Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4gi__xqc9FOJqeFJ-lkGfpY_NXA.roa
File: 4gi__xqc9FOJqeFJ-lkGfpY_NXA.roa (raw, json)
Hash identifier: 88OLTHyYb0xS9RUZJg8cIezHbnZlgNJx5sClEbFjbPk=
Subject key identifier: E2:08:BF:FF:1A:9C:F4:53:89:A9:E1:49:FA:59:06:7E:96:3F:35:70
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01827F2E5F718EBBD8517E7EB4856FF7636D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4gi__xqc9FOJqeFJ-lkGfpY_NXA.roa
Signing time: Mon 08 Aug 2022 20:38:41 +0000
ROA not before: Mon 08 Aug 2022 20:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
79.172.254.0/24 maxlen: 24
87.229.117.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7f:2e:5f:71:8e:bb:d8:51:7e:7e:b4:85:6f:f7:63:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 8 20:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e208bfff1a9cf45389a9e149fa59067e963f3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:29:1e:23:24:04:bb:c3:82:08:7b:3a:b7:
a1:7c:ad:b0:1a:f6:de:26:a8:cf:0a:d7:5e:88:2b:
60:f7:a0:2a:bf:4f:eb:ec:4a:79:5f:95:59:59:96:
1c:70:84:66:12:fa:b8:85:4f:57:29:cb:1e:55:2f:
ce:20:bf:f0:b7:68:91:4b:b0:f2:63:b9:cc:a9:82:
ae:1d:cf:1f:fc:65:1f:c3:ac:12:fb:a9:ec:fa:2d:
8b:61:0b:67:04:f6:7c:c9:75:9b:a0:a7:af:10:dc:
0d:b7:c7:1b:c7:fd:78:61:91:61:54:f4:dd:d9:02:
4c:21:19:80:8f:20:ee:93:3b:25:1e:84:1d:09:b6:
48:2c:ec:03:18:d9:a5:11:bc:02:f4:2d:54:bb:76:
34:3c:42:1b:5a:58:00:21:e9:51:b9:55:98:e9:29:
f6:c7:e0:b6:d4:f9:8f:90:01:d9:34:dc:4e:b2:f1:
c9:46:b7:78:50:37:d0:73:c3:b1:ac:09:1f:59:a9:
14:18:70:c1:7b:9d:86:d8:68:73:28:66:6b:ed:f8:
60:1e:b3:22:ba:d7:a1:20:cc:d8:b2:7d:ea:ff:42:
af:7a:68:00:05:e7:33:ab:15:13:d8:9b:cb:bb:fe:
d6:50:cd:b8:a0:6a:b7:ea:10:41:53:76:8d:2a:8a:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:BF:FF:1A:9C:F4:53:89:A9:E1:49:FA:59:06:7E:96:3F:35:70
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4gi__xqc9FOJqeFJ-lkGfpY_NXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
79.172.254.0/24
87.229.56.0/24
87.229.117.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ce:3a:db:7a:e2:d9:10:ba:8b:43:d2:11:51:45:14:7e:63:
2a:ad:d1:41:85:20:c0:53:34:c9:ce:cb:bc:1f:cd:00:14:ad:
06:54:22:fe:5e:66:17:74:ee:59:a6:56:b6:a1:f8:ab:55:fb:
ee:cd:83:45:53:17:eb:f4:69:44:2d:fa:28:d6:2d:25:03:5c:
e4:f8:aa:94:56:76:fc:75:06:c4:0c:ae:e1:3d:28:f2:23:32:
5f:ee:c5:6a:45:d4:c4:e1:25:8a:4c:42:51:70:f7:d4:d4:99:
ca:ee:d7:04:77:97:c6:98:8e:22:fc:70:05:8c:2a:ac:dc:1d:
92:1f:eb:24:9c:9f:8c:ef:f3:c4:92:3f:4c:74:4a:b1:b4:ce:
cb:33:94:b2:f1:f6:4e:23:b8:ba:61:9a:30:54:ed:99:f7:e3:
39:9b:03:d5:64:45:22:e5:56:e7:61:dd:c1:27:a2:0d:b5:fb:
a6:ed:7a:02:e4:91:09:2c:31:7e:72:52:68:d1:45:ad:d8:49:
f5:72:8c:20:c0:e8:9b:a3:4b:14:58:3f:ad:4d:2d:e7:e7:d9:
30:bb:c2:07:98:d6:51:b8:af:0b:e8:f1:27:4b:62:6d:18:3c:
71:96:4e:02:bf:98:d3:9e:42:26:cf:c2:d6:f5:65:b7:23:74:
03:c9:35:4e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYJ/Ll9xjrvYUX5+tIVv92NtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjIwODA4MjAzODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA4YmZmZjFhOWNmNDUzODlhOWUxNDlmYTU5MDY3ZTk2M2YzNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxkpHiMkBLvDggh7OrehfK2wGvbe
JqjPCtdeiCtg96Aqv0/r7Ep5X5VZWZYccIRmEvq4hU9XKcseVS/OIL/wt2iRS7Dy
Y7nMqYKuHc8f/GUfw6wS+6ns+i2LYQtnBPZ8yXWboKevENwNt8cbx/14YZFhVPTd
2QJMIRmAjyDukzslHoQdCbZILOwDGNmlEbwC9C1Uu3Y0PEIbWlgAIelRuVWY6Sn2
x+C21PmPkAHZNNxOsvHJRrd4UDfQc8OxrAkfWakUGHDBe52G2GhzKGZr7fhgHrMi
utehIMzYsn3q/0KvemgABeczqxUT2JvLu/7WUM24oGq36hBBU3aNKoqiywIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOIIv/8anPRTianhSfpZBn6WPzVwMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvNGdpX194cWM5Rk9KcWVGSi1sa0dmcFlfTlhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT6ziAwQB
T6zmAwQAT6z+AwQAV+U4AwQAV+V1MA0GCSqGSIb3DQEBCwUAA4IBAQB3zjrbeuLZ
ELqLQ9IRUUUUfmMqrdFBhSDAUzTJzsu8H80AFK0GVCL+XmYXdO5Zpla2ofirVfvu
zYNFUxfr9GlELfoo1i0lA1zk+KqUVnb8dQbEDK7hPSjyIzJf7sVqRdTE4SWKTEJR
cPfU1JnK7tcEd5fGmI4i/HAFjCqs3B2SH+sknJ+M7/PEkj9MdEqxtM7LM5Sy8fZO
I7i6YZowVO2Z9+M5mwPVZEUi5VbnYd3BJ6INtfum7XoC5JEJLDF+clJo0UWt2En1
cowgwOibo0sUWD+tTS3n59kwu8IHmNZRuK8L6PEnS2JtGDxxlk4Cv5jTnkImz8LW
9WW3I3QDyTVO
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:55 2025 by rpki-client