Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Duy0w8egSd6_tWOhbaPt5UeYgF0.roa
File: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (raw, json)
Hash identifier: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=
Subject key identifier: 0E:EC:B4:C3:C7:A0:49:DE:BF:B5:63:A1:6D:A3:ED:E5:47:98:80:5D
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019421B1F96E813BF1A30E38D8F5BC418AC0
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Duy0w8egSd6_tWOhbaPt5UeYgF0.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43152
IP address blocks: 77.95.203.0/24 maxlen: 24
109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.242.0/24 maxlen: 24
109.71.243.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.245.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
109.71.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f9:6e:81:3b:f1:a3:0e:38:d8:f5:bc:41:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eecb4c3c7a049debfb563a16da3ede54798805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:a1:87:f0:e6:2b:ed:86:05:7c:d2:9f:25:
cb:83:79:a1:f8:c4:20:35:a5:c8:4b:08:a3:a1:78:
f4:12:1e:62:b8:1e:00:79:70:c1:5f:ed:e2:fc:ba:
ea:12:d5:f7:79:5a:a0:4c:d3:3a:c8:da:59:55:26:
00:49:a6:8c:73:ff:02:42:5f:89:68:51:65:60:c4:
d0:9a:8a:9f:34:c0:7c:1c:7b:02:9a:fc:d0:34:83:
1f:16:77:2d:b6:b2:96:15:71:43:83:52:13:ab:60:
52:f3:3a:77:10:56:ea:6f:a6:d9:fd:d6:27:b9:18:
ed:f2:d6:93:9f:b0:9f:79:3e:c7:79:04:57:f4:f2:
05:64:11:6f:ea:6d:1c:f1:30:4c:02:2c:05:87:86:
d6:23:22:79:43:dd:53:41:42:a0:b7:07:5e:ab:e9:
77:38:62:7d:15:6d:5b:8a:49:ee:ca:c4:d9:16:ad:
30:63:36:42:65:3b:2a:38:b9:99:eb:56:f6:9e:b2:
3e:5d:08:6c:38:dc:99:78:f1:d1:84:9f:0a:ff:3b:
2a:96:6c:2d:78:16:4a:67:dd:a0:b9:b3:7f:a7:15:
85:4d:c5:d4:f8:15:c3:f3:a1:23:32:87:82:c0:22:
93:c1:f7:20:6a:ba:aa:f0:e9:3b:2a:41:14:57:65:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:B4:C3:C7:A0:49:DE:BF:B5:63:A1:6D:A3:ED:E5:47:98:80:5D
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/Duy0w8egSd6_tWOhbaPt5UeYgF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.203.0/24
109.71.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:0f:80:be:55:3a:7d:a7:2e:d4:c5:3c:14:fd:c1:a5:df:08:
ea:f8:27:68:d3:8f:01:a0:f1:6c:2f:bb:14:c5:08:e8:42:9e:
b0:95:47:8c:76:a8:63:89:29:3d:67:c0:36:81:4d:0b:7e:00:
64:7a:28:76:17:88:0e:90:6f:8b:a8:97:ea:dc:35:77:51:55:
6d:c1:48:61:b4:13:ca:3e:c2:e1:5c:06:29:ea:d2:00:a2:d8:
25:92:75:9f:28:8a:17:bf:7a:de:ef:9a:68:07:a9:98:43:c8:
58:40:ad:46:9e:46:e0:52:de:80:d3:8b:0a:45:98:ac:32:d5:
d3:d8:09:96:98:8d:c6:3d:c0:c6:30:58:ef:cc:69:71:1a:be:
16:6d:df:31:00:27:7d:cc:6b:0d:4c:05:4a:3d:2c:49:2f:2d:
49:1e:ab:b1:0b:29:39:e3:48:34:c3:7d:89:ef:cb:8c:f5:40:
98:45:d3:7f:86:3d:9a:1a:7b:a2:48:07:de:0a:72:16:c7:88:
41:4e:ce:dc:e8:85:8e:d1:b9:ef:e4:d5:af:79:5c:e3:f3:ea:
0a:cc:cc:59:f5:c4:1d:4b:0e:68:60:3d:2e:c8:a4:0c:1e:0c:
9d:9a:fb:44:74:f6:ed:2c:34:87:43:19:3d:41:17:b0:40:8b:
e7:8c:72:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsflugTvxow442PW8QYrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw
YWNjNDEwHhcNMjUwMTAxMTE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWVjYjRjM2M3YTA0OWRlYmZiNTYzYTE2ZGEzZWRlNTQ3OTg4MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcyhh/DmK+2GBXzSnyXLg3mh+MQg
NaXISwijoXj0Eh5iuB4AeXDBX+3i/LrqEtX3eVqgTNM6yNpZVSYASaaMc/8CQl+J
aFFlYMTQmoqfNMB8HHsCmvzQNIMfFncttrKWFXFDg1ITq2BS8zp3EFbqb6bZ/dYn
uRjt8taTn7CfeT7HeQRX9PIFZBFv6m0c8TBMAiwFh4bWIyJ5Q91TQUKgtwdeq+l3
OGJ9FW1biknuysTZFq0wYzZCZTsqOLmZ61b2nrI+XQhsONyZePHRhJ8K/zsqlmwt
eBZKZ92gubN/pxWFTcXU+BXD86EjMoeCwCKTwfcgarqq8Ok7KkEUV2XsIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA7stMPHoEnev7VjoW2j7eVHmIBdMB8GA1UdIwQY
MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt
M2JlOTk1ZDJiYmRhLzEvRHV5MHc4ZWdTZDZfdFdPaGJhUHQ1VWVZZ0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh
LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATV/LAwQD
bUfwMA0GCSqGSIb3DQEBCwUAA4IBAQCND4C+VTp9py7UxTwU/cGl3wjq+Cdo048B
oPFsL7sUxQjoQp6wlUeMdqhjiSk9Z8A2gU0LfgBkeih2F4gOkG+LqJfq3DV3UVVt
wUhhtBPKPsLhXAYp6tIAotglknWfKIoXv3re75poB6mYQ8hYQK1GnkbgUt6A04sK
RZisMtXT2AmWmI3GPcDGMFjvzGlxGr4Wbd8xACd9zGsNTAVKPSxJLy1JHquxCyk5
40g0w32J78uM9UCYRdN/hj2aGnuiSAfeCnIWx4hBTs7c6IWO0bnv5NWveVzj8+oK
zMxZ9cQdSw5oYD0uyKQMHgydmvtEdPbtLDSHQxk9QRewQIvnjHIL
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:03 2025 by rpki-client