Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/V7WmFU14m96odb0vJ_cBmWZw2cs.roa
File: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (raw, json)
Hash identifier: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=
Subject key identifier: 57:B5:A6:15:4D:78:9B:DE:A8:75:BD:2F:27:F7:01:99:66:70:D9:CB
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01941FFA25C8E9DCB048C83C0034EAC882BD
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/V7WmFU14m96odb0vJ_cBmWZw2cs.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16030
IP address blocks: 77.75.176.0/21 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
185.184.148.0/22 maxlen: 24
185.184.149.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.151.0/24 maxlen: 24
212.121.224.0/19 maxlen: 24
212.121.225.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.234.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:25:c8:e9:dc:b0:48:c8:3c:00:34:ea:c8:82:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57b5a6154d789bdea875bd2f27f701996670d9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:3e:f7:c0:e3:73:d0:33:9b:0a:03:1e:3e:
2d:03:46:94:b1:db:5b:41:63:82:b9:b7:9d:03:a5:
73:a2:5c:7b:e4:96:24:36:fc:d1:7f:45:e6:eb:cf:
3d:9e:ae:6f:d4:d2:33:dd:0e:f4:ae:6d:bc:3a:7d:
94:cf:e9:a2:bb:35:21:ae:25:e9:40:17:7c:97:dc:
df:4f:d2:e0:15:10:a7:55:e8:48:a0:63:28:34:6d:
a0:6f:27:09:82:48:bc:dd:66:e1:42:9f:a2:d1:2c:
c3:19:09:4b:13:7b:cf:27:57:ae:11:79:9f:a9:08:
b7:0d:eb:01:cd:4e:ea:8a:a1:20:35:45:b4:61:f2:
1c:1e:09:9c:e8:fc:3e:f3:a4:f9:9f:e6:b6:d6:16:
c7:b9:a9:66:bf:3a:e8:29:ba:76:45:64:3f:ba:e6:
15:2c:9a:a0:c8:07:f5:b6:67:67:2b:45:b2:28:50:
0b:80:2d:75:64:9f:c4:ab:b8:52:3a:5e:59:03:7b:
b7:fe:6b:25:e5:cf:3f:d7:8a:82:c6:06:8b:c0:b8:
8f:65:23:89:f0:de:3a:c3:f1:a9:8d:6d:1e:21:ce:
d5:ea:3c:27:31:90:f8:ea:b3:3d:37:c7:c8:0d:b2:
22:83:d6:ac:6c:d6:0f:c7:62:5e:c9:59:c2:6c:9d:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:A6:15:4D:78:9B:DE:A8:75:BD:2F:27:F7:01:99:66:70:D9:CB
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/V7WmFU14m96odb0vJ_cBmWZw2cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
da:46:aa:7d:1c:ae:c9:c5:34:d5:30:bf:4a:cc:db:11:99:80:
88:a3:87:00:01:6e:d6:54:8a:b3:42:36:53:c5:da:5f:80:7d:
fc:c3:1b:95:85:39:6a:4b:67:6c:e3:ab:83:1e:15:d9:45:3c:
cb:6f:6e:c5:81:01:e7:4e:24:61:bf:27:02:62:ea:f6:10:ef:
06:00:61:69:7e:f2:14:c0:c7:36:9a:02:2f:44:1c:56:e6:2d:
43:50:e0:04:98:b8:87:fb:66:1c:9f:c2:53:e2:46:6c:18:85:
c7:25:10:2c:6b:84:bc:61:ca:56:9b:93:a5:b2:b7:cf:d3:1f:
68:0e:65:59:f3:7e:44:b1:66:05:d6:e1:2c:69:fa:f0:82:64:
55:2a:7f:cf:23:9f:c4:d5:cb:24:f5:70:e1:1d:48:bb:0c:fc:
39:8f:e3:72:f7:16:76:f1:65:7d:8d:31:c4:29:74:47:42:c1:
eb:ae:55:c7:2d:f8:e2:09:fb:34:c0:c8:1f:30:d0:e0:21:f9:
d7:4d:20:5f:6d:45:6a:51:25:48:05:74:e5:93:30:dd:f2:a7:
5b:29:a1:3e:4a:28:63:b4:bd:10:00:aa:06:8f:de:9c:0c:d5:
5a:33:b3:d9:87:27:1f:cb:af:15:64:30:de:d4:3e:b3:3e:b1:
b5:26:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:25 2025 by rpki-client