Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKizO8C-1c4rHjWdzwb6lBVTvik.roa
File: EKizO8C-1c4rHjWdzwb6lBVTvik.roa (raw, json)
Hash identifier: SZmAgT1IMgiX25q2hlVeWZD/rYJJl9dq9T1y/UTwB8g=
Subject key identifier: 10:A8:B3:3B:C0:BE:D5:CE:2B:1E:35:9D:CF:06:FA:94:15:53:BE:29
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194AC36E701A8006DB9D08038BD1FBF4429
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKizO8C-1c4rHjWdzwb6lBVTvik.roa
Signing time: Tue 28 Jan 2025 09:21:06 +0000
ROA not before: Tue 28 Jan 2025 09:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 77.76.0.0/23 maxlen: 23
77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.74.0/24 maxlen: 24
78.128.75.0/24 maxlen: 24
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.115.0/24 maxlen: 24
78.128.116.0/23 maxlen: 23
78.128.120.0/23 maxlen: 23
78.128.122.0/24 maxlen: 24
78.128.123.0/24 maxlen: 24
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.30.0/23 maxlen: 23
79.124.47.0/24 maxlen: 24
83.222.185.0/24 maxlen: 24
84.201.224.0/20 maxlen: 20
91.148.149.0/24 maxlen: 24
91.148.150.0/23 maxlen: 23
91.148.152.0/21 maxlen: 21
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.166.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/23 maxlen: 23
130.185.227.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:36:e7:01:a8:00:6d:b9:d0:80:38:bd:1f:bf:44:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 28 09:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a8b33bc0bed5ce2b1e359dcf06fa941553be29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:cc:ff:38:87:6d:9f:25:8b:68:80:0e:76:
c5:2c:9b:64:f2:f7:67:b3:0d:a4:00:5b:58:df:d4:
4b:a4:d7:28:53:5f:ff:b8:b8:74:7a:12:33:1e:9e:
dd:57:85:d0:4a:4a:c5:d3:5a:ed:74:0f:0a:c5:a9:
9c:11:6f:a4:35:b0:6b:b2:e6:78:a4:01:c9:85:22:
33:41:4e:44:58:44:cf:66:aa:04:b5:97:55:71:2c:
d6:f6:a5:39:9a:9b:50:6a:6a:93:b0:13:5f:99:f4:
7d:f0:a4:77:b4:3d:c3:38:d5:a1:f2:a7:f5:6e:44:
44:08:34:5d:34:38:f1:d6:d1:62:06:f3:94:15:a4:
b7:9a:f2:80:93:f0:b1:27:c5:f0:45:ec:31:c4:69:
3e:77:e0:df:8e:b1:70:84:f9:8c:de:d6:e0:f3:b0:
ec:b9:ce:4e:94:2f:d5:ee:d5:75:d6:1c:96:75:cf:
fe:a5:cc:de:80:b4:2a:bb:72:f2:3d:47:29:eb:6f:
18:d8:a3:59:cd:4a:83:10:c8:6f:de:6d:8c:d2:99:
c0:0f:2b:57:d3:3e:e6:be:96:b7:2a:12:b7:75:75:
c9:15:6c:55:35:5b:b7:7e:22:9c:bd:2e:ff:04:d2:
41:37:87:6f:9f:1e:f7:3e:4c:54:cb:7d:5a:49:5a:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:B3:3B:C0:BE:D5:CE:2B:1E:35:9D:CF:06:FA:94:15:53:BE:29
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKizO8C-1c4rHjWdzwb6lBVTvik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.0.0/23
77.76.4.0/22
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.74.0/23
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.115.0-78.128.117.255
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.30.0/23
79.124.47.0/24
83.222.185.0/24
84.201.224.0/20
91.148.149.0-91.148.159.255
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
130.185.227.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a0:c2:8c:2c:b6:b0:84:d9:79:49:29:22:21:a9:09:cc:9a:
5e:a9:0b:9e:f2:5a:5e:08:ad:3a:f6:5e:f7:af:da:c3:b2:ec:
7a:5a:ed:8d:d2:f1:1d:31:b8:e0:3f:8f:e6:39:cd:b1:56:8a:
54:bc:e6:8b:dc:e0:53:a2:a9:a3:95:3a:07:b2:ac:a5:89:ab:
a7:d2:fc:58:4e:63:2c:d9:17:40:7e:1b:9e:04:c6:2d:80:da:
10:e1:13:78:27:30:0d:c1:69:2e:2d:b2:92:3b:5e:bc:a3:63:
86:de:7a:c0:28:22:66:11:5c:c4:60:e6:54:51:71:79:70:02:
ba:ae:e8:9d:d5:9f:c8:ae:c9:25:eb:4a:ac:0b:74:21:5e:ac:
30:58:3b:14:82:80:57:26:70:68:98:43:f4:9f:2e:cc:e8:77:
73:45:ac:fe:4f:d7:f6:d6:7c:e4:48:43:d4:c6:25:5e:08:f9:
8f:3f:ea:0e:91:77:d7:25:13:ea:a8:1b:38:96:78:01:87:22:
e5:10:43:94:61:99:58:50:6d:af:75:56:e8:64:ca:c8:bc:14:
e8:4e:d1:72:8a:2f:ba:6f:dd:d4:a3:5c:d6:78:74:7f:f9:a8:
7a:c1:29:fd:86:3c:45:5c:6e:60:d9:d8:72:99:ec:7e:99:80:
33:b7:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:28 2025 by rpki-client