Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa
File: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (raw, json)
Hash identifier: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=
Subject key identifier: 77:12:1F:63:37:7E:1C:79:78:94:86:80:A9:31:06:7C:0F:5C:EE:C4
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 0194236A08D5C4A8B4991F25CAF08E3374BD
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60027
IP address blocks: 213.243.48.0/24 maxlen: 24
213.243.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:08:d5:c4:a8:b4:99:1f:25:ca:f0:8e:33:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77121f63377e1c7978948680a931067c0f5ceec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:77:5f:4b:4d:c3:17:c1:a2:64:9d:bf:d6:
0c:7b:da:22:e6:12:0a:0d:42:46:33:4c:cd:5c:a8:
68:a3:7d:08:fb:a8:94:90:e3:a5:d8:29:16:68:0a:
b6:f2:06:b2:01:25:54:41:2e:51:9a:71:64:da:b4:
0a:3f:56:68:13:ad:36:17:06:ee:f2:27:fa:36:f8:
72:21:cf:f6:ec:af:f0:21:a9:57:f5:e4:40:1a:05:
e8:b7:77:65:b7:0d:d8:b9:9d:ca:23:69:d9:e4:46:
94:a6:d6:69:72:06:77:1c:6b:82:83:87:42:a8:e5:
5c:c7:ca:89:bc:11:21:b0:e0:97:85:6d:73:8b:b3:
ae:de:9e:63:db:b7:43:e9:2d:83:0e:a8:fe:7a:7b:
a8:44:e7:29:18:5d:21:79:f7:ea:fa:92:15:9b:09:
a4:42:9b:a6:e2:22:f4:ba:93:19:3f:f3:ec:52:e8:
72:f4:cb:ba:1d:0e:3d:6c:41:1c:54:6e:1c:69:6d:
c6:d6:ef:b5:dd:f0:d1:f0:57:db:96:bf:e6:9b:36:
f7:d7:df:7f:ec:89:b7:57:06:b3:8a:6b:5a:f1:fb:
98:41:b8:d3:ef:cf:56:fb:99:32:21:dd:be:af:d5:
e1:e6:9a:30:80:36:8d:fa:5b:31:d0:e1:63:fc:17:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:1F:63:37:7E:1C:79:78:94:86:80:A9:31:06:7C:0F:5C:EE:C4
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.243.48.0/24
213.243.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5e:89:50:e6:4e:45:be:0d:74:d3:be:4a:41:7e:65:e9:e0:
cb:ca:5c:35:ac:f7:94:bf:47:70:03:ed:f0:b3:80:e6:32:37:
e0:c6:da:19:b1:d0:07:09:b4:b4:eb:61:84:06:5c:c3:fe:cd:
02:c8:31:7b:ef:f5:cd:29:b6:85:c2:c9:d3:2a:60:3e:aa:82:
32:a6:20:d6:16:49:07:f5:d1:84:a9:a3:20:bb:9c:fd:c2:ac:
a4:c9:68:19:4e:c0:8e:73:72:78:cc:3b:ce:20:20:e4:76:2d:
df:4d:cf:2d:bc:15:22:70:f4:1b:56:d8:28:1f:8e:da:aa:77:
11:a3:29:b0:58:5d:bc:36:13:33:3f:db:7b:98:6b:bc:4c:04:
f5:1f:a3:ab:62:58:79:85:f9:be:ba:bf:56:d2:e9:4d:7b:9c:
66:7d:5b:70:db:e8:7c:1f:fb:27:7d:7e:5d:75:dd:eb:2c:6d:
4c:7a:a2:76:24:18:03:3e:1d:77:ac:1a:43:82:f9:57:4c:23:
d6:bb:f7:d3:20:75:7f:29:3b:7e:64:31:ad:aa:0b:10:28:32:
08:f5:b8:d9:1f:98:a2:e0:f1:af:b7:7a:c4:af:6e:d8:c0:12:
d5:9c:6c:72:54:50:45:bc:8b:d9:d7:dc:ab:6a:9d:28:5f:c3:
0d:e2:b5:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjagjVxKi0mR8lyvCOM3S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjUwMTAxMTk0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzEyMWY2MzM3N2UxYzc5Nzg5NDg2ODBhOTMxMDY3YzBmNWNlZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2F3X0tNwxfBomSdv9YMe9oi5hIK
DUJGM0zNXKhoo30I+6iUkOOl2CkWaAq28gayASVUQS5RmnFk2rQKP1ZoE602Fwbu
8if6NvhyIc/27K/wIalX9eRAGgXot3dltw3YuZ3KI2nZ5EaUptZpcgZ3HGuCg4dC
qOVcx8qJvBEhsOCXhW1zi7Ou3p5j27dD6S2DDqj+enuoROcpGF0heffq+pIVmwmk
Qpum4iL0upMZP/PsUuhy9Mu6HQ49bEEcVG4caW3G1u+13fDR8Ffblr/mmzb3199/
7Im3Vwazimta8fuYQbjT789W+5kyId2+r9Xh5powgDaN+lsx0OFj/BfYiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHcSH2M3fhx5eJSGgKkxBnwPXO7EMB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvZHhJZll6ZC1ISGw0bElhQXFURUdmQTljN3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1fMwAwQA
1fM9MA0GCSqGSIb3DQEBCwUAA4IBAQA6XolQ5k5Fvg10075KQX5l6eDLylw1rPeU
v0dwA+3ws4DmMjfgxtoZsdAHCbS062GEBlzD/s0CyDF77/XNKbaFwsnTKmA+qoIy
piDWFkkH9dGEqaMgu5z9wqykyWgZTsCOc3J4zDvOICDkdi3fTc8tvBUicPQbVtgo
H47aqncRoymwWF28NhMzP9t7mGu8TAT1H6OrYlh5hfm+ur9W0ulNe5xmfVtw2+h8
H/snfX5ddd3rLG1MeqJ2JBgDPh13rBpDgvlXTCPWu/fTIHV/KTt+ZDGtqgsQKDII
9bjZH5ii4PGvt3rEr27YwBLVnGxyVFBFvIvZ19yrap0oX8MN4rWW
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:06:00 2025 by rpki-client