.39.0/24 maxlen: 24
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.53.0/24 maxlen: 24
213.236.56.0/21 maxlen: 21
213.236.56.0/22 maxlen: 22
213.236.59.0/24 maxlen: 24
213.236.60.0/22 maxlen: 22
213.236.60.0/24 maxlen: 24
213.236.62.0/24 maxlen: 24
2a02:d70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:c0:ed:55:09:b1:0b:0c:14:c8:4d:35:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed8656096a4e5f61c92bf8f80853d541d737001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:44:48:30:99:d6:eb:ff:27:7d:4b:69:d6:
d1:14:89:e7:58:6a:50:61:b7:c4:d2:11:c3:5d:ae:
39:4e:b6:c6:b5:6b:21:90:2c:46:65:2e:82:02:08:
f4:67:e7:c4:d2:f4:e1:69:99:43:0f:d5:58:0a:8a:
76:de:f6:c5:e9:18:02:cb:a0:d3:48:83:6d:37:0d:
f5:4f:46:43:c5:32:b8:4d:7d:43:9d:9e:d2:cb:8f:
56:d1:9b:63:23:44:c6:ac:cc:6f:c8:59:da:8f:d0:
df:2e:25:30:9c:95:92:c7:60:0f:cb:ba:eb:9b:ca:
0d:3d:3b:80:e0:d2:15:22:75:cf:3c:b7:a8:3e:37:
13:72:e0:e4:ae:00:ab:a2:69:fe:07:98:6b:ca:9c:
61:58:5f:85:d5:b2:04:38:e5:7d:5c:8a:14:f1:ff:
8d:96:fe:17:fc:71:f5:7b:6f:25:19:07:74:51:78:
0c:0e:77:25:1d:fe:1b:d2:2a:3f:cb:7d:26:34:45:
6a:6e:c7:41:5b:95:c1:b2:ad:34:a0:06:a5:c5:c6:
6c:9c:e7:25:fb:ce:d6:8f:87:01:32:0f:2b:5f:81:
4c:8f:d1:34:ea:ad:4f:e2:5a:0e:ed:2a:cd:f8:3c:
83:39:8b:82:2d:b4:2a:25:43:ab:9d:ea:4a:33:50:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:65:60:96:A4:E5:F6:1C:92:BF:8F:80:85:3D:54:1D:73:70:01
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/7thlYJak5fYckr-PgIU9VB1zcAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fc:85:ac:29:f6:af:4f:48:48:89:d2:08:e6:6f:ab:c5:7c:
74:52:51:a5:aa:65:1c:c5:55:e9:f9:1c:32:24:07:a3:01:db:
c2:39:e2:bb:07:1f:f1:ba:84:e0:2f:0f:81:aa:bb:47:30:37:
3d:d4:01:fd:54:5b:04:0c:d7:63:91:3b:57:52:de:c5:ba:ae:
ed:55:0c:a4:b1:da:f7:de:51:06:3b:50:a9:ff:ee:8b:81:d2:
8e:4b:58:55:ad:12:27:c8:cb:d6:4c:d0:38:57:88:b6:f7:ff:
d8:34:3f:a0:04:b3:b3:38:74:df:45:df:16:96:66:a7:99:16:
e7:fd:b2:17:20:d4:6b:fb:85:80:b8:42:3c:33:44:c4:e8:06:
04:2c:c9:7e:73:95:d3:31:e1:3d:fc:df:83:24:95:76:1c:e9:
20:e5:1b:c5:6a:7b:47:1c:8e:ba:5a:62:73:22:bb:4f:ac:eb:
ea:52:81:72:25:3d:48:33:1f:f8:53:fc:23:ec:73:8d:35:09:
33:09:49:de:fb:28:4d:47:fa:28:c3:18:0d:01:0b:a6:85:12:
2e:7f:82:a4:4f:98:3c:af:77:a3:f2:8c:da:a2:1d:b6:53:64:
17:a1:9d:d0:36:96:70:2e:a2:50:ba:e6:f1:93:01:f6:2e:20:
fc:28:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:38:20 2025 by rpki-client on console.sobornost.net