Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa
File: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (raw, json)
Hash identifier: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=
Subject key identifier: 05:AD:4D:A8:3E:BF:A7:DB:D0:AD:60:7E:90:0C:A9:D1:EA:F9:B8:75
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FD39B0DA764F8AE219AA93C5F883
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206728
IP address blocks: 77.221.146.0/24 maxlen: 24
109.120.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:39:b0:da:76:4f:8a:e2:19:aa:93:c5:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05ad4da83ebfa7dbd0ad607e900ca9d1eaf9b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:bf:84:d7:14:99:40:e1:93:70:b1:7c:81:
91:6d:93:95:86:cc:63:40:d6:6a:b4:d5:83:27:5d:
31:0f:83:88:c7:d4:75:06:61:f4:72:82:a1:ab:e3:
b2:d3:12:1e:db:d5:6f:53:1a:80:96:18:a0:95:4b:
f6:84:18:fe:9f:5e:ef:0e:1f:0c:4f:46:e2:9c:65:
ec:f7:d7:bd:49:44:49:e2:4c:00:eb:a7:4e:c0:87:
3a:b4:dd:24:1c:6d:dd:fa:a4:5b:f1:96:f5:de:ba:
de:26:46:ac:9c:aa:de:e0:d0:80:72:59:b6:ce:56:
74:07:72:6e:9d:ad:27:fb:a0:06:cc:6a:fd:89:22:
9a:4e:a8:5d:0f:54:4d:fc:1d:80:06:50:d4:ca:dd:
8e:33:21:8e:b8:5b:7e:90:33:53:93:b1:18:af:24:
f6:e0:82:3c:ee:0b:21:2b:eb:4f:0f:e3:b9:f6:a7:
39:97:18:0e:a5:60:dd:86:b4:f8:bd:f2:f5:1c:cc:
d5:d6:25:6b:74:43:63:6f:4b:3b:4f:de:2c:f1:1b:
da:d7:a1:fe:71:df:33:f0:97:ad:b6:64:b0:c6:6e:
70:be:c3:78:a5:d1:e4:d2:19:29:78:9b:09:50:7f:
02:44:68:e5:26:6e:31:09:b8:e7:1a:6b:44:92:6e:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:4D:A8:3E:BF:A7:DB:D0:AD:60:7E:90:0C:A9:D1:EA:F9:B8:75
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.146.0/24
109.120.136.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6d:64:02:ad:82:5f:84:3f:48:37:f3:ac:df:b0:3e:6b:2b:
db:47:f0:b0:c5:b7:97:d3:b2:c4:a7:34:3a:87:e1:30:0d:75:
7e:3b:c6:a2:fa:cd:a7:ad:d3:96:32:01:b4:f9:dd:26:33:6f:
12:20:42:ea:bd:36:aa:51:76:8c:07:4b:27:56:53:7f:4b:e1:
e9:03:5e:0f:72:57:b0:a9:f7:fb:9e:63:65:0a:70:27:9c:5b:
f5:7d:5a:c7:ab:a6:67:77:cd:1f:df:a6:db:4e:35:e2:62:3c:
8d:fe:53:6d:f6:0a:89:8b:cf:63:0a:61:54:8d:32:76:1c:64:
a5:21:ef:9c:c4:29:17:aa:20:8e:a3:42:b8:92:56:c2:fa:a0:
06:a5:0f:3e:69:1c:34:a9:a0:61:25:98:63:44:20:d0:cf:45:
39:32:3c:55:20:ec:9d:b5:21:fe:fc:a4:48:7f:47:64:92:28:
6a:a7:fe:23:fb:30:44:9d:35:eb:30:8c:26:69:61:ff:58:ba:
c9:5d:25:24:77:63:7d:e5:9c:7d:2d:40:6c:37:ec:bd:ed:66:
c2:37:1b:5c:90:9f:14:4a:d2:29:2b:3e:a7:d9:67:ca:99:d9:
e0:5f:22:20:73:c2:29:76:7e:b5:34:14:2e:e0:d4:e3:2f:73:
4e:18:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:43 2025 by rpki-client