Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/e82TLeX_EiGvO77RMXUzcestBfo.roa
File: e82TLeX_EiGvO77RMXUzcestBfo.roa (raw, json)
Hash identifier: PQVhIrXuN5MsdlS210Ox74oVHprVz6FBbR27KuWIkpg=
Subject key identifier: 7B:CD:93:2D:E5:FF:12:21:AF:3B:BE:D1:31:75:33:71:EB:2D:05:FA
Certificate issuer: /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial: 01942521F5FCA0F76BBCBE9C66ADB458DE5D
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/e82TLeX_EiGvO77RMXUzcestBfo.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51018
IP address blocks: 95.159.64.0/18 maxlen: 18
95.159.64.0/20 maxlen: 20
95.159.64.0/24 maxlen: 24
95.159.65.0/24 maxlen: 24
95.159.66.0/24 maxlen: 24
95.159.67.0/24 maxlen: 24
95.159.68.0/24 maxlen: 24
95.159.69.0/24 maxlen: 24
95.159.70.0/24 maxlen: 24
95.159.71.0/24 maxlen: 24
95.159.72.0/24 maxlen: 24
95.159.73.0/24 maxlen: 24
95.159.74.0/24 maxlen: 24
95.159.75.0/24 maxlen: 24
95.159.76.0/24 maxlen: 24
95.159.77.0/24 maxlen: 24
95.159.78.0/24 maxlen: 24
95.159.79.0/24 maxlen: 24
95.159.80.0/20 maxlen: 20
95.159.80.0/22 maxlen: 22
95.159.80.0/23 maxlen: 23
95.159.80.0/24 maxlen: 24
95.159.81.0/24 maxlen: 24
95.159.82.0/23 maxlen: 23
95.159.82.0/24 maxlen: 24
95.159.83.0/24 maxlen: 24
95.159.84.0/22 maxlen: 22
95.159.84.0/23 maxlen: 23
95.159.84.0/24 maxlen: 24
95.159.85.0/24 maxlen: 24
95.159.86.0/23 maxlen: 23
95.159.86.0/24 maxlen: 24
95.159.87.0/24 maxlen: 24
95.159.88.0/22 maxlen: 22
95.159.88.0/23 maxlen: 23
95.159.88.0/24 maxlen: 24
95.159.89.0/24 maxlen: 24
95.159.90.0/24 maxlen: 24
95.159.91.0/24 maxlen: 24
95.159.92.0/24 maxlen: 24
95.159.93.0/24 maxlen: 24
95.159.94.0/24 maxlen: 24
95.159.95.0/24 maxlen: 24
95.159.96.0/20 maxlen: 20
95.159.96.0/24 maxlen: 24
95.159.97.0/24 maxlen: 24
95.159.98.0/24 maxlen: 24
95.159.99.0/24 maxlen: 24
95.159.100.0/24 maxlen: 24
95.159.101.0/24 maxlen: 24
95.159.102.0/24 maxlen: 24
95.159.103.0/24 maxlen: 24
95.159.104.0/22 maxlen: 22
95.159.104.0/24 maxlen: 24
95.159.105.0/24 maxlen: 24
95.159.106.0/24 maxlen: 24
95.159.107.0/24 maxlen: 24
95.159.108.0/24 maxlen: 24
95.159.109.0/24 maxlen: 24
95.159.110.0/24 maxlen: 24
95.159.111.0/24 maxlen: 24
95.159.112.0/20 maxlen: 20
95.159.112.0/21 maxlen: 21
95.159.112.0/24 maxlen: 24
95.159.113.0/24 maxlen: 24
95.159.114.0/24 maxlen: 24
95.159.115.0/24 maxlen: 24
95.159.116.0/24 maxlen: 24
95.159.117.0/24 maxlen: 24
95.159.118.0/24 maxlen: 24
95.159.119.0/24 maxlen: 24
95.159.120.0/21 maxlen: 21
95.159.120.0/24 maxlen: 24
95.159.121.0/24 maxlen: 24
95.159.122.0/24 maxlen: 24
95.159.123.0/24 maxlen: 24
95.159.124.0/24 maxlen: 24
95.159.125.0/24 maxlen: 24
95.159.126.0/24 maxlen: 24
95.159.127.0/24 maxlen: 24
178.22.32.0/21 maxlen: 21
178.22.32.0/22 maxlen: 22
178.22.36.0/22 maxlen: 22
194.180.40.0/22 maxlen: 22
194.180.40.0/23 maxlen: 23
194.180.40.0/24 maxlen: 24
2a01:58a0::/32 maxlen: 32
2a01:58a0::/40 maxlen: 40
2a01:58a0:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f5:fc:a0:f7:6b:bc:be:9c:66:ad:b4:58:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bcd932de5ff1221af3bbed131753371eb2d05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:6e:fc:90:22:a2:03:1d:00:db:33:b4:cf:
3c:df:e6:2f:dc:4c:b7:3c:45:f3:ad:46:8e:c2:93:
6d:a3:35:54:c1:e5:82:41:f5:67:af:7c:4a:5f:e4:
7b:cf:1c:a2:c5:68:94:c0:9b:d9:e8:39:78:06:b4:
fb:02:b5:5e:26:45:b3:4d:b6:52:bb:85:66:d8:f3:
d7:d7:64:27:92:2f:6a:3e:71:44:90:c8:13:d8:47:
6e:c8:bb:2e:a2:59:98:2c:1e:44:ee:2b:24:2f:4b:
68:0f:d7:45:64:dd:4b:03:06:82:bc:a3:00:7f:9e:
54:8f:dc:3f:2d:ed:9a:bf:31:4a:61:22:76:b7:b6:
80:de:3b:94:ca:96:05:a5:19:c1:44:d8:fd:0e:07:
eb:ee:d0:a0:ad:96:58:67:e6:9e:ad:ff:2a:80:9e:
5f:42:63:75:bd:8d:71:ec:5d:24:32:03:8d:aa:85:
b9:f5:28:c0:2b:ee:dd:18:ca:0c:04:9a:ce:82:ec:
60:69:94:4d:a0:92:8c:6b:31:1c:9d:ae:4b:a5:0e:
f6:6c:48:37:ba:46:e9:77:f2:38:38:b9:56:2a:c5:
95:3f:7b:30:a9:4c:c0:3c:39:02:38:bd:e6:79:06:
db:be:ad:e8:fe:ac:d0:44:45:ca:2a:b5:9a:0d:3d:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:93:2D:E5:FF:12:21:AF:3B:BE:D1:31:75:33:71:EB:2D:05:FA
X509v3 Authority Key Identifier:
keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/e82TLeX_EiGvO77RMXUzcestBfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.159.64.0/18
178.22.32.0/21
194.180.40.0/22
IPv6:
2a01:58a0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:2f:25:8b:dc:ff:37:74:f3:51:3e:61:c8:90:16:e1:15:51:
d2:97:85:ad:4c:a4:94:70:f9:87:11:89:4e:7f:2a:01:cb:08:
96:89:44:df:cc:72:98:db:86:35:a0:42:7b:f3:2a:28:ae:1e:
0b:fb:22:9b:a9:5b:3d:24:cb:c6:b8:3d:43:eb:c9:6c:da:ab:
12:04:56:23:96:4f:00:33:1d:31:0d:ab:f6:a1:35:11:ba:81:
17:46:c0:21:a2:3d:ee:2c:fe:5a:57:bd:f5:0f:af:4a:c5:72:
4a:92:db:e5:22:1a:cd:54:3a:37:70:2d:67:ff:0f:40:04:f0:
d5:cd:53:f5:ad:0e:03:2b:17:e9:43:23:80:b1:ec:7e:38:14:
11:72:1a:96:3f:1b:ce:c2:20:ac:5e:7b:6d:cd:8d:d5:5e:ef:
ac:21:bc:90:8c:50:6b:3e:78:ff:c1:dc:12:64:28:d7:70:77:
52:2c:47:2e:eb:ce:02:ed:cb:a0:7f:21:a4:fd:e0:8d:06:74:
2a:96:22:36:01:e2:66:6a:b3:3a:63:73:9b:cb:2a:ce:3b:a6:
74:6f:90:2e:37:4e:3a:41:01:77:3a:b3:56:f3:ac:c4:a4:80:
da:a7:12:14:0f:0c:8f:dd:41:7b:93:e4:84:3b:e3:99:e2:00:
fb:d6:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:01 2025 by rpki-client on console.sobornost.net