Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/4ib--cnqLp0oi-QRP9CJRqv85Fk.roa
File: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (raw, json)
Hash identifier: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=
Subject key identifier: E2:26:FE:F9:C9:EA:2E:9D:28:8B:E4:11:3F:D0:89:46:AB:FC:E4:59
Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial: 019424B26DAE3DFBD05B2C657AA8CF2FD1BB
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/4ib--cnqLp0oi-QRP9CJRqv85Fk.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 77.27.140.0/22 maxlen: 22
77.27.148.0/22 maxlen: 22
83.165.112.0/21 maxlen: 21
91.116.156.0/22 maxlen: 22
91.116.160.0/22 maxlen: 22
91.116.220.0/22 maxlen: 22
91.116.236.0/22 maxlen: 22
91.116.244.0/22 maxlen: 22
91.117.16.0/21 maxlen: 21
91.117.40.0/22 maxlen: 22
91.117.72.0/22 maxlen: 22
91.117.108.0/22 maxlen: 22
91.117.176.0/22 maxlen: 22
91.117.228.0/22 maxlen: 22
93.156.192.0/21 maxlen: 21
93.156.200.0/21 maxlen: 21
93.156.208.0/21 maxlen: 21
93.156.216.0/21 maxlen: 21
93.156.224.0/21 maxlen: 21
93.156.232.0/21 maxlen: 21
93.156.240.0/21 maxlen: 21
93.156.248.0/21 maxlen: 21
178.60.4.0/22 maxlen: 22
178.60.180.0/22 maxlen: 22
178.60.184.0/22 maxlen: 22
213.60.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:ae:3d:fb:d0:5b:2c:65:7a:a8:cf:2f:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e226fef9c9ea2e9d288be4113fd08946abfce459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:d7:ee:99:00:8c:f7:62:6a:f9:fc:37:fd:
4d:bc:0e:2c:bf:aa:f8:1b:4b:ba:86:b0:8c:cf:a8:
20:8a:4c:fb:d6:c0:08:8f:46:0e:a1:c3:9a:62:c8:
19:22:50:e2:90:81:c3:ff:f5:72:50:5e:1a:37:31:
0d:fd:5d:d9:6c:e7:4d:85:6e:0d:b0:ff:c6:3b:0e:
1b:70:57:13:91:2b:5c:e3:09:6d:c4:c0:85:26:b4:
71:ad:32:51:1a:cf:05:05:78:e1:f6:06:cf:7c:c5:
e6:a8:2d:e5:be:0e:37:6e:a7:38:a0:e1:90:af:b4:
ef:c3:49:f0:7b:6f:9c:6c:df:25:96:2f:35:5a:90:
1c:65:dc:c7:8f:53:d4:a8:de:3c:c7:e3:03:ad:21:
b2:29:0d:6f:93:c0:85:3b:a1:55:09:1c:98:ea:89:
4e:55:f4:f1:f3:64:59:d1:42:66:74:44:08:c0:cd:
33:52:0c:ef:c4:91:02:0e:2a:4a:ed:04:6b:0e:b9:
08:13:9d:f0:a2:60:82:34:91:b5:d5:06:7c:ae:e2:
af:6b:9c:58:07:50:9f:b1:15:ef:1a:4d:84:49:d5:
59:f0:27:30:23:90:8a:91:95:a3:da:4e:c7:dc:20:
50:1f:38:f9:fd:04:29:18:bf:7b:03:3e:f5:73:22:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:FE:F9:C9:EA:2E:9D:28:8B:E4:11:3F:D0:89:46:AB:FC:E4:59
X509v3 Authority Key Identifier:
keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/4ib--cnqLp0oi-QRP9CJRqv85Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.27.140.0/22
77.27.148.0/22
83.165.112.0/21
91.116.156.0-91.116.163.255
91.116.220.0/22
91.116.236.0/22
91.116.244.0/22
91.117.16.0/21
91.117.40.0/22
91.117.72.0/22
91.117.108.0/22
91.117.176.0/22
91.117.228.0/22
93.156.192.0/18
178.60.4.0/22
178.60.180.0-178.60.187.255
213.60.76.0/22
Signature Algorithm: sha256WithRSAEncryption
25:97:cb:d5:24:df:5c:13:e3:2d:0c:d4:fb:74:32:b1:f7:16:
52:7f:48:df:e0:f5:9a:22:36:bf:9c:89:2e:6b:7d:a9:3a:bf:
b8:65:b1:56:92:de:2e:37:7c:2d:cd:05:29:3a:bf:0c:71:ef:
c2:88:ff:1d:40:1e:9c:09:b4:52:b2:4d:87:d2:90:90:3b:1d:
c8:ef:f5:df:97:b3:23:91:80:81:47:9e:c1:27:aa:cf:fa:38:
79:ec:35:f3:8e:46:e1:1d:c0:42:3d:33:df:09:31:f6:97:e7:
13:19:09:a7:db:05:1b:dd:10:fd:34:8a:a0:3f:e2:26:b5:36:
f0:10:88:af:41:33:43:e1:ae:49:f8:58:38:c3:fb:4f:15:e5:
3a:ee:7a:a2:b7:31:b6:9d:a7:a9:0f:05:9a:ca:31:c7:e8:04:
97:ab:84:37:99:53:0e:31:0f:37:11:39:a8:17:f1:a5:e6:a8:
90:99:16:46:67:b9:36:b2:57:98:a6:42:54:72:e1:de:09:74:
00:c0:02:a3:b7:1c:50:f2:77:5f:f3:41:54:b1:18:b6:8e:e1:
ae:5f:91:a8:dd:8f:e3:5c:32:fb:53:dd:6b:f6:ae:fb:87:9b:
a0:ab:81:dc:03:fa:07:b7:9b:18:9c:37:58:7b:11:f2:e8:3f:
d8:70:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:39 2025 by rpki-client