Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/mD9HCoPMrtNOhw_tMKjvn5P_IcI.roa
File: mD9HCoPMrtNOhw_tMKjvn5P_IcI.roa (raw, json)
Hash identifier: CwbXBAvBi38KAhphUugYf0roKMJXRsdcG77eT9oAP58=
Subject key identifier: 98:3F:47:0A:83:CC:AE:D3:4E:87:0F:ED:30:A8:EF:9F:93:FF:21:C2
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 01942369560559281ACF30A6872F7D5E7328
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/mD9HCoPMrtNOhw_tMKjvn5P_IcI.roa
Signing time: Wed 01 Jan 2025 19:48:13 +0000
ROA not before: Wed 01 Jan 2025 19:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21430
IP address blocks: 31.7.240.0/21 maxlen: 21
77.78.64.0/22 maxlen: 22
77.78.68.0/23 maxlen: 23
77.78.74.0/23 maxlen: 23
77.78.80.0/21 maxlen: 21
77.78.88.0/22 maxlen: 24
77.78.88.0/23 maxlen: 23
77.78.91.0/24 maxlen: 24
77.78.92.0/23 maxlen: 24
77.78.122.0/24 maxlen: 24
80.250.0.0/19 maxlen: 19
81.0.196.0/23 maxlen: 23
81.0.198.0/24 maxlen: 24
81.0.200.0/22 maxlen: 22
81.0.204.0/23 maxlen: 23
81.0.210.0/23 maxlen: 23
81.0.215.0/24 maxlen: 24
81.0.216.0/24 maxlen: 24
81.0.222.0/23 maxlen: 23
81.0.224.0/24 maxlen: 24
81.0.227.0/24 maxlen: 24
81.0.229.0/24 maxlen: 24
81.0.244.0/23 maxlen: 23
81.0.251.0/24 maxlen: 24
81.0.252.0/23 maxlen: 23
82.208.0.0/22 maxlen: 22
82.208.13.0/24 maxlen: 24
82.208.15.0/24 maxlen: 24
82.208.19.0/24 maxlen: 24
82.208.24.0/23 maxlen: 23
82.208.30.0/23 maxlen: 24
82.208.36.0/23 maxlen: 23
82.208.38.0/24 maxlen: 24
82.208.42.0/23 maxlen: 23
82.208.45.0/24 maxlen: 24
82.208.51.0/24 maxlen: 24
82.208.52.0/22 maxlen: 22
82.208.57.0/24 maxlen: 24
82.208.59.0/24 maxlen: 24
83.136.200.0/21 maxlen: 21
85.239.224.0/23 maxlen: 23
85.239.226.0/24 maxlen: 24
85.239.228.0/23 maxlen: 23
85.239.251.0/24 maxlen: 24
85.239.254.0/23 maxlen: 23
109.123.200.0/23 maxlen: 23
109.123.201.0/24 maxlen: 24
109.123.204.0/24 maxlen: 24
109.123.212.0/23 maxlen: 23
109.123.226.0/24 maxlen: 24
185.33.136.0/22 maxlen: 22
185.161.240.0/22 maxlen: 22
217.11.226.0/24 maxlen: 24
217.11.231.0/24 maxlen: 24
217.11.234.0/24 maxlen: 24
217.11.237.0/24 maxlen: 24
217.11.238.0/23 maxlen: 23
217.11.240.0/23 maxlen: 23
217.11.244.0/24 maxlen: 24
217.11.250.0/24 maxlen: 24
217.11.252.0/23 maxlen: 23
217.11.255.0/24 maxlen: 24
2a01:6400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:56:05:59:28:1a:cf:30:a6:87:2f:7d:5e:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Jan 1 19:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983f470a83ccaed34e870fed30a8ef9f93ff21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:46:20:f4:e1:87:55:a9:20:ee:4f:32:b5:
1d:43:41:42:33:4a:6a:2b:07:b5:41:2a:c9:15:88:
65:56:2b:9f:1e:7f:44:52:a9:e2:9b:26:cd:cd:2a:
a4:5e:9f:a7:2b:27:fd:82:f6:6e:33:dc:b5:a2:0d:
ee:2f:f5:a0:9f:0f:bf:3d:00:f0:bd:96:b2:04:3d:
5d:fa:5b:a0:21:73:d6:d2:81:b7:fd:20:a6:c4:e1:
89:76:9d:22:91:6f:c3:4b:53:1f:bf:cf:6a:53:95:
27:e1:99:12:cf:93:3c:a2:b7:ec:ab:33:4e:15:17:
7d:b7:79:80:5e:bf:c1:51:72:e1:06:9e:89:62:82:
42:8c:bf:52:ca:26:a5:47:bd:68:27:53:56:15:7a:
0d:e9:1c:f9:11:af:e9:4f:87:eb:56:b3:2f:80:de:
8a:95:29:e8:ea:50:4c:8a:4a:a5:fd:b0:75:71:f0:
ad:80:f1:6f:7b:fe:0d:f2:8f:b6:a9:a5:18:36:74:
be:5d:ce:7a:c5:93:f3:91:e6:d4:2d:be:c9:aa:45:
4a:4c:a1:01:83:fe:14:f1:e1:7e:7c:b8:e4:ab:50:
00:5e:94:23:13:33:25:db:bc:7a:ab:f2:a3:33:e8:
83:22:0e:b1:1d:49:0f:5c:3d:0a:bc:ee:f3:bb:4a:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:47:0A:83:CC:AE:D3:4E:87:0F:ED:30:A8:EF:9F:93:FF:21:C2
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/mD9HCoPMrtNOhw_tMKjvn5P_IcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.240.0/21
77.78.64.0-77.78.69.255
77.78.74.0/23
77.78.80.0-77.78.93.255
77.78.122.0/24
80.250.0.0/19
81.0.196.0-81.0.198.255
81.0.200.0-81.0.205.255
81.0.210.0/23
81.0.215.0-81.0.216.255
81.0.222.0-81.0.224.255
81.0.227.0/24
81.0.229.0/24
81.0.244.0/23
81.0.251.0-81.0.253.255
82.208.0.0/22
82.208.13.0/24
82.208.15.0/24
82.208.19.0/24
82.208.24.0/23
82.208.30.0/23
82.208.36.0-82.208.38.255
82.208.42.0/23
82.208.45.0/24
82.208.51.0-82.208.55.255
82.208.57.0/24
82.208.59.0/24
83.136.200.0/21
85.239.224.0-85.239.226.255
85.239.228.0/23
85.239.251.0/24
85.239.254.0/23
109.123.200.0/23
109.123.204.0/24
109.123.212.0/23
109.123.226.0/24
185.33.136.0/22
185.161.240.0/22
217.11.226.0/24
217.11.231.0/24
217.11.234.0/24
217.11.237.0-217.11.241.255
217.11.244.0/24
217.11.250.0/24
217.11.252.0/23
217.11.255.0/24
IPv6:
2a01:6400::/32
Signature Algorithm: sha256WithRSAEncryption
61:1d:3d:51:99:2d:ac:63:30:68:fa:c3:20:05:ea:5d:a5:a5:
d3:7e:81:b0:de:23:01:0e:2e:e8:12:70:0c:6a:b1:15:ad:fa:
c8:54:db:04:9c:6f:fd:e7:b5:4d:28:af:76:0f:68:4f:db:a8:
c6:98:a3:24:56:f9:d8:4b:95:26:25:ce:63:26:b2:c8:bf:5b:
07:47:a7:29:0a:e0:ab:29:26:39:d8:f4:9f:ab:db:9d:76:fb:
43:90:72:81:a5:03:2e:79:69:29:fb:df:4a:89:cd:e7:b0:f5:
7b:32:b0:8f:dc:be:1f:5a:69:9b:f2:91:cb:57:d7:e0:4d:9f:
4b:2e:28:33:5d:29:bf:dc:e0:24:1e:e7:e2:8b:f3:0e:9f:d9:
24:e2:fa:83:bd:85:7a:20:b8:99:53:bb:c3:88:65:68:66:40:
3d:c3:62:73:18:f9:02:3a:5d:03:71:f1:99:b2:d8:3c:90:e1:
56:5d:73:a9:71:e3:91:a2:0a:45:ec:33:32:c6:5c:aa:f5:91:
3e:c8:e5:5e:9c:28:c9:88:e4:c3:02:7b:52:c4:9a:02:14:04:
6e:f2:30:78:64:38:79:bd:6c:f4:6e:88:96:4f:ec:74:55:9b:
ed:c2:6d:cb:88:58:23:fd:5e:48:c7:52:8b:3d:35:86:45:10:
00:28:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:45 2025 by rpki-client