Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2rwgusGt7LR0sHNUetgnyp1Af0U.roa
File: 2rwgusGt7LR0sHNUetgnyp1Af0U.roa (raw, json)
Hash identifier: 2tvh69xHQ5LdYQQiBTgf1E2fvvSTCbrAiqoLgYHc7RI=
Subject key identifier: DA:BC:20:BA:C1:AD:EC:B4:74:B0:73:54:7A:D8:27:CA:9D:40:7F:45
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244527FAE9636B9895E487EDFE5B9079
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2rwgusGt7LR0sHNUetgnyp1Af0U.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
45.93.22.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
91.132.226.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:fa:e9:63:6b:98:95:e4:87:ed:fe:5b:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dabc20bac1adecb474b073547ad827ca9d407f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:54:d5:cf:68:57:88:5f:fb:60:03:80:6d:
78:f9:7c:18:93:0f:75:db:4d:de:2b:41:df:20:3b:
26:84:58:ac:02:08:b4:28:88:39:1e:81:14:36:a9:
db:7d:bf:a1:ff:39:14:8f:6c:1e:0b:44:ea:3d:98:
0c:b2:ff:0a:1d:e6:fc:d8:05:5d:93:da:c6:83:0d:
67:95:e6:4b:90:cb:e8:b2:e6:92:ed:36:47:8b:4d:
2d:38:32:eb:32:d6:89:c9:b3:16:1f:1f:77:2f:11:
19:e9:85:55:15:02:87:59:3a:96:35:cf:47:c6:04:
ed:d8:8e:ef:ea:81:6f:70:2f:bf:7d:71:53:24:03:
86:dc:18:58:58:34:be:09:36:f4:c2:e8:3b:b2:bf:
c7:8d:32:53:cc:91:e7:7c:50:93:d6:37:00:26:7f:
f1:96:98:0b:cb:8d:c7:9b:6f:26:26:d8:71:e9:77:
ff:10:96:fc:33:71:69:b6:64:ec:f2:d8:f5:2d:a3:
a0:a4:5f:21:f5:71:85:5b:89:ed:d7:bd:9a:be:82:
98:39:c1:f0:c1:49:4b:ab:95:9e:02:36:51:f6:74:
b6:4b:0b:31:3b:3e:e8:6c:1c:04:a6:fe:35:36:d1:
7c:bf:48:29:1c:41:8b:a1:1f:d1:65:a5:ac:85:6d:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:20:BA:C1:AD:EC:B4:74:B0:73:54:7A:D8:27:CA:9D:40:7F:45
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2rwgusGt7LR0sHNUetgnyp1Af0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
45.93.22.0/24
62.233.44.0/24
89.106.202.0/24
91.132.226.0/24
185.11.63.0/24
185.92.211.0/24
193.109.213.0/24
194.26.134.0/24
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
47:23:08:59:d0:ab:6d:59:1f:14:2e:0c:65:1d:f1:55:06:77:
c0:6b:f3:97:6a:07:7d:8a:8c:ae:e8:9d:90:8f:eb:48:c5:92:
3e:cf:2f:fa:7e:09:15:c0:f6:7a:b4:1d:7a:2e:2e:06:bc:f5:
4e:12:23:6a:f8:48:2b:19:e3:59:33:9a:1a:95:a6:d4:bc:63:
33:0d:65:63:dc:9a:19:28:0e:25:f3:3e:a9:6c:00:a3:4c:e2:
c3:c1:a4:7f:b5:e6:6f:89:13:f2:2f:8f:13:fc:44:7d:e6:a1:
19:6e:19:3a:50:d1:dc:d9:3d:df:03:a5:eb:27:f6:e0:40:fd:
7e:a4:8c:cb:3e:49:b4:12:58:8c:d6:c3:71:af:85:6a:f5:f7:
81:73:7a:ed:4a:ce:b0:98:a5:27:5c:6c:a2:3e:20:02:f9:83:
66:92:04:0c:30:b8:dc:fd:62:c1:8a:d7:03:65:ae:d5:04:a7:
fe:e4:73:77:0c:82:7a:90:24:89:86:ac:24:d1:c0:2c:00:76:
b9:3b:fb:ac:8f:3a:57:89:ac:75:76:88:a8:4e:73:8f:df:dc:
c4:4b:28:93:db:4d:6e:00:11:b2:bf:6f:f7:5b:46:6a:5a:ff:
71:75:00:4a:32:93:d3:0e:be:9c:5a:a8:24:8a:2f:bf:d3:e1:
3d:20:ef:78
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZQkRSf66WNrmJXkh+3+W5B5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWJjMjBiYWMxYWRlY2I0NzRiMDczNTQ3YWQ4MjdjYTlkNDA3ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bRU1c9oV4hf+2ADgG14+XwYkw91
203eK0HfIDsmhFisAgi0KIg5HoEUNqnbfb+h/zkUj2weC0TqPZgMsv8KHeb82AVd
k9rGgw1nleZLkMvosuaS7TZHi00tODLrMtaJybMWHx93LxEZ6YVVFQKHWTqWNc9H
xgTt2I7v6oFvcC+/fXFTJAOG3BhYWDS+CTb0wug7sr/HjTJTzJHnfFCT1jcAJn/x
lpgLy43Hm28mJthx6Xf/EJb8M3FptmTs8tj1LaOgpF8h9XGFW4nt172avoKYOcHw
wUlLq5WeAjZR9nS2SwsxOz7obBwEpv41NtF8v0gpHEGLoR/RZaWshW1RKQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFNq8ILrBrey0dLBzVHrYJ8qdQH9FMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMnJ3Z3VzR3Q3TFIwc0hOVWV0Z255cDFBZjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAJU2TAwQA
JYzdAwQALVrFAwQALV0WAwQAPuksAwQAWWrKAwQAW4TiAwQAuQs/AwQAuVzTAwQA
wW3VAwQAwhqGAwQA1dkLMA0GCSqGSIb3DQEBCwUAA4IBAQBHIwhZ0KttWR8ULgxl
HfFVBnfAa/OXagd9ioyu6J2Qj+tIxZI+zy/6fgkVwPZ6tB16Li4GvPVOEiNq+Egr
GeNZM5oalabUvGMzDWVj3JoZKA4l8z6pbACjTOLDwaR/teZviRPyL48T/ER95qEZ
bhk6UNHc2T3fA6XrJ/bgQP1+pIzLPkm0EliM1sNxr4Vq9feBc3rtSs6wmKUnXGyi
PiAC+YNmkgQMMLjc/WLBitcDZa7VBKf+5HN3DIJ6kCSJhqwk0cAsAHa5O/usjzpX
iax1doioTnOP39zESyiT201uABGyv2/3W0ZqWv9xdQBKMpPTDr6cWqgkii+/0+E9
IO94
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:57 2025 by rpki-client