Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa
File: _iwCmsjTAlw634BVcFH9x4y6od0.roa (raw, json)
Hash identifier: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=
Subject key identifier: FE:2C:02:9A:C8:D3:02:5C:3A:DF:80:55:70:51:FD:C7:8C:BA:A1:DD
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 0194228E01D4ABF541B2F63C55B551BE1663
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212417
IP address blocks: 37.77.136.0/21 maxlen: 24
2a09:9a00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:01:d4:ab:f5:41:b2:f6:3c:55:b5:51:be:16:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe2c029ac8d3025c3adf80557051fdc78cbaa1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:e4:8d:a9:2f:a5:f9:77:70:f0:10:c3:df:
92:e9:88:91:3c:16:28:de:9e:c9:f7:9d:26:93:8f:
a5:5b:99:ce:1f:9e:af:b0:1e:15:34:d6:e2:7e:67:
95:b9:3d:e3:db:d5:48:5e:15:cc:80:0c:fd:06:97:
cf:43:3d:ed:5d:85:94:c9:35:93:79:a7:db:d2:d5:
c3:92:37:aa:d5:a5:de:6e:a9:b7:c4:f5:5c:54:98:
f7:d8:ea:56:45:06:98:4e:70:9b:d9:c9:70:12:2a:
f9:88:8f:80:aa:6e:9a:14:58:42:f9:bc:77:e7:76:
2d:49:22:ae:e6:b9:fb:ad:1f:d0:75:b1:d8:29:a5:
a4:8e:77:b7:b7:00:12:26:61:9b:c9:5c:ec:d3:0b:
31:8d:1b:cf:4e:70:bc:71:71:58:43:55:0c:bd:62:
75:e8:ee:f6:75:6c:97:8a:76:ae:d1:64:14:68:97:
e1:70:c4:60:fc:77:1f:d6:b2:b1:13:d5:e0:b3:fa:
ac:21:c7:62:20:2f:cf:26:10:6b:05:28:c2:07:63:
2e:cb:62:c2:d0:04:e7:24:67:ec:1e:92:36:21:7e:
ca:00:b3:88:1c:91:01:53:aa:53:f9:80:2d:68:c0:
c8:f2:84:5a:48:17:1c:53:e5:42:63:c1:40:91:da:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:02:9A:C8:D3:02:5C:3A:DF:80:55:70:51:FD:C7:8C:BA:A1:DD
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/_iwCmsjTAlw634BVcFH9x4y6od0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.136.0/21
IPv6:
2a09:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
69:ad:1f:ec:48:5a:ac:8c:99:7c:c1:1d:82:78:f2:65:16:23:
59:1b:3e:32:72:8e:bc:1d:cc:4f:a5:76:a9:eb:bb:cc:0b:f8:
32:a2:28:04:76:18:12:bd:86:d9:d8:c6:ca:2e:07:15:3b:39:
bb:77:91:4d:68:24:08:c0:81:d1:2b:5c:46:c3:34:d1:6c:fe:
5b:c6:4f:0b:40:13:ef:5c:38:7a:8e:6f:e1:2f:b2:29:ce:bc:
8c:8e:7f:10:d2:14:28:a2:d7:08:2d:fe:4d:db:3c:8e:96:fb:
93:88:27:44:58:0c:5f:48:5d:b0:4c:7f:4f:e5:dc:45:80:6b:
1f:f1:79:c2:af:bd:86:0c:bf:73:d2:e7:da:37:ae:e3:45:40:
88:ef:d0:5c:72:2d:dd:02:fa:f2:65:bf:50:8b:32:fb:57:c6:
47:83:84:f8:d7:44:43:11:c5:04:7a:7d:fc:47:9d:c7:01:e4:
40:f9:db:4f:03:31:fc:af:27:5e:d1:b6:95:47:28:b0:80:cd:
ef:36:57:b5:c7:00:91:e8:b6:fe:59:f2:01:c8:77:17:dd:42:
de:2b:f5:77:db:58:68:43:ef:86:ef:e6:00:41:10:3c:40:1e:
f0:3a:e0:bf:e3:06:0f:7c:16:06:a3:66:9d:da:ea:06:d0:ae:
92:40:7c:bc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijgHUq/VBsvY8VbVRvhZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj
YmI1ODkwHhcNMjUwMTAxMTU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTJjMDI5YWM4ZDMwMjVjM2FkZjgwNTU3MDUxZmRjNzhjYmFhMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa3kjakvpfl3cPAQw9+S6YiRPBYo
3p7J950mk4+lW5nOH56vsB4VNNbifmeVuT3j29VIXhXMgAz9BpfPQz3tXYWUyTWT
eafb0tXDkjeq1aXebqm3xPVcVJj32OpWRQaYTnCb2clwEir5iI+Aqm6aFFhC+bx3
53YtSSKu5rn7rR/QdbHYKaWkjne3twASJmGbyVzs0wsxjRvPTnC8cXFYQ1UMvWJ1
6O72dWyXinau0WQUaJfhcMRg/Hcf1rKxE9Xgs/qsIcdiIC/PJhBrBSjCB2Muy2LC
0ATnJGfsHpI2IX7KALOIHJEBU6pT+YAtaMDI8oRaSBccU+VCY8FAkdoW8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP4sAprI0wJcOt+AVXBR/ceMuqHdMB8GA1UdIwQY
MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt
ODRhMWZlOWQ0Yjc4LzEvX2l3Q21zalRBbHc2MzRCVmNGSDl4NHk2b2QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4
LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDJU2IMA0E
AgACMAcDBQMqCZoAMA0GCSqGSIb3DQEBCwUAA4IBAQBprR/sSFqsjJl8wR2CePJl
FiNZGz4yco68HcxPpXap67vMC/gyoigEdhgSvYbZ2MbKLgcVOzm7d5FNaCQIwIHR
K1xGwzTRbP5bxk8LQBPvXDh6jm/hL7IpzryMjn8Q0hQootcILf5N2zyOlvuTiCdE
WAxfSF2wTH9P5dxFgGsf8XnCr72GDL9z0ufaN67jRUCI79Bcci3dAvryZb9QizL7
V8ZHg4T410RDEcUEen38R53HAeRA+dtPAzH8ryde0baVRyiwgM3vNle1xwCR6Lb+
WfIByHcX3ULeK/V321hoQ++G7+YAQRA8QB7wOuC/4wYPfBYGo2ad2uoG0K6SQHy8
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:08 2025 by rpki-client