Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/uQkJp5gejSkWH0cMZgm49Hidyo8.roa
File: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (raw, json)
Hash identifier: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=
Subject key identifier: B9:09:09:A7:98:1E:8D:29:16:1F:47:0C:66:09:B8:F4:78:9D:CA:8F
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 01942747DA1849F5416CA333EE3E39A1D291
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/uQkJp5gejSkWH0cMZgm49Hidyo8.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48951
IP address blocks: 78.140.64.0/18 maxlen: 18
78.140.64.0/21 maxlen: 21
78.140.64.0/24 maxlen: 24
78.140.65.0/24 maxlen: 24
78.140.66.0/24 maxlen: 24
78.140.67.0/24 maxlen: 24
78.140.68.0/24 maxlen: 24
78.140.72.0/22 maxlen: 22
78.140.72.0/24 maxlen: 24
78.140.76.0/22 maxlen: 22
78.140.76.0/24 maxlen: 24
78.140.80.0/23 maxlen: 23
78.140.80.0/24 maxlen: 24
78.140.81.0/24 maxlen: 24
81.7.192.0/19 maxlen: 19
81.7.208.0/21 maxlen: 21
81.7.208.0/22 maxlen: 22
81.7.216.0/21 maxlen: 21
81.7.216.0/22 maxlen: 22
81.7.220.0/22 maxlen: 22
82.210.192.0/18 maxlen: 18
82.210.224.0/19 maxlen: 19
82.210.254.0/24 maxlen: 24
82.210.255.0/24 maxlen: 24
93.122.0.0/17 maxlen: 17
93.122.40.0/22 maxlen: 22
93.122.44.0/22 maxlen: 22
93.122.48.0/22 maxlen: 22
93.122.52.0/22 maxlen: 22
93.122.56.0/22 maxlen: 22
93.122.60.0/22 maxlen: 22
93.122.64.0/22 maxlen: 22
93.122.68.0/22 maxlen: 22
93.122.72.0/21 maxlen: 21
93.122.80.0/22 maxlen: 22
93.122.84.0/22 maxlen: 22
93.122.88.0/22 maxlen: 22
93.122.92.0/22 maxlen: 22
185.149.164.0/22 maxlen: 22
194.41.39.0/24 maxlen: 24
2a01:660::/29 maxlen: 29
2a01:664::/38 maxlen: 38
2a01:664:800::/38 maxlen: 38
2a01:664:1200::/39 maxlen: 39
2a01:664:1200::/40 maxlen: 40
2a01:664:1300::/40 maxlen: 40
2a01:664:1600::/40 maxlen: 40
2a01:664:1700::/40 maxlen: 40
2a01:664:1800::/40 maxlen: 40
2a01:664:1900::/40 maxlen: 40
2a01:664:1a00::/40 maxlen: 40
2a01:666::/32 maxlen: 32
2a01:666::/40 maxlen: 40
2a01:666:400::/40 maxlen: 40
2a01:667::/32 maxlen: 32
2a01:667::/40 maxlen: 40
2a01:667:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:da:18:49:f5:41:6c:a3:33:ee:3e:39:a1:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90909a7981e8d29161f470c6609b8f4789dca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:a3:46:ef:fb:29:ab:10:e2:02:c3:78:14:
52:d3:47:cc:1e:f9:cf:f0:fc:ad:91:1b:d0:99:a3:
76:11:38:73:99:30:e9:bd:ca:6d:ef:a6:96:e6:54:
c8:c2:0d:91:46:c7:e8:1c:65:fc:68:f1:37:66:ef:
2c:ac:fb:fc:0d:94:7b:09:b2:bf:00:b2:d2:76:02:
b9:e1:59:a9:c5:41:aa:51:9c:fe:98:dd:b8:3e:50:
c2:95:98:aa:35:26:43:27:60:8f:ca:cd:09:b5:b0:
7a:b6:b3:d5:85:e8:1f:ec:8f:02:be:ec:23:3b:bb:
c2:ae:5f:45:09:f2:5c:a0:43:6b:ac:b2:66:d2:80:
02:73:04:99:9b:d5:2e:0a:0e:7a:86:c3:d1:08:c5:
eb:b6:60:a7:76:d7:cc:44:91:5e:c0:a5:31:50:88:
aa:96:1e:41:35:12:95:7b:f1:6d:58:c2:ae:66:8e:
f6:97:a9:72:b4:c9:18:9b:e8:2a:af:31:ce:f4:f4:
b1:fb:1f:c2:aa:81:58:50:de:5a:bb:ea:0e:70:cc:
45:ee:a8:0c:a4:97:5b:74:9a:a1:dc:5d:83:b3:a0:
11:fc:f7:d1:ee:19:c3:5f:50:63:23:94:e8:3b:92:
a2:c3:36:52:c5:be:75:c6:9f:89:b6:c0:9a:d7:7a:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:09:A7:98:1E:8D:29:16:1F:47:0C:66:09:B8:F4:78:9D:CA:8F
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/uQkJp5gejSkWH0cMZgm49Hidyo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.64.0/18
81.7.192.0/19
82.210.192.0/18
93.122.0.0/17
185.149.164.0/22
194.41.39.0/24
IPv6:
2a01:660::/29
Signature Algorithm: sha256WithRSAEncryption
ac:e4:0a:5e:3e:f5:75:41:5b:f2:b9:07:e5:29:b3:a6:0b:8f:
17:4f:e5:8d:13:e0:d4:35:c6:f1:d1:fc:a6:5b:fb:fb:fd:fd:
4e:bd:50:c3:ce:db:8f:a7:52:fb:05:43:0a:05:e0:24:51:c3:
95:b6:3a:f0:ae:c9:53:a4:47:f4:6f:9e:2d:08:38:78:4a:a0:
d0:fc:0b:18:3f:32:e7:f5:4d:8e:e1:2b:3e:90:ad:8e:c3:5f:
4f:c2:40:ca:f0:d5:2b:00:28:23:1c:7e:30:57:8d:17:04:ab:
55:26:85:d1:c0:16:43:51:4b:cd:3c:99:46:6a:a7:9e:84:8c:
a5:b0:37:68:e0:0c:67:30:b4:c4:89:61:84:8a:89:47:a0:99:
ef:24:1b:36:01:9b:9a:37:5a:b2:1b:12:6c:a9:ae:3f:f4:ea:
df:22:50:ad:9a:42:75:e6:75:79:ea:48:fd:17:2d:c8:95:a8:
d6:34:fe:30:15:78:79:69:24:cd:d2:d9:fd:e2:c5:a2:41:fd:
d0:7d:68:1d:3b:66:25:4a:0b:1e:c8:1f:3e:2e:b6:29:44:38:
70:27:2f:17:cb:88:3f:e8:d3:7d:d5:4e:45:05:ce:63:db:9b:
09:3b:6c:a6:18:f0:86:6c:5c:e5:b3:0c:c1:a4:e8:08:e0:73:
07:7d:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:28 2025 by rpki-client