Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vve9PNZ9ulgzCsfm3iJedIBAKYk.roa
File: vve9PNZ9ulgzCsfm3iJedIBAKYk.roa (raw, json)
Hash identifier: 2wx880jfhUSbkblWjYqNaF7PH8N0pCX3bYBD3H7RRXI=
Subject key identifier: BE:F7:BD:3C:D6:7D:BA:58:33:0A:C7:E6:DE:22:5E:74:80:40:29:89
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01939632ED0A21743BB68311A521935E77BC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vve9PNZ9ulgzCsfm3iJedIBAKYk.roa
Signing time: Thu 05 Dec 2024 09:42:19 +0000
ROA not before: Thu 05 Dec 2024 09:42:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.91.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:32:ed:0a:21:74:3b:b6:83:11:a5:21:93:5e:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 5 09:42:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef7bd3cd67dba58330ac7e6de225e7480402989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:cc:0f:1b:23:2b:53:7d:ed:0f:75:2b:fc:
6b:6f:43:d7:c2:46:22:b1:2d:3d:96:8b:93:1a:8e:
16:f2:6c:11:e0:b0:5d:75:5e:67:ab:ff:46:2f:23:
db:09:47:6c:48:1b:f1:9b:e0:21:07:67:9a:df:6a:
a4:df:f4:4e:c4:3c:01:eb:1d:b6:d3:8d:7a:ff:a1:
8b:93:42:5d:3a:d1:43:4e:4c:18:08:cc:b3:e7:00:
62:91:b0:02:86:d8:5c:b0:e5:4c:76:4c:46:81:ae:
6c:e3:13:91:34:d5:b6:66:34:f9:44:1f:21:0d:a5:
6d:0a:71:f8:0d:71:f6:23:8d:fa:06:b8:62:dc:a7:
54:0f:22:a9:70:ac:cd:b9:0a:7a:65:ac:ee:53:72:
86:1f:47:c7:1e:e2:f7:26:62:ae:aa:af:28:88:d2:
81:66:40:53:2a:db:04:a7:11:d2:e8:18:b7:c8:23:
a6:36:4c:98:06:5b:eb:70:31:22:b3:7d:e6:a1:66:
1f:2f:07:ca:ea:98:84:69:f8:40:66:c7:83:a0:fc:
c3:bc:b5:14:ad:6d:63:1a:3f:a4:29:5d:25:40:58:
63:c0:de:00:94:6a:f6:64:fb:2a:68:29:74:31:ec:
33:59:fd:25:26:71:66:5c:ae:67:fa:2f:b9:b2:a4:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:BD:3C:D6:7D:BA:58:33:0A:C7:E6:DE:22:5E:74:80:40:29:89
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vve9PNZ9ulgzCsfm3iJedIBAKYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
79.175.91.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
53:10:1c:dc:53:7b:a9:9c:84:7c:40:75:3b:cf:90:a6:9b:07:
df:d5:c5:8b:74:61:44:3b:0b:0e:2a:dd:b0:28:33:05:19:87:
2c:d7:f3:65:2d:ac:7f:3d:28:5e:df:cd:85:95:66:b6:a0:df:
a7:14:07:c4:0f:6d:52:80:8d:b9:20:5f:71:cb:dc:b5:98:41:
dc:33:4a:a4:aa:da:87:5f:58:b9:11:c9:0a:8f:b4:08:a2:53:
db:75:0d:9b:d7:c4:e4:4e:04:52:4b:ef:c8:e2:26:c3:b0:14:
03:f0:31:8f:03:ae:e8:a1:74:24:b2:a4:de:1e:ca:4f:05:4e:
79:72:23:9b:e4:f5:4b:dd:19:27:85:7a:14:2a:f9:64:82:16:
6d:2b:61:37:b6:cd:a6:9a:fc:3a:58:98:cb:cc:0f:6a:15:a3:
7d:63:04:eb:bd:ca:fb:ba:19:e3:ec:ed:a5:24:18:ad:aa:43:
90:a2:5f:8e:de:79:c8:49:cd:00:7c:5f:5e:61:f7:05:e0:87:
b1:84:92:49:39:7f:92:2e:3a:10:e5:af:e6:1b:94:b7:8a:93:
27:49:30:78:80:ee:54:45:87:66:74:77:43:53:9f:36:1d:a1:
aa:77:dd:cd:d3:5c:50:ac:11:45:94:99:f8:69:47:f3:70:ed:
bc:0a:df:77
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgISAZOWMu0KIXQ7toMRpSGTXne8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQxMjA1MDk0MjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWY3YmQzY2Q2N2RiYTU4MzMwYWM3ZTZkZTIyNWU3NDgwNDAyOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KDMDxsjK1N97Q91K/xrb0PXwkYi
sS09louTGo4W8mwR4LBddV5nq/9GLyPbCUdsSBvxm+AhB2ea32qk3/ROxDwB6x22
0416/6GLk0JdOtFDTkwYCMyz5wBikbAChthcsOVMdkxGga5s4xORNNW2ZjT5RB8h
DaVtCnH4DXH2I436Brhi3KdUDyKpcKzNuQp6ZazuU3KGH0fHHuL3JmKuqq8oiNKB
ZkBTKtsEpxHS6Bi3yCOmNkyYBlvrcDEis33moWYfLwfK6piEafhAZseDoPzDvLUU
rW1jGj+kKV0lQFhjwN4AlGr2ZPsqaCl0MewzWf0lJnFmXK5n+i+5sqRqvQIDAQAB
o4IDOzCCAzcwHQYDVR0OBBYEFL73vTzWfbpYMwrH5t4iXnSAQCmJMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvdnZlOVBOWjl1bGd6Q3NmbTNpSmVkSUJBS1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTwYIKwYBBQUHAQcBAf8EggE+MIIBOjCCATYEAgABMIIB
LgMEAE1pBgMEAE1pCwMEAE1pHwMEAE+vWwMEAE+vZzAMAwQAT69zAwQAT690AwQA
T692AwQAUEqtMAwDBABREjEDBABREjIDBAFREjQDBABREjcDBABREj0DBABdukAD
BABdukMwDAMEAF26RwMEAF26SAMEAG15PAMEAbLbCAMEALLbCwMEALL9zwMEALL9
0jAMAwQAsv3VAwQAsv3WAwQAsv3bAwQAsv3eAwQAsv3sAwQAsv3wMAwDBAO5L1gD
BAC5L1oDBAC8/4IDBAC8/4wDBAC8/7kDBAC8/74DBAC8/9ADBAC8/9UDBAC8/9sD
BAC8/+IDBAC8/+4wDAMEArz/9AMEALz/+DAMAwQBvP/6AwQAvP/8AwQBvP/+AwQB
1EUGAwQA1EUMAwQA1EUSMA0GCSqGSIb3DQEBCwUAA4IBAQBTEBzcU3upnIR8QHU7
z5Cmmwff1cWLdGFEOwsOKt2wKDMFGYcs1/NlLax/PShe382FlWa2oN+nFAfED21S
gI25IF9xy9y1mEHcM0qkqtqHX1i5EckKj7QIolPbdQ2b18TkTgRSS+/I4ibDsBQD
8DGPA67ooXQksqTeHspPBU55ciOb5PVL3RknhXoUKvlkghZtK2E3ts2mmvw6WJjL
zA9qFaN9YwTrvcr7uhnj7O2lJBitqkOQol+O3nnISc0AfF9eYfcF4IexhJJJOX+S
LjoQ5a/mG5S3ipMnSTB4gO5URYdmdHdDU582HaGqd93N01xQrBFFlJn4aUfzcO28
Ct93
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:07 2025 by rpki-client