Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/UWF-Sym2PU22GhkmCzS2bjQ-Pqo.roa
File: UWF-Sym2PU22GhkmCzS2bjQ-Pqo.roa (raw, json)
Hash identifier: +piG13BBKBmfcQV9gA6TqLSoOlHAK0Ur+Bq4Kg7hvBQ=
Subject key identifier: 51:61:7E:4B:29:B6:3D:4D:B6:1A:19:26:0B:34:B6:6E:34:3E:3E:AA
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018CC2DAEBCE1531DAF8BE8789464CBD1EDB
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/UWF-Sym2PU22GhkmCzS2bjQ-Pqo.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41046
IP address blocks: 77.242.80.0/20 maxlen: 20
82.114.192.0/19 maxlen: 19
81.200.56.0/21 maxlen: 21
178.72.192.0/19 maxlen: 19
178.72.192.0/18 maxlen: 18
178.72.224.0/19 maxlen: 19
81.200.48.0/21 maxlen: 21
81.200.48.0/20 maxlen: 20
2a07:b5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:eb:ce:15:31:da:f8:be:87:89:46:4c:bd:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51617e4b29b63d4db61a19260b34b66e343e3eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:b4:d0:3c:dc:98:6f:fa:e4:ab:ef:e4:6b:
14:3c:32:76:f1:03:ec:c2:44:50:14:20:1c:7b:65:
a2:ae:f1:c1:21:29:3b:39:7f:a7:88:ed:c7:f6:62:
3a:7c:d6:bd:18:05:00:61:8f:af:ea:a7:15:66:73:
3b:27:82:f3:04:6a:0b:51:fc:8f:58:95:5c:c5:9a:
82:f2:c4:f1:6f:63:a1:3c:f7:16:b7:fb:87:7f:8d:
63:3f:8b:a2:d3:3f:0c:95:73:6b:26:c3:83:85:f7:
ee:cc:69:7d:c9:8d:04:b9:50:88:6a:d5:a6:1a:5d:
0e:df:eb:94:58:84:3f:6b:13:5c:93:b1:b8:31:83:
33:c0:09:89:94:cd:9d:eb:c6:41:af:32:4b:a8:8b:
30:7c:29:86:90:1f:32:d1:a7:ec:e3:34:53:8f:cd:
05:36:6b:0a:06:e2:69:8c:e3:0f:af:ae:ff:66:7f:
69:6d:16:a3:35:75:8b:07:ca:ae:82:46:87:12:e4:
51:39:ae:61:69:ed:b1:c2:62:ec:38:97:8a:df:24:
d0:fd:da:cc:3d:ae:95:c3:b5:8d:c9:82:04:3b:c8:
aa:7c:9b:a6:37:71:25:3b:c4:2c:a9:4a:c8:f1:86:
39:69:b9:ce:89:7b:cf:99:17:9d:79:ab:99:ac:9a:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:7E:4B:29:B6:3D:4D:B6:1A:19:26:0B:34:B6:6E:34:3E:3E:AA
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/UWF-Sym2PU22GhkmCzS2bjQ-Pqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.80.0/20
81.200.48.0/20
82.114.192.0/19
178.72.192.0/18
IPv6:
2a07:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:af:12:3e:76:d6:f3:52:d5:04:4b:09:89:6e:a0:3c:d4:b4:
8f:57:74:bb:93:30:f7:12:29:68:15:3a:0e:6a:08:4e:9c:15:
02:3f:e0:67:f8:cc:23:c0:ac:08:bf:7d:46:a8:88:e6:cc:5a:
34:ba:b7:67:e5:57:43:c4:a1:f9:9c:e9:29:5a:9b:03:a1:0c:
28:c9:cc:4a:ad:9f:01:c4:1f:aa:8b:5b:84:7b:95:bd:4c:c2:
9d:4c:96:7f:b9:b7:ca:0e:6f:59:48:81:4f:df:16:5b:58:ec:
37:c2:2b:19:88:cd:a5:1f:86:7a:b2:76:15:05:53:63:0d:f9:
7e:33:b7:10:6c:78:0b:9a:dc:19:d1:07:59:31:ab:23:50:bc:
dc:7f:a6:9d:51:a1:87:cd:23:b8:27:b8:f3:df:7c:4a:c6:2b:
c9:2e:e6:5a:0a:c1:48:a4:d1:97:d7:97:1a:4d:75:1e:83:fd:
71:50:74:3d:37:98:fe:46:fd:18:b1:3c:6c:09:30:af:18:3f:
8d:aa:24:b9:5b:52:7c:7a:32:78:43:c7:c2:58:d5:36:e6:cf:
fc:18:77:e9:bb:6a:72:84:c1:30:56:21:66:73:c8:af:e5:99:
77:e8:0e:0b:0b:e9:1b:2d:9f:8a:66:ef:06:0a:3d:b9:f9:3d:
7d:a4:6f:fb
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzC2uvOFTHa+L6HiUZMvR7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmYwZmVjZDdiZjQ0MTQ4OTMxNzg4ZGZlN2YyMGQ2N2E2
N2EwZGIwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTYxN2U0YjI5YjYzZDRkYjYxYTE5MjYwYjM0YjY2ZTM0M2UzZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/O00DzcmG/65Kvv5GsUPDJ28QPs
wkRQFCAce2WirvHBISk7OX+niO3H9mI6fNa9GAUAYY+v6qcVZnM7J4LzBGoLUfyP
WJVcxZqC8sTxb2OhPPcWt/uHf41jP4ui0z8MlXNrJsODhffuzGl9yY0EuVCIatWm
Gl0O3+uUWIQ/axNck7G4MYMzwAmJlM2d68ZBrzJLqIswfCmGkB8y0afs4zRTj80F
NmsKBuJpjOMPr67/Zn9pbRajNXWLB8qugkaHEuRROa5hae2xwmLsOJeK3yTQ/drM
Pa6Vw7WNyYIEO8iqfJumN3ElO8QsqUrI8YY5abnOiXvPmRedeauZrJoVtwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFFhfksptj1NthoZJgs0tm40Pj6qMB8GA1UdIwQY
MBaAFNT/D+zXv0QUiTF4jf5/INZ6Z6DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUt
ZjBjMjFmODE4NmYwLzEvVVdGLVN5bTJQVTIyR2hrbUN6UzJialEtUHFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUtZjBjMjFmODE4NmYw
LzEvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQETfJQAwQE
UcgwAwQFUnLAAwQGskjAMA0EAgACMAcDBQMqB7XAMA0GCSqGSIb3DQEBCwUAA4IB
AQBIrxI+dtbzUtUESwmJbqA81LSPV3S7kzD3EiloFToOaghOnBUCP+Bn+MwjwKwI
v31GqIjmzFo0urdn5VdDxKH5nOkpWpsDoQwoycxKrZ8BxB+qi1uEe5W9TMKdTJZ/
ubfKDm9ZSIFP3xZbWOw3wisZiM2lH4Z6snYVBVNjDfl+M7cQbHgLmtwZ0QdZMasj
ULzcf6adUaGHzSO4J7jz33xKxivJLuZaCsFIpNGX15caTXUeg/1xUHQ9N5j+Rv0Y
sTxsCTCvGD+NqiS5W1J8ejJ4Q8fCWNU25s/8GHfpu2pyhMEwViFmc8iv5Zl36A4L
C+kbLZ+KZu8GCj25+T19pG/7
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:34 2025 by rpki-client