Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/J8Ib4FQqHMHCvKM2y1SUnog9X74.roa
File: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (raw, json)
Hash identifier: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=
Subject key identifier: 27:C2:1B:E0:54:2A:1C:C1:C2:BC:A3:36:CB:54:94:9E:88:3D:5F:BE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 01942827D567D50F4498A692CE18E5365EA2
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/J8Ib4FQqHMHCvKM2y1SUnog9X74.roa
Signing time: Thu 02 Jan 2025 17:54:46 +0000
ROA not before: Thu 02 Jan 2025 17:54:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42965
IP address blocks: 77.246.112.0/20 maxlen: 20
84.21.184.0/22 maxlen: 22
91.196.204.0/22 maxlen: 22
93.181.0.0/18 maxlen: 21
95.214.224.0/22 maxlen: 22
185.201.84.0/22 maxlen: 22
194.50.244.0/22 maxlen: 22
2a02:2f0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d5:67:d5:0f:44:98:a6:92:ce:18:e5:36:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jan 2 17:54:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c21be0542a1cc1c2bca336cb54949e883d5fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:3e:48:6a:e3:8a:41:7d:6f:7c:11:51:d4:
c4:49:98:b4:d0:d9:b7:e5:42:87:f2:99:60:76:21:
af:86:06:40:1b:5b:6a:8d:11:1a:d8:7e:0e:ac:d0:
92:8f:eb:5a:5e:64:ed:a5:fa:95:ce:b9:1f:f7:bc:
23:27:cc:8e:e6:b1:8d:af:c6:81:22:e7:5e:3f:eb:
3d:a2:7e:05:e8:34:49:8b:e6:f7:e0:69:37:b9:aa:
d0:d8:10:3c:7d:72:f5:8f:0f:5d:aa:47:d9:60:f6:
d3:21:96:50:ea:38:60:31:a2:2a:de:b0:36:a9:4c:
98:2f:c7:a9:94:72:f3:c1:f3:b6:2d:32:43:e1:db:
fd:ad:d1:c2:16:67:06:db:29:d1:bc:38:ff:b2:01:
f5:6a:db:d6:3a:c7:28:39:8f:b6:75:26:81:6d:dd:
cd:da:41:b7:8c:a8:9b:44:e7:f0:fa:aa:6c:31:a6:
74:a5:ef:e4:58:0a:d8:1e:fa:38:23:28:e6:9b:6b:
50:0f:3e:f4:2e:22:70:34:be:6e:9c:cd:bd:fd:94:
7a:27:e8:7c:eb:36:8f:8d:6e:e8:f4:65:d9:1e:68:
4b:6d:30:36:38:7b:05:86:bf:81:3c:1d:dd:9d:d8:
9d:39:29:a6:9f:bc:6f:05:25:14:8c:62:af:f2:27:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:1B:E0:54:2A:1C:C1:C2:BC:A3:36:CB:54:94:9E:88:3D:5F:BE
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/J8Ib4FQqHMHCvKM2y1SUnog9X74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.112.0/20
84.21.184.0/22
91.196.204.0/22
93.181.0.0/18
95.214.224.0/22
185.201.84.0/22
194.50.244.0/22
IPv6:
2a02:2f0::/29
Signature Algorithm: sha256WithRSAEncryption
45:ca:a1:73:d8:77:39:e3:8a:4c:10:d8:d4:93:23:e5:e8:78:
2f:bc:c5:ed:f1:4a:c8:04:cf:a3:c9:6a:a4:07:1b:ac:46:c8:
77:01:f0:80:37:3c:d4:55:57:d6:6c:70:cc:e1:88:24:17:0b:
72:36:bd:6d:b5:c5:97:44:c9:60:95:ef:93:9c:6b:2e:52:30:
d4:fc:6f:70:c0:a2:9b:c3:5a:a4:58:89:60:22:94:77:b8:6a:
90:12:99:76:a5:20:0e:b9:ba:a2:7a:ca:0e:b9:35:84:9f:9b:
92:3a:02:87:b2:72:75:96:94:c6:49:19:fd:e3:b9:2f:15:cc:
5c:e9:10:34:59:4c:00:3d:35:04:5c:55:91:d2:54:ce:3e:8a:
e8:70:92:5e:b0:fa:f1:c1:65:4e:c8:72:3a:f7:0f:ba:2e:e3:
1f:a5:51:f3:59:9f:c2:be:f8:0e:06:df:35:ee:2b:47:2c:6c:
63:c4:91:de:72:e0:b9:6a:64:71:cc:54:6a:50:dd:cb:5b:47:
64:78:58:74:64:8d:21:d4:6f:2f:83:94:db:a7:5a:e3:b1:3b:
21:64:21:8e:84:cf:95:a4:fd:5e:70:1f:95:8c:94:08:5e:7c:
b9:fc:13:5c:e0:53:40:70:74:75:2e:17:c5:15:10:40:89:b8:
70:18:60:d9
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZQoJ9Vn1Q9EmKaSzhjlNl6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVmYzhjZjAyYjhhNGUzNzJmYTViYzY0MDk0NGZlYmMy
NGYxZmUwHhcNMjUwMTAyMTc1NDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2MyMWJlMDU0MmExY2MxYzJiY2EzMzZjYjU0OTQ5ZTg4M2Q1ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qA+SGrjikF9b3wRUdTESZi00Nm3
5UKH8plgdiGvhgZAG1tqjREa2H4OrNCSj+taXmTtpfqVzrkf97wjJ8yO5rGNr8aB
IudeP+s9on4F6DRJi+b34Gk3uarQ2BA8fXL1jw9dqkfZYPbTIZZQ6jhgMaIq3rA2
qUyYL8eplHLzwfO2LTJD4dv9rdHCFmcG2ynRvDj/sgH1atvWOscoOY+2dSaBbd3N
2kG3jKibROfw+qpsMaZ0pe/kWArYHvo4Iyjmm2tQDz70LiJwNL5unM29/ZR6J+h8
6zaPjW7o9GXZHmhLbTA2OHsFhr+BPB3dndidOSmmn7xvBSUUjGKv8iezwwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFCfCG+BUKhzBwryjNstUlJ6IPV++MB8GA1UdIwQY
MBaAFAc1/IzwK4pONy+lvGQJRP68JPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMt
NzMxZTkzMzlkNmFjLzEvSjhJYjRGUXFITUhDdktNMnkxU1Vub2c5WDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMtNzMxZTkzMzlkNmFj
LzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQETfZwAwQC
VBW4AwQCW8TMAwQGXbUAAwQCX9bgAwQCuclUAwQCwjL0MA0EAgACMAcDBQMqAgLw
MA0GCSqGSIb3DQEBCwUAA4IBAQBFyqFz2Hc544pMENjUkyPl6HgvvMXt8UrIBM+j
yWqkBxusRsh3AfCANzzUVVfWbHDM4YgkFwtyNr1ttcWXRMlgle+TnGsuUjDU/G9w
wKKbw1qkWIlgIpR3uGqQEpl2pSAOubqiesoOuTWEn5uSOgKHsnJ1lpTGSRn947kv
Fcxc6RA0WUwAPTUEXFWR0lTOPorocJJesPrxwWVOyHI69w+6LuMfpVHzWZ/CvvgO
Bt817itHLGxjxJHecuC5amRxzFRqUN3LW0dkeFh0ZI0h1G8vg5Tbp1rjsTshZCGO
hM+VpP1ecB+VjJQIXny5/BNc4FNAcHR1LhfFFRBAibhwGGDZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:51 2025 by rpki-client