Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/963G-ZoUlEC23mINNA3cl2i8rJ0.roa
File: 963G-ZoUlEC23mINNA3cl2i8rJ0.roa (raw, json)
Hash identifier: TmZinqOXd5DPJXil6/CVPn4yhgtYGbar0My3DVaQDvo=
Subject key identifier: F7:AD:C6:F9:9A:14:94:40:B6:DE:62:0D:34:0D:DC:97:68:BC:AC:9D
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0195CE255C7BD5A98D9BC6E0FE413E130F49
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/963G-ZoUlEC23mINNA3cl2i8rJ0.roa
Signing time: Tue 25 Mar 2025 16:31:49 +0000
ROA not before: Tue 25 Mar 2025 16:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49234
IP address blocks: 77.87.224.0/21 maxlen: 21
77.87.224.0/22 maxlen: 22
77.87.228.0/22 maxlen: 22
193.30.80.0/24 maxlen: 25
193.30.82.0/23 maxlen: 23
193.30.82.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:25:5c:7b:d5:a9:8d:9b:c6:e0:fe:41:3e:13:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Mar 25 16:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7adc6f99a149440b6de620d340ddc9768bcac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:7d:22:2a:aa:ee:6a:ef:3d:5c:48:28:5f:
17:60:9b:d0:e3:48:fd:b9:bd:ec:76:b3:8e:91:66:
10:a8:00:a8:84:aa:01:6c:52:3f:95:8a:6c:83:6e:
24:5f:1a:81:66:42:93:97:f6:ca:67:69:fb:88:e9:
7f:dd:01:01:38:84:5e:6b:8f:cb:be:5e:57:09:5d:
ab:fa:da:91:62:af:25:55:36:b2:f3:ea:2a:96:7b:
e4:dc:aa:e0:ce:c7:5c:64:2a:74:bd:06:58:76:7f:
d4:75:c4:58:9d:f3:cb:c1:c6:1e:d0:02:da:7b:84:
1d:12:6d:89:cf:d8:3e:96:5a:c2:24:49:10:72:65:
e8:57:b8:68:54:e6:1f:9a:3a:1a:5b:a3:9f:2c:4d:
37:1e:f7:2f:c5:79:80:42:7f:e9:50:c9:05:31:73:
4b:d1:04:ee:b4:03:7f:fe:d4:05:42:8e:57:51:2e:
39:0d:b6:4b:2d:67:51:56:65:59:22:7f:08:45:7a:
7c:8f:d0:35:c2:9d:2e:97:e6:aa:1a:2a:8f:db:b1:
18:b3:96:4c:ed:7d:1f:4d:f8:84:64:ec:d3:56:09:
f2:58:27:66:06:6e:8d:e7:12:f0:3f:77:6c:83:45:
42:af:72:b5:0f:7c:bd:1a:c9:1a:b8:e4:64:65:c9:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:C6:F9:9A:14:94:40:B6:DE:62:0D:34:0D:DC:97:68:BC:AC:9D
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/963G-ZoUlEC23mINNA3cl2i8rJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.224.0/21
193.30.80.0/24
193.30.82.0/23
Signature Algorithm: sha256WithRSAEncryption
54:87:71:b2:b4:4c:a6:00:df:0e:ff:a3:5a:19:25:4f:32:11:
ec:83:e0:0e:f3:1a:b1:f8:ab:55:e4:4a:17:6d:de:4b:93:20:
00:b5:a3:b2:a9:16:3a:84:c1:a1:ae:f8:b8:72:0b:85:3a:14:
3c:ce:96:99:e7:8a:df:71:7e:d2:f2:5f:72:ad:dc:b3:72:eb:
cd:f2:78:c7:cc:30:78:ff:6c:54:dc:1e:7c:d9:53:6e:10:c4:
1b:53:e4:65:fe:66:90:76:b7:7c:6c:9e:d1:e2:1f:3c:7a:c0:
97:e5:81:31:f6:9e:80:99:6e:5c:91:2e:50:72:31:64:2a:c4:
13:d2:ba:10:08:1f:f9:65:da:31:7a:4a:48:4d:11:a6:e6:3e:
b6:09:da:49:72:7e:ef:cf:30:86:02:bf:24:a9:ca:8f:29:75:
67:80:3f:d6:c1:51:7c:f1:fc:10:f3:ec:8e:10:72:70:17:ad:
3d:f8:18:04:0a:aa:67:00:97:78:cd:89:dc:6c:ab:1a:eb:85:
90:47:b6:38:ae:85:c0:de:ce:40:e4:5d:dd:54:7a:4b:61:9b:
1d:23:bc:91:8c:36:bc:92:6b:68:de:08:cb:53:8a:2f:f4:c3:
dd:fb:55:29:d0:19:2f:8b:9d:7f:b1:3b:2a:4e:e7:80:74:2e:
d9:ef:10:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZXOJVx71amNm8bg/kE+Ew9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjUwMzI1MTYzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2FkYzZmOTlhMTQ5NDQwYjZkZTYyMGQzNDBkZGM5NzY4YmNhYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bd9Iiqq7mrvPVxIKF8XYJvQ40j9
ub3sdrOOkWYQqACohKoBbFI/lYpsg24kXxqBZkKTl/bKZ2n7iOl/3QEBOIRea4/L
vl5XCV2r+tqRYq8lVTay8+oqlnvk3KrgzsdcZCp0vQZYdn/UdcRYnfPLwcYe0ALa
e4QdEm2Jz9g+llrCJEkQcmXoV7hoVOYfmjoaW6OfLE03HvcvxXmAQn/pUMkFMXNL
0QTutAN//tQFQo5XUS45DbZLLWdRVmVZIn8IRXp8j9A1wp0ul+aqGiqP27EYs5ZM
7X0fTfiEZOzTVgnyWCdmBm6N5xLwP3dsg0VCr3K1D3y9GskauORkZcn+kQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPetxvmaFJRAtt5iDTQN3JdovKydMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvOTYzRy1ab1VsRUMyM21JTk5BM2NsMmk4ckowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTVfgAwQA
wR5QAwQBwR5SMA0GCSqGSIb3DQEBCwUAA4IBAQBUh3GytEymAN8O/6NaGSVPMhHs
g+AO8xqx+KtV5EoXbd5LkyAAtaOyqRY6hMGhrvi4cguFOhQ8zpaZ54rfcX7S8l9y
rdyzcuvN8njHzDB4/2xU3B582VNuEMQbU+Rl/maQdrd8bJ7R4h88esCX5YEx9p6A
mW5ckS5QcjFkKsQT0roQCB/5ZdoxekpITRGm5j62CdpJcn7vzzCGAr8kqcqPKXVn
gD/WwVF88fwQ8+yOEHJwF609+BgECqpnAJd4zYncbKsa64WQR7Y4roXA3s5A5F3d
VHpLYZsdI7yRjDa8kmto3gjLU4ov9MPd+1Up0Bkvi51/sTsqTueAdC7Z7xCi
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:24 2025 by rpki-client