Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/V8-ToP-No1rRKocG9Fs66tbVPI4.roa
File: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (raw, json)
Hash identifier: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=
Subject key identifier: 57:CF:93:A0:FF:8D:A3:5A:D1:2A:87:06:F4:5B:3A:EA:D6:D5:3C:8E
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8F9CCB30628DF26E9BBFF8405070
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/V8-ToP-No1rRKocG9Fs66tbVPI4.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197184
IP address blocks: 82.119.88.0/23 maxlen: 23
82.119.89.0/24 maxlen: 24
85.14.8.0/22 maxlen: 22
85.14.8.0/24 maxlen: 24
85.14.9.0/24 maxlen: 24
85.14.10.0/24 maxlen: 24
85.14.11.0/24 maxlen: 24
85.14.52.0/22 maxlen: 22
85.14.52.0/23 maxlen: 23
85.14.52.0/24 maxlen: 24
85.14.53.0/24 maxlen: 24
85.14.54.0/23 maxlen: 23
85.14.54.0/24 maxlen: 24
85.14.55.0/24 maxlen: 24
89.252.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:9c:cb:30:62:8d:f2:6e:9b:bf:f8:40:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57cf93a0ff8da35ad12a8706f45b3aead6d53c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:58:6b:39:fb:ae:c0:93:1e:39:30:29:46:
de:f8:4d:13:20:5a:5a:b9:78:3a:b0:25:af:c2:be:
4b:b8:a6:9f:b4:d7:a0:f5:94:03:24:bb:be:44:37:
de:2d:59:37:cf:fa:ab:f3:bd:e3:2e:31:04:f5:87:
2e:81:9c:44:73:be:c5:36:43:4f:06:d7:e8:97:8b:
97:85:fb:9b:e3:ed:49:b8:c9:b3:58:69:7b:2a:31:
4c:d7:c4:5d:2e:48:44:5f:3b:4e:f5:33:de:7f:85:
1b:2b:be:93:8e:99:8d:e3:8e:4a:02:f3:b4:db:0f:
94:2b:cb:53:53:47:a0:f2:0f:d9:33:5f:d1:94:ba:
45:bd:1b:f3:a6:cc:9b:93:fa:a9:be:79:3b:8b:6c:
4a:53:94:d0:b2:99:50:02:8e:ff:09:d9:e1:0b:0d:
56:43:5a:41:50:71:27:b1:f8:92:0a:a2:80:76:cf:
69:a3:19:aa:cf:8b:80:8e:16:7a:25:ad:4e:d5:76:
55:09:a0:57:5d:04:c6:e1:6a:29:79:ff:6e:00:b3:
5b:aa:53:0c:24:6d:93:46:19:5e:3c:c8:5f:3a:38:
38:d7:8a:2f:d5:7b:27:5c:09:a0:04:f4:15:ae:1c:
3f:d7:7a:92:82:80:99:b3:d1:79:d0:fb:bc:79:2b:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:93:A0:FF:8D:A3:5A:D1:2A:87:06:F4:5B:3A:EA:D6:D5:3C:8E
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/V8-ToP-No1rRKocG9Fs66tbVPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.88.0/23
85.14.8.0/22
85.14.52.0/22
89.252.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:43:5e:18:9d:1f:20:de:f4:b7:53:7a:6a:eb:75:9e:0a:ad:
cc:77:59:ce:d6:93:4a:4f:59:9c:10:95:d0:36:84:36:f6:af:
2d:26:e8:b6:e3:33:31:28:78:0c:4c:c2:eb:55:ef:67:b0:65:
dc:1e:f0:dd:ab:9a:23:83:e4:66:3f:e5:a9:1c:07:dd:17:95:
0b:bb:40:81:ee:40:16:91:86:57:fa:43:2a:99:58:4c:34:df:
f1:d1:99:55:52:25:98:5f:68:dc:c4:cf:21:f0:c1:d2:e0:24:
02:37:50:3f:fd:29:f0:0b:1d:8f:4c:6d:30:51:5e:db:17:a9:
d9:65:d9:d2:a5:40:f8:1b:4f:bb:a1:1f:0c:65:44:13:f8:64:
26:92:45:ba:be:95:63:80:29:9f:a6:81:09:54:b6:f7:63:d5:
b4:49:51:f9:66:f6:b1:0b:5b:03:ab:50:32:88:98:fb:06:62:
93:20:ba:77:87:2f:cc:73:50:cb:37:cd:20:ed:05:dd:dc:70:
e3:33:8b:f5:e7:da:21:53:a1:21:8f:9d:40:76:41:1e:0b:b9:
28:1d:41:fe:77:ab:89:34:c5:0f:29:0b:5c:4c:d8:14:3f:e2:
b7:ea:52:b4:a6:1c:15:76:05:ab:7f:08:5c:5e:11:cf:ec:73:
ab:55:27:79
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQiH4+cyzBijfJum7/4QFBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjUwMTAxMTM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2NmOTNhMGZmOGRhMzVhZDEyYTg3MDZmNDViM2FlYWQ2ZDUzYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqRYazn7rsCTHjkwKUbe+E0TIFpa
uXg6sCWvwr5LuKaftNeg9ZQDJLu+RDfeLVk3z/qr873jLjEE9YcugZxEc77FNkNP
Btfol4uXhfub4+1JuMmzWGl7KjFM18RdLkhEXztO9TPef4UbK76TjpmN445KAvO0
2w+UK8tTU0eg8g/ZM1/RlLpFvRvzpsybk/qpvnk7i2xKU5TQsplQAo7/CdnhCw1W
Q1pBUHEnsfiSCqKAds9poxmqz4uAjhZ6Ja1O1XZVCaBXXQTG4Wopef9uALNbqlMM
JG2TRhlePMhfOjg414ov1XsnXAmgBPQVrhw/13qSgoCZs9F50Pu8eStqMQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFfPk6D/jaNa0SqHBvRbOurW1TyOMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvVjgtVG9QLU5vMXJSS29jRzlGczY2dGJWUEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUndYAwQC
VQ4IAwQCVQ40AwQAWfzeMA0GCSqGSIb3DQEBCwUAA4IBAQCLQ14YnR8g3vS3U3pq
63WeCq3Md1nO1pNKT1mcEJXQNoQ29q8tJui24zMxKHgMTMLrVe9nsGXcHvDdq5oj
g+RmP+WpHAfdF5ULu0CB7kAWkYZX+kMqmVhMNN/x0ZlVUiWYX2jcxM8h8MHS4CQC
N1A//SnwCx2PTG0wUV7bF6nZZdnSpUD4G0+7oR8MZUQT+GQmkkW6vpVjgCmfpoEJ
VLb3Y9W0SVH5ZvaxC1sDq1AyiJj7BmKTILp3hy/Mc1DLN80g7QXd3HDjM4v159oh
U6Ehj51AdkEeC7koHUH+d6uJNMUPKQtcTNgUP+K36lK0phwVdgWrfwhcXhHP7HOr
VSd5
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:47 2025 by rpki-client