Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/m59Hw5TTd3iL4k-AJmszjnzqejs.roa
File: m59Hw5TTd3iL4k-AJmszjnzqejs.roa (raw, json)
Hash identifier: MFVhj0ei6aWXoFmI3DBbtg6kilc6p8Atkjj8RGegi9o=
Subject key identifier: 9B:9F:47:C3:94:D3:77:78:8B:E2:4F:80:26:6B:33:8E:7C:EA:7A:3B
Certificate issuer: /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial: 01942369581943B29184A674D11FE98C1D6D
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/m59Hw5TTd3iL4k-AJmszjnzqejs.roa
Signing time: Wed 01 Jan 2025 19:48:13 +0000
ROA not before: Wed 01 Jan 2025 19:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 77.247.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:58:19:43:b2:91:84:a6:74:d1:1f:e9:8c:1d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Validity
Not Before: Jan 1 19:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9f47c394d377788be24f80266b338e7cea7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:6b:cc:da:f3:b3:77:19:ef:35:93:1e:16:
5d:3d:ff:ca:f5:0f:36:50:dd:2b:b1:08:fb:c2:28:
79:ed:7e:00:66:72:ac:d2:7a:08:28:b6:dd:79:d2:
02:2f:d7:5f:ff:2c:8f:63:40:30:e1:19:50:6f:e5:
b0:48:e2:b9:c7:33:08:af:83:e9:09:de:2c:26:51:
1b:65:da:c6:da:f3:7e:9f:17:b6:f2:87:ec:37:61:
7a:8f:d5:43:d9:9c:93:48:d4:8f:be:b8:13:7c:1f:
09:3a:94:ea:45:e5:1c:5e:98:b9:3a:c1:bb:bb:8b:
da:f0:1c:a3:76:a2:fc:bd:80:1a:36:9d:68:c5:cd:
1b:c8:b9:dd:db:d0:16:d8:9f:e9:30:bf:07:9b:0c:
6f:ce:eb:41:23:ed:82:87:48:84:39:92:e1:0a:1b:
8f:bb:b7:99:41:a2:de:74:a0:3e:60:fe:3b:d5:26:
af:ed:20:5a:b6:91:c9:2e:9f:25:d7:18:e2:07:b0:
14:51:89:92:07:c2:3f:7c:66:fb:9b:d3:16:4d:28:
e5:ef:f8:b1:8a:2b:1e:30:ca:e9:68:68:63:90:69:
aa:51:75:62:43:05:f1:5f:eb:e6:4d:42:7a:8e:72:
66:7d:fd:68:17:86:2f:01:c9:83:14:9f:62:17:aa:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:47:C3:94:D3:77:78:8B:E2:4F:80:26:6B:33:8E:7C:EA:7A:3B
X509v3 Authority Key Identifier:
keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/m59Hw5TTd3iL4k-AJmszjnzqejs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.194.0/24
Signature Algorithm: sha256WithRSAEncryption
94:02:cf:c7:28:c4:2e:54:43:43:e6:ae:c4:72:c7:df:87:7c:
74:8d:d9:e9:f2:e1:e1:7d:54:7d:0c:17:0b:95:36:87:b6:e2:
0b:02:20:f4:27:c7:13:26:79:dd:ef:f6:34:f0:8b:21:6e:7f:
d4:c8:7d:1e:26:ce:39:06:ab:c4:10:8b:74:b4:50:fe:47:09:
11:5c:07:c7:a0:99:11:1d:9d:2d:f1:80:75:be:ab:b8:df:f0:
e9:d0:2a:02:59:8f:33:be:a4:46:53:7c:de:2a:b3:61:eb:b0:
5e:5c:c8:fc:f4:4b:5b:e2:ba:4c:dd:d0:70:57:76:90:e4:f2:
c8:08:19:6f:db:27:da:a2:67:93:54:b4:bc:f1:2a:f7:ba:5f:
4d:dc:55:5e:63:c2:ff:d7:b1:25:ce:92:49:14:0e:43:5f:46:
89:b1:0c:d1:a8:b4:dd:67:3f:81:05:c0:06:5c:1c:ec:eb:a4:
54:1c:51:ca:93:9a:31:9f:af:90:ed:4d:bc:0a:8d:e1:e5:7b:
2e:c5:dd:f3:ca:33:7c:40:80:7c:e8:c3:cb:96:48:55:30:25:
6d:82:4c:c9:bf:89:07:e2:79:5b:ec:86:70:bd:3a:c2:ea:9f:
ba:1c:16:79:26:a7:3e:f0:f9:72:fb:2f:61:67:db:02:16:6d:
d6:b6:41:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaVgZQ7KRhKZ00R/pjB1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmRjNWUyOTNlOWU3ZDcxYTk2ZTYxYzNkYmY2ODU4NWQ0
ZjgzMDUwHhcNMjUwMTAxMTk0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjlmNDdjMzk0ZDM3Nzc4OGJlMjRmODAyNjZiMzM4ZTdjZWE3YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+VrzNrzs3cZ7zWTHhZdPf/K9Q82
UN0rsQj7wih57X4AZnKs0noIKLbdedICL9df/yyPY0Aw4RlQb+WwSOK5xzMIr4Pp
Cd4sJlEbZdrG2vN+nxe28ofsN2F6j9VD2ZyTSNSPvrgTfB8JOpTqReUcXpi5OsG7
u4va8ByjdqL8vYAaNp1oxc0byLnd29AW2J/pML8HmwxvzutBI+2Ch0iEOZLhChuP
u7eZQaLedKA+YP471Sav7SBatpHJLp8l1xjiB7AUUYmSB8I/fGb7m9MWTSjl7/ix
iiseMMrpaGhjkGmqUXViQwXxX+vmTUJ6jnJmff1oF4YvAcmDFJ9iF6rOqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJufR8OU03d4i+JPgCZrM4586no7MB8GA1UdIwQY
MBaAFN39xeKT6efXGpbmHD2/aFhdT4MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2Yt
YmRhOTlhYjEzZDk5LzEvbTU5SHc1VFRkM2lMNGstQUptc3pqbnpxZWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2YtYmRhOTlhYjEzZDk5
LzEvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATffCMA0G
CSqGSIb3DQEBCwUAA4IBAQCUAs/HKMQuVEND5q7Ecsffh3x0jdnp8uHhfVR9DBcL
lTaHtuILAiD0J8cTJnnd7/Y08Ishbn/UyH0eJs45BqvEEIt0tFD+RwkRXAfHoJkR
HZ0t8YB1vqu43/Dp0CoCWY8zvqRGU3zeKrNh67BeXMj89Etb4rpM3dBwV3aQ5PLI
CBlv2yfaomeTVLS88Sr3ul9N3FVeY8L/17ElzpJJFA5DX0aJsQzRqLTdZz+BBcAG
XBzs66RUHFHKk5oxn6+Q7U28Co3h5Xsuxd3zyjN8QIB86MPLlkhVMCVtgkzJv4kH
4nlb7IZwvTrC6p+6HBZ5Jqc+8Ply+y9hZ9sCFm3WtkFT
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:14 2025 by rpki-client