Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/rpe0x16NWMVETT_zIYqdhzzS3TQ.roa
File: rpe0x16NWMVETT_zIYqdhzzS3TQ.roa (raw, json)
Hash identifier: m25v85QVba6OjpEW6q8bvmdq1LzHbur5TVGmUP+SJnQ=
Subject key identifier: AE:97:B4:C7:5E:8D:58:C5:44:4D:3F:F3:21:8A:9D:87:3C:D2:DD:34
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 01942D039C64A9AB9F2D59F26948041089BE
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/rpe0x16NWMVETT_zIYqdhzzS3TQ.roa
Signing time: Fri 03 Jan 2025 16:33:18 +0000
ROA not before: Fri 03 Jan 2025 16:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 77.73.64.0/23 maxlen: 23
77.73.71.0/24 maxlen: 24
91.197.0.0/22 maxlen: 22
94.242.48.0/24 maxlen: 24
185.22.172.0/22 maxlen: 22
185.145.245.0/24 maxlen: 24
185.155.119.0/24 maxlen: 24
185.242.104.0/22 maxlen: 22
185.242.106.0/23 maxlen: 23
212.6.44.0/24 maxlen: 24
2a0c:16c0::/32 maxlen: 32
2a0c:16c1::/32 maxlen: 32
2a0c:16c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:03:9c:64:a9:ab:9f:2d:59:f2:69:48:04:10:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Jan 3 16:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae97b4c75e8d58c5444d3ff3218a9d873cd2dd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:d7:52:8c:50:e3:31:35:a1:11:ac:20:96:
9a:1e:03:c1:1d:7d:cc:6a:a8:a4:28:39:90:1c:13:
cb:fe:16:d7:c8:e6:c8:4f:cc:34:d8:a1:25:17:53:
d2:35:aa:27:34:0d:58:a3:a2:35:24:f4:76:71:c1:
27:1f:50:19:49:82:66:9a:5f:0b:13:d4:06:60:3a:
ba:43:46:24:66:99:f8:bf:51:80:1c:56:3d:4a:c0:
83:3a:af:f6:0b:f0:8c:d3:c3:34:8a:b9:9f:57:ff:
63:22:e7:51:6c:d7:e8:7a:61:28:9e:08:55:19:63:
97:62:78:f0:e5:33:46:34:f7:ce:df:ad:bf:04:dc:
d3:cb:2d:09:c5:89:a6:80:91:50:87:92:0a:91:88:
36:31:95:9c:1b:24:96:65:f3:3c:30:43:df:67:ce:
b9:fc:01:48:49:d6:b1:00:e0:ca:e2:f2:7b:d1:88:
e6:7f:4f:2d:cc:39:7f:8c:dd:c8:f9:36:6b:81:d5:
54:1d:cf:1e:6f:4b:84:21:07:88:d2:4b:54:49:3e:
10:83:0e:8b:7e:c9:ab:b6:5c:4d:ed:94:88:10:65:
b4:67:d8:c4:cc:eb:dc:ee:ee:19:4a:b4:50:7e:0e:
ed:76:0d:ad:ff:3c:f5:38:66:9a:68:31:ea:7c:10:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:B4:C7:5E:8D:58:C5:44:4D:3F:F3:21:8A:9D:87:3C:D2:DD:34
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/rpe0x16NWMVETT_zIYqdhzzS3TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.64.0/23
77.73.71.0/24
91.197.0.0/22
94.242.48.0/24
185.22.172.0/22
185.145.245.0/24
185.155.119.0/24
185.242.104.0/22
212.6.44.0/24
IPv6:
2a0c:16c0::-2a0c:16c2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:85:c5:d1:18:95:67:b7:f8:3b:27:9c:b6:9c:47:54:e4:78:
4a:44:47:e5:20:4a:51:6e:3e:0e:57:1e:51:b5:30:c0:8a:10:
e8:ae:75:9e:d9:90:d4:b1:8f:ef:89:99:cd:63:f2:67:12:ca:
f6:40:49:67:34:64:a5:5f:20:65:d3:6b:f7:86:c4:16:ff:04:
8d:fc:cd:b4:14:74:a7:65:7f:b5:b2:e9:df:c7:e7:11:69:7c:
fa:90:9c:0b:f6:a6:89:1d:27:22:85:89:21:f0:43:c0:80:01:
c3:f4:de:7e:89:79:44:cf:0e:57:7f:5f:93:d1:41:63:a2:67:
33:53:d0:6e:fa:cd:c4:04:1c:4a:49:49:b7:91:29:39:0f:b5:
d3:2f:2e:ed:94:a7:02:94:15:a7:31:74:41:2c:c1:44:44:8a:
5e:ae:15:d3:5f:53:d7:3a:0e:9b:44:45:91:24:19:10:a9:2f:
6d:76:e2:bd:1b:e0:8b:ca:de:47:a8:59:ac:17:94:ba:85:8e:
c5:fa:99:6c:bf:56:ce:02:14:f6:10:3b:d1:2f:c4:f1:b9:a4:
c6:c2:f4:db:67:28:c9:74:c4:d6:df:b6:00:cf:b8:e4:05:4e:
d0:8b:40:4b:62:6b:eb:c2:ba:d9:2a:c6:1d:44:d4:9e:cf:70:
67:f2:b8:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZQtA5xkqaufLVnyaUgEEIm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTI0YjQ3Zjg5NDNjYWQ2ZTA0YzlmNjQ2Y2IxMDc3YzE0
MGZkZmIwHhcNMjUwMTAzMTYzMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTk3YjRjNzVlOGQ1OGM1NDQ0ZDNmZjMyMThhOWQ4NzNjZDJkZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JHXUoxQ4zE1oRGsIJaaHgPBHX3M
aqikKDmQHBPL/hbXyObIT8w02KElF1PSNaonNA1Yo6I1JPR2ccEnH1AZSYJmml8L
E9QGYDq6Q0YkZpn4v1GAHFY9SsCDOq/2C/CM08M0irmfV/9jIudRbNfoemEonghV
GWOXYnjw5TNGNPfO362/BNzTyy0JxYmmgJFQh5IKkYg2MZWcGySWZfM8MEPfZ865
/AFISdaxAODK4vJ70Yjmf08tzDl/jN3I+TZrgdVUHc8eb0uEIQeI0ktUST4Qgw6L
fsmrtlxN7ZSIEGW0Z9jEzOvc7u4ZSrRQfg7tdg2t/zz1OGaaaDHqfBAmbQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFK6XtMdejVjFRE0/8yGKnYc80t00MB8GA1UdIwQY
MBaAFHniS0f4lDytbgTJ9kbLEHfBQP37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQt
YmM1ODRiMzZjYmVmLzEvcnBlMHgxNk5XTVZFVFRfeklZcWRoenpTM1RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQtYmM1ODRiMzZjYmVm
LzEvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQBTUlAAwQA
TUlHAwQCW8UAAwQAXvIwAwQCuRasAwQAuZH1AwQAuZt3AwQCufJoAwQA1AYsMBYE
AgACMBAwDgMFBioMFsADBQAqDBbCMA0GCSqGSIb3DQEBCwUAA4IBAQCRhcXRGJVn
t/g7J5y2nEdU5HhKREflIEpRbj4OVx5RtTDAihDornWe2ZDUsY/viZnNY/JnEsr2
QElnNGSlXyBl02v3hsQW/wSN/M20FHSnZX+1sunfx+cRaXz6kJwL9qaJHScihYkh
8EPAgAHD9N5+iXlEzw5Xf1+T0UFjomczU9Bu+s3EBBxKSUm3kSk5D7XTLy7tlKcC
lBWnMXRBLMFERIperhXTX1PXOg6bREWRJBkQqS9tduK9G+CLyt5HqFmsF5S6hY7F
+plsv1bOAhT2EDvRL8TxuaTGwvTbZyjJdMTW37YAz7jkBU7Qi0BLYmvrwrrZKsYd
RNSez3Bn8riv
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:17 2025 by rpki-client