Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/IA8JIixh7pQRh3UJKX9FksmIS1w.roa
File: IA8JIixh7pQRh3UJKX9FksmIS1w.roa (raw, json)
Hash identifier: BXtV8PoUvx9FxZ6Rv15VGnt7NyHSTc2MLVCm+OimTBc=
Subject key identifier: 20:0F:09:22:2C:61:EE:94:11:87:75:09:29:7F:45:92:C9:88:4B:5C
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC17753FA33FEC0D12F4FFC90F5C13
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/IA8JIixh7pQRh3UJKX9FksmIS1w.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49234
IP address blocks: 77.87.224.0/21 maxlen: 21
77.87.224.0/22 maxlen: 22
77.87.228.0/22 maxlen: 22
193.30.80.0/24 maxlen: 25
193.30.82.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:17:75:3f:a3:3f:ec:0d:12:f4:ff:c9:0f:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=200f09222c61ee9411877509297f4592c9884b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:0c:fd:c8:96:53:b2:9b:02:3d:8e:c5:0a:
70:85:bc:44:a9:d2:b6:64:39:4d:7d:d5:53:87:ca:
19:13:2c:a4:8b:85:7f:1e:0a:19:68:4b:ce:df:65:
d9:7b:38:2b:43:19:10:18:32:a7:94:91:ea:26:4b:
99:f8:9f:ce:c0:10:10:a9:1f:d7:87:fa:99:15:e0:
a5:1f:8d:9d:a3:c0:24:fc:32:02:ce:51:45:91:f4:
13:f3:3f:39:b7:6f:06:b4:d4:25:04:18:32:ad:0f:
33:31:93:b8:cd:2f:de:f5:21:82:49:07:96:54:ce:
51:49:7a:5e:b8:51:fe:bb:58:be:2a:82:14:6c:7f:
c2:03:db:b4:7b:eb:f5:89:6d:72:5d:27:eb:2f:9a:
0a:25:85:ce:bc:79:51:ee:80:4d:e8:28:6d:13:c5:
fb:d1:48:87:d9:0b:0e:83:a6:db:72:29:73:e4:f6:
82:a1:70:a0:fe:13:b0:04:10:53:0f:88:bd:ab:ff:
d5:3b:3c:42:22:89:dd:48:46:dc:2e:cc:04:f6:4a:
d3:66:e7:4a:41:40:51:3b:23:a1:5b:0d:44:03:f8:
1f:6a:b2:b8:f8:b7:f3:2c:73:6a:9a:a0:2f:47:52:
7b:a2:7b:b2:49:42:c5:e8:d8:5c:49:e9:3d:11:ef:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:09:22:2C:61:EE:94:11:87:75:09:29:7F:45:92:C9:88:4B:5C
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/IA8JIixh7pQRh3UJKX9FksmIS1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.224.0/21
193.30.80.0/24
193.30.82.0/25
Signature Algorithm: sha256WithRSAEncryption
ae:db:f4:6d:5b:06:f5:e0:6a:1a:93:c8:f8:a2:15:da:8a:e7:
18:c1:14:44:09:a6:0a:8d:1d:64:fa:9f:c5:b7:08:28:b9:45:
9b:c2:4d:30:0d:75:10:37:14:30:0b:d9:7f:37:6b:63:a8:93:
35:c1:78:f5:fd:c6:96:34:5d:28:08:c0:d3:63:7f:7b:60:16:
bd:3c:53:c2:8b:7d:4b:47:54:16:0b:82:5a:57:cc:cc:9f:36:
b2:af:e2:71:4b:7a:2e:26:b5:ba:71:1e:fa:74:19:5e:4e:dd:
3b:af:d7:b1:27:a5:b5:c6:60:47:62:18:a6:87:f8:f3:e0:55:
34:e6:b2:5f:a3:66:09:43:6b:8b:74:21:e7:43:b7:c7:a4:1c:
c0:e9:47:2d:8a:59:5d:0f:41:dc:44:20:d1:cb:4b:4d:02:14:
b9:1e:c6:79:ea:82:57:c7:f7:03:b3:0a:e9:29:01:85:4e:f9:
0e:52:20:5d:71:d4:65:78:8c:6c:ac:19:fa:eb:9c:27:66:5b:
99:92:3e:82:ab:3a:68:ba:ac:61:c4:23:88:b7:b6:8e:bd:e2:
d4:12:fc:16:9d:68:8e:1d:74:d3:fa:99:03:53:49:92:32:d1:
cd:e7:9a:ff:eb:f6:8f:22:df:cf:2d:82:2b:49:04:85:e2:5e:
f0:8c:be:50
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZQl/Bd1P6M/7A0S9P/JD1wTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjUwMTAyMDc0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDBmMDkyMjJjNjFlZTk0MTE4Nzc1MDkyOTdmNDU5MmM5ODg0YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsM/ciWU7KbAj2OxQpwhbxEqdK2
ZDlNfdVTh8oZEyyki4V/HgoZaEvO32XZezgrQxkQGDKnlJHqJkuZ+J/OwBAQqR/X
h/qZFeClH42do8Ak/DICzlFFkfQT8z85t28GtNQlBBgyrQ8zMZO4zS/e9SGCSQeW
VM5RSXpeuFH+u1i+KoIUbH/CA9u0e+v1iW1yXSfrL5oKJYXOvHlR7oBN6ChtE8X7
0UiH2QsOg6bbcilz5PaCoXCg/hOwBBBTD4i9q//VOzxCIondSEbcLswE9krTZudK
QUBROyOhWw1EA/gfarK4+LfzLHNqmqAvR1J7onuySULF6NhcSek9Ee9OtQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFCAPCSIsYe6UEYd1CSl/RZLJiEtcMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvSUE4SklpeGg3cFFSaDNVSktYOUZrc21JUzF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQDTVfgAwQA
wR5QAwUHwR5SADANBgkqhkiG9w0BAQsFAAOCAQEArtv0bVsG9eBqGpPI+KIV2orn
GMEURAmmCo0dZPqfxbcIKLlFm8JNMA11EDcUMAvZfzdrY6iTNcF49f3GljRdKAjA
02N/e2AWvTxTwot9S0dUFguCWlfMzJ82sq/icUt6Lia1unEe+nQZXk7dO6/XsSel
tcZgR2IYpof48+BVNOayX6NmCUNri3Qh50O3x6QcwOlHLYpZXQ9B3EQg0ctLTQIU
uR7GeeqCV8f3A7MK6SkBhU75DlIgXXHUZXiMbKwZ+uucJ2ZbmZI+gqs6aLqsYcQj
iLe2jr3i1BL8Fp1ojh100/qZA1NJkjLRzeea/+v2jyLfzy2CK0kEheJe8Iy+UA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:39:13 2025 by rpki-client