Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/5_1Oehi1GaiGFF5FcoEXudKt-rg.roa
File: 5_1Oehi1GaiGFF5FcoEXudKt-rg.roa (raw, json)
Hash identifier: +IrkWyDfHszKgk2p5jRqK6M5yZERwh+OnuDNPN9qm8s=
Subject key identifier: E7:FD:4E:7A:18:B5:19:A8:86:14:5E:45:72:81:17:B9:D2:AD:FA:B8
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019420D6263D03277995110820033266F108
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/5_1Oehi1GaiGFF5FcoEXudKt-rg.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200107
IP address blocks: 77.74.176.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
82.202.185.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.227.0/24 maxlen: 24
93.159.228.0/23 maxlen: 24
93.159.230.0/23 maxlen: 23
185.54.220.0/24 maxlen: 24
185.54.221.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.223.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.15.0/24 maxlen: 24
195.128.246.0/23 maxlen: 24
2a03:2480:68::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8000::/48 maxlen: 48
2a03:2480:8010::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8028::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:802f::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8031::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:26:3d:03:27:79:95:11:08:20:03:32:66:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fd4e7a18b519a886145e45728117b9d2adfab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:c9:cb:c9:68:3d:34:1f:5b:15:24:06:e6:
b2:69:ad:d0:3f:46:4a:4b:32:dd:cd:41:95:a4:e7:
e7:dd:15:e8:e2:57:fa:db:52:2b:d2:0d:1d:d5:a8:
27:c8:62:ce:3b:cc:81:11:52:eb:cb:78:d8:c3:c8:
3d:63:ac:dc:8f:74:7b:31:36:ae:2a:52:08:b2:43:
a0:f1:d9:26:56:d9:3b:e3:48:2c:16:05:be:fc:c0:
b8:03:c8:04:52:79:9d:5c:56:0b:10:36:6c:fe:a1:
98:ed:95:54:56:38:81:99:67:29:68:40:7a:68:42:
da:ac:79:44:3e:ea:84:26:ee:d7:82:d9:50:e2:17:
a7:08:6e:82:05:9d:3d:9a:d6:56:c1:22:e3:44:43:
83:b5:dc:b2:68:29:14:dc:06:8b:3a:1e:f8:06:6f:
8a:92:a3:76:bc:66:63:d8:d1:59:27:30:b3:7e:bf:
78:22:96:a0:7b:73:73:c0:e2:ad:81:80:c4:77:89:
82:fc:cf:3c:88:16:0f:de:58:de:1c:b3:9e:27:99:
b5:47:2e:ac:d1:db:72:ad:2e:e5:bd:14:07:85:f0:
2c:a0:fd:4f:5a:82:1d:44:45:24:ec:1f:a3:7e:54:
2b:07:8f:a9:fa:ab:df:81:d6:e1:f1:61:24:42:8c:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:4E:7A:18:B5:19:A8:86:14:5E:45:72:81:17:B9:D2:AD:FA:B8
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/5_1Oehi1GaiGFF5FcoEXudKt-rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.176.0/21
82.202.184.0/23
93.159.226.0-93.159.231.255
185.54.220.0/22
185.85.12.0/24
185.85.14.0/23
195.128.246.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::/48
2a03:2480:8010::/48
2a03:2480:8020::/46
2a03:2480:8025::-2a03:2480:802b:ffff:ffff:ffff:ffff:ffff
2a03:2480:802d::-2a03:2480:8033:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:ea:b3:06:22:30:a2:11:e9:9a:d6:f3:1a:56:dd:d6:90:8f:
75:d1:32:72:64:16:98:d9:41:12:bf:b8:18:5d:18:ad:d1:8e:
8d:c1:ac:55:c3:b8:39:b4:14:f4:f5:0e:28:e9:7e:e3:a6:d3:
70:8f:1e:17:01:06:ef:ef:57:ed:4e:8a:2c:20:b6:95:e2:bb:
e7:da:fe:3e:4a:fc:98:14:28:16:15:75:46:0d:45:97:a2:94:
5b:3c:3b:50:d5:a7:56:be:71:cc:4a:9d:dc:9c:97:38:8c:fb:
3b:19:d9:e4:a6:e8:0e:4d:d3:f6:dc:9c:30:49:91:be:33:5f:
18:86:ea:68:75:15:e1:93:3f:7b:40:1d:f1:9b:2b:a2:c3:a7:
a9:ea:26:3e:97:bf:7d:5f:b4:d2:a1:65:28:1b:b7:88:8c:c2:
00:11:5b:45:81:89:ed:c9:59:94:7c:bc:e2:97:6f:29:e2:72:
28:ad:58:80:ed:c4:ae:23:86:48:81:e8:dd:16:19:b7:40:e7:
0c:aa:2c:25:8a:fa:04:94:52:b6:ea:81:29:7d:e9:d1:aa:19:
1f:31:f8:f0:02:64:26:1a:cd:f2:a4:e5:1d:0a:5d:ff:d1:90:
05:8c:c2:15:92:ee:05:2b:9a:01:3e:ca:37:85:a0:f8:a2:61:
34:08:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:26 2025 by rpki-client