Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/J3f-kMGbEcltLfW5KwAaaJ0THeI.roa
File: J3f-kMGbEcltLfW5KwAaaJ0THeI.roa (raw, json)
Hash identifier: lzWWSSEPje3AGwjaLQZ8BNNNX35xTOExYAP1x3q4SIw=
Subject key identifier: 27:77:FE:90:C1:9B:11:C9:6D:2D:F5:B9:2B:00:1A:68:9D:13:1D:E2
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0194FEFCB8D980B85563AD0FAE5EAB335F3E
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/J3f-kMGbEcltLfW5KwAaaJ0THeI.roa
Signing time: Thu 13 Feb 2025 11:06:02 +0000
ROA not before: Thu 13 Feb 2025 11:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41176
IP address blocks: 89.108.0.0/18 maxlen: 18
89.108.26.0/23 maxlen: 23
89.108.26.0/24 maxlen: 24
89.108.27.0/24 maxlen: 24
89.108.28.0/24 maxlen: 24
89.108.29.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
185.20.152.0/22 maxlen: 22
185.20.152.0/24 maxlen: 24
188.117.64.0/18 maxlen: 18
188.117.72.0/22 maxlen: 22
188.117.76.0/22 maxlen: 22
188.117.76.0/24 maxlen: 24
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.80.0/23 maxlen: 23
188.117.80.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.82.0/24 maxlen: 24
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.100.0/23 maxlen: 23
188.117.104.0/24 maxlen: 24
188.117.107.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.64.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.70.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.36.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.39.0/24 maxlen: 24
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.53.0/24 maxlen: 24
213.236.56.0/21 maxlen: 21
213.236.56.0/22 maxlen: 22
213.236.59.0/24 maxlen: 24
213.236.60.0/22 maxlen: 22
213.236.60.0/24 maxlen: 24
213.236.62.0/24 maxlen: 24
2a02:d70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:fc:b8:d9:80:b8:55:63:ad:0f:ae:5e:ab:33:5f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Feb 13 11:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2777fe90c19b11c96d2df5b92b001a689d131de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:0b:d4:e4:db:f4:24:27:ba:66:46:3b:ed:
74:58:d5:ca:a2:98:c9:3d:78:8d:1d:1b:5e:7b:1c:
b6:af:5e:b9:ff:dc:c3:e4:c8:ad:bb:68:97:06:f9:
8e:e5:88:0e:07:d6:1c:12:74:b1:e3:e4:df:8d:8d:
41:38:54:38:d0:00:5e:ab:68:cf:53:ee:a6:d5:42:
2a:f2:40:3f:91:32:b4:ba:29:40:80:9c:0d:07:33:
6b:b2:89:2c:71:d3:70:ca:71:96:78:8b:02:93:4f:
4e:8a:6d:2b:a1:2f:35:bc:0c:ec:d1:81:9d:0d:fb:
f0:cb:92:9c:67:38:a6:4a:45:76:46:65:d7:8d:97:
c2:49:2f:36:6c:e5:9f:4a:36:ce:20:0f:4d:cd:15:
8a:b4:29:6b:f0:48:2a:38:2b:b5:c9:58:6c:fe:57:
7e:3a:03:b6:e7:ac:0d:15:69:3b:01:f1:23:f7:61:
a8:56:c8:33:7b:aa:83:b0:17:f7:0e:90:e4:8c:87:
91:49:69:c9:93:e1:40:1a:d6:58:90:06:94:cd:56:
7c:bd:f1:d5:1b:69:3e:cb:90:5b:dc:1e:4d:6b:3e:
3d:bc:6b:bc:81:fa:56:d9:40:00:ba:fb:d9:b1:5f:
19:a9:33:5e:5c:4d:8c:56:fb:6d:3f:2d:bf:2c:d3:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:FE:90:C1:9B:11:C9:6D:2D:F5:B9:2B:00:1A:68:9D:13:1D:E2
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/J3f-kMGbEcltLfW5KwAaaJ0THeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
99:c5:96:d5:47:b9:fd:f5:40:e1:10:e0:16:10:f4:0e:b4:60:
0c:52:6d:a8:a3:5e:b1:b5:20:46:e3:45:25:57:09:de:ee:0b:
87:53:b6:58:68:fe:72:47:7f:aa:52:a2:a8:cf:0b:83:84:79:
a0:49:6f:dd:23:14:83:95:65:68:c1:fe:34:13:f9:f9:94:2d:
02:8b:26:df:ec:f5:95:70:3e:1f:04:b9:6b:fe:9e:0e:25:b5:
40:a4:97:aa:ea:76:7f:24:e9:77:a7:1a:cb:89:08:7b:d9:d5:
cd:0f:cd:ac:5a:93:a0:67:84:81:23:03:4a:d2:76:67:48:e6:
34:81:2c:40:dd:f4:52:12:df:47:25:f2:f8:9f:bb:e5:92:93:
3d:90:5c:4d:ef:2f:24:bd:fd:8a:cc:22:fa:72:1a:d9:35:b9:
a1:58:29:7d:ed:f7:61:28:5a:32:ee:2f:c5:bc:fc:9c:7c:e4:
1b:58:47:73:e9:63:08:46:08:a7:1d:96:36:65:2d:3b:c7:23:
ce:bd:e8:c6:97:ad:a5:78:0d:b2:58:76:3c:29:f6:79:71:ae:
9a:11:65:ba:54:e9:73:65:e3:4a:12:f9:6a:11:c0:0e:eb:4c:
6d:e2:55:e8:41:a7:7c:43:30:40:da:f1:43:68:cc:79:ac:b8:
a6:e6:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:05 2025 by rpki-client on console.sobornost.net