Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7Cj5773Ww2G0LSY1fnydQfxQCM8.roa
File: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (raw, json)
Hash identifier: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=
Subject key identifier: EC:28:F9:EF:BD:D6:C3:61:B4:2D:26:35:7E:7C:9D:41:FC:50:08:CF
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D74FB86CEAD347F09214D56CD40AF9
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7Cj5773Ww2G0LSY1fnydQfxQCM8.roa
Signing time: Wed 01 Jan 2025 21:48:20 +0000
ROA not before: Wed 01 Jan 2025 21:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57910
IP address blocks: 62.81.173.0/24 maxlen: 24
212.95.210.0/24 maxlen: 24
213.201.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4f:b8:6c:ea:d3:47:f0:92:14:d5:6c:d4:0a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec28f9efbdd6c361b42d26357e7c9d41fc5008cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:72:67:6c:ba:78:dc:52:af:5b:2c:0a:82:
01:40:e2:52:eb:6b:48:d8:57:de:dd:6a:70:ca:f0:
ab:04:90:42:6b:13:f3:96:43:9d:36:34:b9:c5:d7:
aa:cf:cd:63:df:c8:10:aa:3c:88:3a:68:52:4c:08:
bf:ec:9d:37:19:a5:31:99:00:7a:a0:9b:25:93:78:
a7:23:9d:ba:76:1e:73:a6:4a:71:41:89:6a:a3:64:
f2:ce:37:8d:ab:8f:92:68:72:c4:97:99:10:af:0e:
bb:d8:80:b8:b3:a6:c3:dc:42:a7:7e:97:6f:81:f2:
46:13:9b:8d:c8:51:ec:c1:a1:43:11:dc:fe:ad:07:
76:5c:9e:c8:2e:96:b3:05:f0:b4:c9:aa:d8:19:ab:
2b:f1:62:71:d2:15:32:90:d4:ba:1f:b4:55:60:f8:
d3:1c:d2:a7:cf:97:8f:dc:3c:32:8c:4d:71:6f:90:
3a:ca:f4:95:5d:5f:98:3f:2e:d1:fb:02:39:a0:70:
27:1c:30:4c:d3:39:31:2d:d8:5f:41:f4:cf:26:6a:
b6:c5:a5:2b:29:b8:17:ae:ea:eb:02:81:97:66:88:
cb:61:d3:e3:e3:02:dd:83:10:21:b3:d1:6d:b3:c1:
74:4c:37:ea:ae:29:42:74:65:0f:81:b4:9b:8e:c2:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:F9:EF:BD:D6:C3:61:B4:2D:26:35:7E:7C:9D:41:FC:50:08:CF
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7Cj5773Ww2G0LSY1fnydQfxQCM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.81.173.0/24
212.95.210.0/24
213.201.70.0/24
Signature Algorithm: sha256WithRSAEncryption
55:92:ed:18:36:a5:0e:20:60:42:f1:27:ca:9d:ae:ba:34:b3:
ca:e8:93:e3:81:20:24:93:b7:ff:a3:dc:c5:7b:79:19:69:0c:
d9:90:8f:23:46:9f:f4:ba:96:13:e5:ee:38:0a:cc:7a:3b:1c:
fa:a0:bb:bf:ab:2e:0a:be:f1:1a:23:72:cb:a5:c2:45:d3:a2:
ff:d2:ff:c0:8d:8f:d9:88:01:51:e7:90:fe:d8:79:4f:48:d2:
82:1d:4a:88:54:bc:c8:9e:7a:b4:35:1f:b1:ae:d4:c8:80:82:
d2:9b:db:dc:65:2e:c9:3e:89:ee:c0:92:7f:e4:fb:5f:c2:51:
46:85:42:20:f2:36:96:fa:4f:fd:ae:6b:57:be:86:64:db:ac:
de:09:33:43:4b:c5:25:d1:c0:89:85:70:73:3a:b5:e4:f6:6c:
e0:1a:39:2a:dc:e8:81:e3:df:f9:85:24:da:ed:c9:ed:e1:33:
c7:d1:cd:59:dd:58:a3:28:ce:23:b5:6e:2a:75:c6:ab:55:e1:
c7:f4:f5:cc:71:e1:59:36:fd:61:ab:ce:63:17:f9:3f:65:9b:
67:f6:7c:49:7c:8e:d5:9e:01:9b:4d:ef:ab:10:79:e3:85:61:
d8:8b:3c:df:26:e8:77:55:1b:95:a5:91:bd:f3:50:12:3c:ad:
02:a5:a0:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQj10+4bOrTR/CSFNVs1Ar5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjUwMTAxMjE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzI4ZjllZmJkZDZjMzYxYjQyZDI2MzU3ZTdjOWQ0MWZjNTAwOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDlyZ2y6eNxSr1ssCoIBQOJS62tI
2Ffe3WpwyvCrBJBCaxPzlkOdNjS5xdeqz81j38gQqjyIOmhSTAi/7J03GaUxmQB6
oJslk3inI526dh5zpkpxQYlqo2TyzjeNq4+SaHLEl5kQrw672IC4s6bD3EKnfpdv
gfJGE5uNyFHswaFDEdz+rQd2XJ7ILpazBfC0yarYGasr8WJx0hUykNS6H7RVYPjT
HNKnz5eP3DwyjE1xb5A6yvSVXV+YPy7R+wI5oHAnHDBM0zkxLdhfQfTPJmq2xaUr
KbgXrurrAoGXZojLYdPj4wLdgxAhs9Fts8F0TDfqrilCdGUPgbSbjsIhmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOwo+e+91sNhtC0mNX58nUH8UAjPMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvN0NqNTc3M1d3MkcwTFNZMWZueWRRZnhRQ004LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPlGtAwQA
1F/SAwQA1clGMA0GCSqGSIb3DQEBCwUAA4IBAQBVku0YNqUOIGBC8SfKna66NLPK
6JPjgSAkk7f/o9zFe3kZaQzZkI8jRp/0upYT5e44Csx6Oxz6oLu/qy4KvvEaI3LL
pcJF06L/0v/AjY/ZiAFR55D+2HlPSNKCHUqIVLzInnq0NR+xrtTIgILSm9vcZS7J
PonuwJJ/5PtfwlFGhUIg8jaW+k/9rmtXvoZk26zeCTNDS8Ul0cCJhXBzOrXk9mzg
Gjkq3OiB49/5hSTa7cnt4TPH0c1Z3VijKM4jtW4qdcarVeHH9PXMceFZNv1hq85j
F/k/ZZtn9nxJfI7VngGbTe+rEHnjhWHYizzfJuh3VRuVpZG981ASPK0CpaD8
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:52 2025 by rpki-client