Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/d4YVQNnChkBacDcydIrt5a5Rh6A.roa
File: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (raw, json)
Hash identifier: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=
Subject key identifier: 77:86:15:40:D9:C2:86:40:5A:70:37:32:74:8A:ED:E5:AE:51:87:A0
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B85A35E154F2C2354ADDB99D86305
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/d4YVQNnChkBacDcydIrt5a5Rh6A.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200555
IP address blocks: 46.24.73.0/24 maxlen: 24
77.228.196.0/24 maxlen: 24
77.228.197.0/24 maxlen: 24
212.145.48.0/24 maxlen: 24
212.145.58.0/24 maxlen: 24
212.145.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:85:a3:5e:15:4f:2c:23:54:ad:db:99:d8:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77861540d9c286405a703732748aede5ae5187a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:7f:82:62:b0:47:bd:f9:7b:8d:c5:3b:2c:
d2:11:3a:a1:3d:ce:1b:03:81:b2:75:61:be:de:29:
08:32:8e:16:69:3c:e9:ee:36:da:1a:e1:08:1c:cf:
af:d2:05:ae:68:24:72:41:07:a3:88:fc:c0:1d:d0:
cd:13:5e:55:0c:5b:f7:08:27:29:d4:51:72:7f:d1:
eb:7d:b6:a7:a4:d2:02:4e:db:80:70:cf:c2:fd:5a:
e9:8e:4e:60:ae:38:97:87:28:93:3c:d1:6f:69:95:
c2:d4:48:12:67:59:3e:48:3d:6a:f9:82:a1:94:29:
d3:5c:83:15:ee:08:a9:75:c9:01:52:f3:14:ec:a2:
a3:8d:c8:45:69:05:1d:8e:de:75:92:53:02:4b:46:
3c:63:fb:d4:55:5b:4c:88:15:b5:4a:53:8b:3a:6b:
6f:59:0e:da:23:a7:3c:96:1a:33:ac:b5:99:e0:c1:
1e:4c:fd:b5:35:f0:52:2e:02:77:97:72:29:51:e9:
41:c7:79:b3:ba:e0:1c:0d:71:75:e0:cd:18:33:62:
00:6b:60:6e:12:33:3f:f9:7a:7e:8d:c3:47:7b:22:
4a:b3:61:0f:96:0d:f4:a8:46:c4:e9:20:71:00:17:
85:1e:55:ab:2e:3f:07:ca:a9:12:49:6d:88:8d:d5:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:15:40:D9:C2:86:40:5A:70:37:32:74:8A:ED:E5:AE:51:87:A0
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/d4YVQNnChkBacDcydIrt5a5Rh6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.24.73.0/24
77.228.196.0/23
212.145.48.0/24
212.145.58.0/24
212.145.62.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:0e:41:bf:f9:00:98:d8:ec:00:05:29:6e:c9:d2:c7:e7:
72:b8:ba:78:7e:ee:65:2c:ee:e9:38:86:99:73:29:dd:29:8e:
0b:26:e9:be:c0:b4:bd:f0:7d:8f:f3:26:50:3f:81:28:ac:bf:
c4:4e:97:0b:46:0d:1b:2e:e5:e1:15:5f:0d:ea:4d:8a:ce:1e:
21:19:14:14:a7:e3:fa:35:25:bb:6e:2c:88:ec:00:0c:17:67:
f6:65:b4:e7:9b:2b:74:28:25:b9:9b:f0:7c:47:b0:f0:d0:dd:
02:31:58:d9:6d:1f:fe:de:21:21:8f:32:84:08:30:fe:34:7e:
aa:7d:d1:de:70:87:45:93:60:1e:ca:0b:06:92:6e:f3:d6:88:
c4:d6:d8:49:65:16:9d:14:46:60:ff:b1:91:d4:03:a8:7c:54:
53:e6:53:53:02:27:8a:0d:40:2e:ba:41:13:1e:c6:12:4a:85:
a1:1f:b5:23:9c:a5:a7:bf:96:36:f0:ef:af:b2:0f:15:a2:31:
6e:50:ce:77:ad:b0:d2:4f:79:49:ec:c4:33:3c:16:c3:b0:61:
1e:b1:a6:6e:bd:d4:6e:e5:d1:a2:1e:c2:72:65:ba:b5:31:02:
52:14:60:b9:c8:03:d4:5e:60:eb:ca:0a:7f:cc:3e:08:00:be:
08:83:95:15
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQma4WjXhVPLCNUrduZ2GMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3
NGM4N2QwHhcNMjUwMTAyMDk0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzg2MTU0MGQ5YzI4NjQwNWE3MDM3MzI3NDhhZWRlNWFlNTE4N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkV/gmKwR735e43FOyzSETqhPc4b
A4GydWG+3ikIMo4WaTzp7jbaGuEIHM+v0gWuaCRyQQejiPzAHdDNE15VDFv3CCcp
1FFyf9HrfbanpNICTtuAcM/C/Vrpjk5grjiXhyiTPNFvaZXC1EgSZ1k+SD1q+YKh
lCnTXIMV7gipdckBUvMU7KKjjchFaQUdjt51klMCS0Y8Y/vUVVtMiBW1SlOLOmtv
WQ7aI6c8lhozrLWZ4MEeTP21NfBSLgJ3l3IpUelBx3mzuuAcDXF14M0YM2IAa2Bu
EjM/+Xp+jcNHeyJKs2EPlg30qEbE6SBxABeFHlWrLj8HyqkSSW2IjdUyhQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHeGFUDZwoZAWnA3MnSK7eWuUYegMB8GA1UdIwQY
MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt
MjUwNTBjNTkzYWExLzEvZDRZVlFObkNoa0JhY0RjeWRJcnQ1YTVSaDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx
LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALhhJAwQB
TeTEAwQA1JEwAwQA1JE6AwQA1JE+MA0GCSqGSIb3DQEBCwUAA4IBAQAZbw5Bv/kA
mNjsAAUpbsnSx+dyuLp4fu5lLO7pOIaZcyndKY4LJum+wLS98H2P8yZQP4EorL/E
TpcLRg0bLuXhFV8N6k2Kzh4hGRQUp+P6NSW7biyI7AAMF2f2ZbTnmyt0KCW5m/B8
R7Dw0N0CMVjZbR/+3iEhjzKECDD+NH6qfdHecIdFk2AeygsGkm7z1ojE1thJZRad
FEZg/7GR1AOofFRT5lNTAieKDUAuukETHsYSSoWhH7UjnKWnv5Y28O+vsg8VojFu
UM53rbDST3lJ7MQzPBbDsGEesaZuvdRu5dGiHsJyZbq1MQJSFGC5yAPUXmDrygp/
zD4IAL4Ig5UV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:53 2025 by rpki-client