Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/utCqNma1rWDFYyQzGBrkqBMwFEg.roa
File: utCqNma1rWDFYyQzGBrkqBMwFEg.roa (raw, json)
Hash identifier: cOFFuDR1ZQOUdlPJ4gWmtj6doyvwBZo7TExnT6ZhEXA=
Subject key identifier: BA:D0:AA:36:66:B5:AD:60:C5:63:24:33:18:1A:E4:A8:13:30:14:48
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DFA255AAC5C446BD2F0DE257A580D0A9D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/utCqNma1rWDFYyQzGBrkqBMwFEg.roa
Signing time: Fri 01 Mar 2024 13:12:48 +0000
ROA not before: Fri 01 Mar 2024 13:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:25:5a:ac:5c:44:6b:d2:f0:de:25:7a:58:0d:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 1 13:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bad0aa3666b5ad60c5632433181ae4a813301448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:4d:a8:35:0f:bf:84:ef:6c:e1:81:a3:da:
b4:c5:af:71:07:55:d1:6c:27:e8:aa:27:41:5c:44:
92:fe:9f:a5:f0:b4:90:3c:bd:c2:83:0e:73:60:2a:
e3:5d:86:e1:7c:90:8e:65:ef:55:7e:c0:25:fa:98:
38:e7:3c:49:e5:d4:ac:05:cc:96:7f:48:37:1c:c1:
17:ec:c3:a5:7e:45:09:9d:02:f6:27:1b:80:c2:32:
5d:58:1d:c5:f4:3f:6a:b2:df:37:f7:9e:fc:a8:d5:
3f:a8:79:76:9b:28:d5:3a:56:6e:a6:36:f0:9d:27:
b5:d3:e2:c7:60:6b:5b:4d:e9:0d:52:36:b9:24:79:
aa:57:71:3e:ab:4d:8b:9c:2d:08:8e:f9:80:f3:aa:
92:ae:b4:81:7a:b1:f8:3f:da:89:c1:2c:a2:5d:e3:
ee:76:dc:e6:a6:bd:92:1b:54:1d:96:2e:4c:cb:70:
c3:b7:b1:b2:e1:aa:63:a0:b8:37:28:99:bb:0e:15:
44:38:1b:c4:30:6c:6a:0b:cf:3b:ab:10:7b:5e:37:
7a:c1:39:5c:16:6f:8e:a4:56:da:c5:ab:72:1e:36:
a6:01:ea:9c:fe:07:b0:8a:bb:9e:65:e8:40:6e:57:
d4:0f:27:56:8b:53:6e:f5:35:37:d8:93:14:c1:59:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:AA:36:66:B5:AD:60:C5:63:24:33:18:1A:E4:A8:13:30:14:48
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/utCqNma1rWDFYyQzGBrkqBMwFEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.81.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.59.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b5:ff:3b:99:1f:bd:d8:e5:26:ae:d3:45:b4:a6:68:a6:8e:
23:63:10:0c:9f:8e:b6:fa:4d:a5:78:ba:f5:dd:92:fc:ae:70:
4e:af:de:b3:fa:66:da:87:8b:72:f4:4a:45:d0:2c:bf:36:86:
05:22:c0:f5:ed:be:ea:4a:64:e8:7e:20:7a:29:4f:1e:85:c8:
71:26:d3:ca:c9:58:64:a4:e1:68:df:a5:8b:70:0f:d2:aa:c8:
b7:9e:a1:82:95:fa:36:8e:55:58:aa:d2:d3:be:4a:40:24:8d:
0f:b7:a2:e6:13:ac:ce:08:74:dc:6d:58:a7:50:0a:b2:00:05:
eb:5a:52:22:8a:28:47:ee:6d:46:11:b1:23:d2:b8:4b:25:6a:
56:0d:6c:39:fd:24:81:88:52:58:44:23:d4:30:49:48:ae:b3:
93:88:5b:b9:1e:6e:2b:1c:2a:02:e6:ee:43:0f:a8:53:fd:bc:
b5:bb:fe:09:a3:c2:0c:4d:70:6c:a2:f5:85:57:a2:cd:88:53:
56:fc:44:a1:38:ab:b2:58:ac:fb:71:44:a8:52:b8:48:f0:51:
53:c3:bd:1f:9b:f5:f5:ec:67:4a:80:83:df:fb:fe:09:04:6d:
f5:8b:72:b6:ef:40:a2:27:3b:61:45:79:2c:54:36:9b:42:a4:
92:b1:b9:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAY36JVqsXERr0vDeJXpYDQqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMzAxMTMxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQwYWEzNjY2YjVhZDYwYzU2MzI0MzMxODFhZTRhODEzMzAxNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u1NqDUPv4TvbOGBo9q0xa9xB1XR
bCfoqidBXESS/p+l8LSQPL3Cgw5zYCrjXYbhfJCOZe9VfsAl+pg45zxJ5dSsBcyW
f0g3HMEX7MOlfkUJnQL2JxuAwjJdWB3F9D9qst839578qNU/qHl2myjVOlZupjbw
nSe10+LHYGtbTekNUja5JHmqV3E+q02LnC0IjvmA86qSrrSBerH4P9qJwSyiXePu
dtzmpr2SG1Qdli5My3DDt7Gy4apjoLg3KJm7DhVEOBvEMGxqC887qxB7Xjd6wTlc
Fm+OpFbaxatyHjamAeqc/gewirueZehAblfUDydWi1Nu9TU32JMUwVkzJwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFLrQqjZmta1gxWMkMxga5KgTMBRIMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvdXRDcU5tYTFyV0RGWXlRekdCcmtxQk13RkVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAT6zWAwQA
T6zaAwQAT6zcAwQAT6zkAwQAV+UwAwQAV+UyAwQAV+VHAwQAV+VRAwQBX4rCAwQA
1bXJMAwDBADZkDkDBALZkDgDBADZkD4wDQYJKoZIhvcNAQELBQADggEBAJu1/zuZ
H73Y5Sau00W0pmimjiNjEAyfjrb6TaV4uvXdkvyucE6v3rP6ZtqHi3L0SkXQLL82
hgUiwPXtvupKZOh+IHopTx6FyHEm08rJWGSk4WjfpYtwD9KqyLeeoYKV+jaOVViq
0tO+SkAkjQ+3ouYTrM4IdNxtWKdQCrIABetaUiKKKEfubUYRsSPSuEslalYNbDn9
JIGIUlhEI9QwSUius5OIW7kebiscKgLm7kMPqFP9vLW7/gmjwgxNcGyi9YVXos2I
U1b8RKE4q7JYrPtxRKhSuEjwUVPDvR+b9fXsZ0qAg9/7/gkEbfWLcrbvQKInO2FF
eSxUNptCpJKxueo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:14 2025 by rpki-client