Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Rfm62nGvOy__r0uU3y5H1zMgweI.roa
File: Rfm62nGvOy__r0uU3y5H1zMgweI.roa (raw, json)
Hash identifier: LTYqfzfYkcNQnfrzTUr5wlMHC0dD+1vxqjjvK0SS0fw=
Subject key identifier: 45:F9:BA:DA:71:AF:3B:2F:FF:AF:4B:94:DF:2E:47:D7:33:20:C1:E2
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0193BFB753614E74FF7931C33ED1A43309DF
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Rfm62nGvOy__r0uU3y5H1zMgweI.roa
Signing time: Fri 13 Dec 2024 11:11:22 +0000
ROA not before: Fri 13 Dec 2024 11:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 5.104.175.0/24 maxlen: 24
77.76.14.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
79.124.13.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
82.118.243.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
130.185.225.0/24 maxlen: 24
130.185.232.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:b7:53:61:4e:74:ff:79:31:c3:3e:d1:a4:33:09:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Dec 13 11:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45f9bada71af3b2fffaf4b94df2e47d73320c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:d7:08:68:c0:f3:4c:2a:f1:fd:9f:2a:d1:
96:5d:d0:31:34:7e:20:bc:b9:3d:11:34:11:51:ad:
31:58:84:dd:bf:b6:f3:12:cf:cd:68:ed:92:e2:55:
82:b0:f6:d5:8e:e7:04:e7:96:e4:e9:c5:28:bc:ae:
f7:d7:62:55:9a:72:c9:51:4b:47:f1:54:64:d2:5f:
36:b1:e0:9b:f3:17:9f:4b:2c:38:98:6a:9c:eb:64:
d0:87:0b:15:2f:89:25:04:74:ee:e7:32:01:22:37:
2c:c5:f3:b0:90:5b:96:40:37:86:df:ce:28:67:26:
f0:92:56:aa:0b:70:31:38:89:82:ca:6b:7f:5b:fb:
78:39:f8:6c:e1:3b:92:cd:cf:58:0d:25:87:a4:c0:
4c:17:fb:f6:3a:93:17:18:ec:d8:cf:9d:51:bf:60:
7b:31:a4:0b:9e:68:32:f3:ec:bc:9d:cd:6b:be:f9:
f0:fb:7c:56:dd:37:1a:2a:e9:c3:ba:d9:71:c2:2d:
4c:43:68:63:d0:4f:b7:e0:75:78:1c:97:ad:2d:bd:
7a:5a:95:a0:0f:1c:79:92:03:0f:48:71:48:37:d8:
02:52:8c:be:29:98:e0:8b:33:76:0b:45:56:d0:f1:
a9:27:0d:a6:fd:b0:74:2a:de:01:3a:5b:8a:92:6a:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:BA:DA:71:AF:3B:2F:FF:AF:4B:94:DF:2E:47:D7:33:20:C1:E2
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Rfm62nGvOy__r0uU3y5H1zMgweI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
77.76.14.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/24
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.13.0-79.124.14.255
79.124.16.0/23
79.124.22.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.168.0/24
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:61:d5:13:3d:97:51:a9:f4:80:d9:d7:8b:9b:24:39:3e:cd:
bf:95:09:08:16:36:a1:75:85:43:a1:6b:94:e5:20:0f:6a:12:
2e:0e:24:d5:5e:c8:c6:cf:08:4e:0d:bc:21:5d:b7:ff:6a:21:
a1:35:cd:9c:c3:10:35:56:25:25:65:d1:ee:b4:61:24:ed:05:
c7:92:94:ee:12:4d:72:17:4f:af:c1:ec:bf:85:43:5e:20:ff:
fc:c4:bb:23:f9:bb:ac:f1:c7:0e:c8:81:cd:57:ec:04:d7:89:
6f:74:28:7b:1e:e6:77:3e:86:e5:76:25:ca:d2:f7:80:fe:bc:
0d:89:46:82:bc:f9:06:3c:7a:aa:56:72:0f:98:87:e5:e4:7d:
9d:4d:b7:d7:33:92:75:f9:52:48:a8:de:cc:7d:00:72:1b:2e:
e0:a8:f9:55:b7:46:21:08:6a:60:64:c9:b3:41:4e:7a:18:ad:
f0:ca:61:87:bc:68:e6:c3:b1:49:d3:87:3a:8d:c4:e9:af:98:
13:dc:d6:af:0f:83:dc:99:c7:7c:1c:f0:5f:af:ce:97:e5:81:
e5:5c:04:31:cc:5a:40:41:71:b2:42:4d:4d:b4:3c:63:5d:d6:
fc:24:39:77:66:af:7d:04:b3:61:85:a0:45:14:ec:d2:70:cc:
ea:b9:ea:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net