Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1-sk09ZTEI3A0YuQCVj9nzqwna-o.roa
File: 1-sk09ZTEI3A0YuQCVj9nzqwna-o.roa (raw, json)
Hash identifier: ULhMdY/ZA2oKsAZaVWHfS9xYHIKLbnpGBZU2K+9qRWg=
Subject key identifier: FA:C9:34:F5:94:C4:23:70:34:62:E4:02:56:3F:67:CE:AC:27:6B:EA
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019426D9C299E000D45D79FA356E7B01FEE8
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1-sk09ZTEI3A0YuQCVj9nzqwna-o.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c2:99:e0:00:d4:5d:79:fa:35:6e:7b:01:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac934f594c423703462e402563f67ceac276bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:f5:40:93:7b:5e:da:b9:1f:95:f8:c5:e0:
b5:81:f2:2d:ab:00:8e:f5:66:b3:71:e8:98:24:3d:
f0:dc:2b:9a:44:6b:10:77:aa:5e:b5:0b:38:09:6d:
8f:02:04:98:8c:3a:0f:00:72:e1:21:01:29:dd:92:
cd:74:f0:56:fd:2f:c2:02:00:59:a1:a5:41:40:30:
db:c3:6a:29:2f:0b:28:09:05:48:83:0a:9a:e4:cd:
b0:d2:e8:80:3d:63:00:80:b6:a0:19:0f:03:54:04:
c2:c4:bf:cb:01:1f:67:0e:0a:52:1d:e3:3b:df:e1:
69:51:62:ea:75:0d:ca:37:b9:34:e1:ea:ba:9b:f1:
e4:57:d3:05:51:f7:72:a1:87:f3:69:0a:b3:dd:a6:
62:e3:3e:b9:28:92:02:e1:7c:e2:41:06:d0:3f:a7:
07:69:4f:77:98:12:2d:4f:fa:7c:0b:7f:07:5f:e6:
cd:26:e0:f3:17:94:99:0e:5b:55:72:b7:fe:18:5e:
ad:ab:14:b8:a2:31:8a:44:91:86:7a:6a:f3:c1:63:
0e:3c:6e:67:b6:a5:06:91:8d:d7:1f:60:dd:c6:23:
41:4c:f2:21:67:47:9b:af:a4:03:95:6d:86:a2:17:
51:2e:f4:f6:8b:fc:76:ef:ef:9d:0e:b4:f4:48:9e:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:34:F5:94:C4:23:70:34:62:E4:02:56:3F:67:CE:AC:27:6B:EA
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1-sk09ZTEI3A0YuQCVj9nzqwna-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
31.40.242.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0-213.144.101.255
213.144.103.0-213.144.127.255
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
bb:6d:03:c6:24:bb:a9:60:3d:4d:22:62:eb:b1:14:0e:7c:c5:
e0:29:08:ec:13:5c:8e:29:54:a6:2b:80:6e:c3:33:51:cd:08:
29:7d:7f:65:b6:dc:01:bb:47:f1:c7:73:81:18:61:fd:21:28:
8a:8d:b7:c3:95:b4:1e:4b:ed:c3:3f:33:0b:13:7c:f7:96:ed:
58:75:63:2c:29:91:4e:e2:6d:c8:ba:9e:ca:3b:c2:55:19:24:
49:2f:99:e5:c0:20:3a:15:18:17:68:eb:01:b4:dd:86:fe:cc:
77:b5:d2:6c:98:1d:05:74:2d:dd:17:d2:e3:d6:0f:4e:6b:47:
a1:36:ae:57:4d:0c:58:fd:69:9d:9a:b1:31:ee:02:0a:5e:df:
bf:0d:b4:6d:1e:fa:d7:00:d3:78:65:cd:79:45:54:0f:34:d4:
af:29:9f:a2:6a:64:8a:9f:1b:61:91:3e:2e:83:73:ab:6a:25:
92:10:4a:35:c3:7f:f9:63:8d:78:54:7f:8d:35:27:2d:c2:da:
57:e4:83:05:3b:e5:31:87:27:db:d9:98:fd:47:81:3f:38:f7:
b6:df:81:21:92:98:ac:84:cc:ab:54:df:fc:44:14:6a:99:e9:
2c:59:c1:af:0f:9f:57:51:79:04:25:f1:13:64:76:4d:3a:2c:
5a:8c:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:37 2025 by rpki-client