Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r83Y41CxVLLBN3IqmKrtaZzp5Oc.roa
File: r83Y41CxVLLBN3IqmKrtaZzp5Oc.roa (raw, json)
Hash identifier: 3maS89Lite6FOnz58FtsuWVCRHEkzn+Ip8tHIQtM2Gk=
Subject key identifier: AF:CD:D8:E3:50:B1:54:B2:C1:37:72:2A:98:AA:ED:69:9C:E9:E4:E7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01951F5ED29FDE363BEA6D6899855720581A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r83Y41CxVLLBN3IqmKrtaZzp5Oc.roa
Signing time: Wed 19 Feb 2025 18:01:02 +0000
ROA not before: Wed 19 Feb 2025 18:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 77.83.204.0/24 maxlen: 24
194.26.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:5e:d2:9f:de:36:3b:ea:6d:68:99:85:57:20:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 19 18:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afcdd8e350b154b2c137722a98aaed699ce9e4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:ef:ad:76:9c:ac:1f:89:06:8f:e1:ab:a6:
b5:ab:f2:7f:8a:05:91:9c:66:2f:55:1f:05:c7:d0:
88:f1:18:17:c5:e7:d0:1d:f3:b0:bc:42:35:b3:bb:
c4:94:e2:06:4a:ae:26:57:68:ce:5a:a1:1a:19:0b:
7c:54:05:34:e1:1d:80:e3:55:22:7a:ac:3d:c7:c0:
03:bb:e2:3d:c5:b0:ed:34:49:d4:f4:1e:75:6f:71:
86:25:f0:12:56:e9:27:4b:6b:75:ae:b2:63:9d:d2:
15:3d:64:73:86:4c:4c:85:65:7f:34:dc:f5:18:12:
3c:66:9e:11:35:40:f6:dc:0e:b6:53:74:26:e5:bd:
ef:19:f7:b3:0d:fb:82:5b:f6:94:c9:a6:6e:a8:ea:
01:c2:7d:72:80:06:1f:37:54:15:de:1f:63:bc:05:
f2:1d:5b:75:11:6b:f8:42:62:e7:ef:27:c4:82:b8:
00:ea:40:f8:59:fc:c7:ce:0d:5f:d4:13:48:c5:09:
36:18:91:4d:fe:a8:ab:39:d1:cc:37:5f:96:e2:93:
4a:0f:8b:7b:8f:d8:c5:6f:7c:2d:b3:a0:43:03:7d:
7f:e3:13:c5:2a:c5:0b:38:87:b3:6b:ea:1b:70:54:
e7:61:88:c9:4b:56:42:48:f2:d5:05:c1:ab:4a:49:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:D8:E3:50:B1:54:B2:C1:37:72:2A:98:AA:ED:69:9C:E9:E4:E7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/r83Y41CxVLLBN3IqmKrtaZzp5Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.204.0/24
194.26.205.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a4:9a:82:21:ef:14:17:61:66:62:aa:79:61:9a:51:16:61:
09:2e:e2:7a:e1:d0:a8:33:c0:ef:09:4e:a3:28:ef:f0:be:e9:
fa:26:ae:dc:ff:26:3d:81:e9:e4:2f:03:74:75:d1:c9:66:7c:
a1:a5:6c:30:23:76:df:01:20:c5:40:bd:de:13:3d:da:af:b8:
09:b1:f9:55:d0:8c:a5:7e:75:e1:2a:c2:65:d7:7b:4b:6b:be:
e8:21:0f:47:ed:67:c4:46:22:b7:38:c0:e2:cc:19:a6:bb:5d:
ac:ef:ac:d8:4b:95:da:17:ac:28:58:3e:6b:a7:0e:29:21:68:
f9:fd:1a:d0:41:d6:d5:c6:e4:7f:47:63:de:df:93:04:4f:a2:
13:36:5f:2e:81:b7:c2:9d:67:e2:0b:b4:97:5f:04:43:57:9c:
1f:32:63:98:33:1d:bf:f5:5c:81:5e:4a:0a:15:5b:23:bb:d8:
c7:52:5a:b7:6a:05:c4:60:ea:51:0c:a4:ab:a0:48:d3:86:c5:
de:e3:be:7f:d3:5b:74:79:73:51:9d:ce:a8:d3:68:69:53:73:
7d:65:9e:5b:7d:ff:4e:2b:c8:71:62:59:7b:fc:e8:51:d1:7e:
d3:61:a1:8c:4e:89:02:27:69:22:19:99:16:57:06:c7:67:a1:
85:c6:24:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUfXtKf3jY76m1omYVXIFgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMjE5MTgwMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmNkZDhlMzUwYjE1NGIyYzEzNzcyMmE5OGFhZWQ2OTljZTllNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/vrXacrB+JBo/hq6a1q/J/igWR
nGYvVR8Fx9CI8RgXxefQHfOwvEI1s7vElOIGSq4mV2jOWqEaGQt8VAU04R2A41Ui
eqw9x8ADu+I9xbDtNEnU9B51b3GGJfASVuknS2t1rrJjndIVPWRzhkxMhWV/NNz1
GBI8Zp4RNUD23A62U3Qm5b3vGfezDfuCW/aUyaZuqOoBwn1ygAYfN1QV3h9jvAXy
HVt1EWv4QmLn7yfEgrgA6kD4WfzHzg1f1BNIxQk2GJFN/qirOdHMN1+W4pNKD4t7
j9jFb3wts6BDA31/4xPFKsULOIeza+obcFTnYYjJS1ZCSPLVBcGrSkna+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK/N2ONQsVSywTdyKpiq7Wmc6eTnMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvcjgzWTQxQ3hWTExCTjNJcW1LcnRhWnpwNU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVPMAwQA
whrNMA0GCSqGSIb3DQEBCwUAA4IBAQA0pJqCIe8UF2FmYqp5YZpRFmEJLuJ64dCo
M8DvCU6jKO/wvun6Jq7c/yY9genkLwN0ddHJZnyhpWwwI3bfASDFQL3eEz3ar7gJ
sflV0IylfnXhKsJl13tLa77oIQ9H7WfERiK3OMDizBmmu12s76zYS5XaF6woWD5r
pw4pIWj5/RrQQdbVxuR/R2Pe35MET6ITNl8ugbfCnWfiC7SXXwRDV5wfMmOYMx2/
9VyBXkoKFVsju9jHUlq3agXEYOpRDKSroEjThsXe475/01t0eXNRnc6o02hpU3N9
ZZ5bff9OK8hxYll7/OhR0X7TYaGMTokCJ2kiGZkWVwbHZ6GFxiTt
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:14 2025 by rpki-client