Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8RAm_IgsUvM9C2gq_OU2iF_p9XQ.roa
File: 8RAm_IgsUvM9C2gq_OU2iF_p9XQ.roa (raw, json)
Hash identifier: 1MWXzGiNQ9FYaMpg2YUo119v/BNPySarbvzffERJjck=
Subject key identifier: F1:10:26:FC:88:2C:52:F3:3D:0B:68:2A:FC:E5:36:88:5F:E9:F5:74
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018D16E308CF9375039A2BD68BC462DAE567
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8RAm_IgsUvM9C2gq_OU2iF_p9XQ.roa
Signing time: Wed 17 Jan 2024 10:06:34 +0000
ROA not before: Wed 17 Jan 2024 10:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49902
IP address blocks: 77.137.224.0/19 maxlen: 19
77.143.0.0/16 maxlen: 16
77.143.17.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
213.222.64.0/18 maxlen: 18
213.222.64.0/19 maxlen: 19
213.222.96.0/19 maxlen: 19
213.223.45.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:e3:08:cf:93:75:03:9a:2b:d6:8b:c4:62:da:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 17 10:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f11026fc882c52f33d0b682afce536885fe9f574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:f4:cc:dd:c6:c9:53:66:16:0a:40:98:d0:
0c:d3:88:e2:7f:54:6d:ab:5b:36:fd:a6:95:48:94:
0c:3e:04:e3:6a:e4:b2:18:db:bc:8e:c9:4f:cb:86:
88:55:a5:d0:f3:4e:c4:b3:d3:96:a3:2e:69:f2:6d:
fc:be:99:ca:2a:39:05:0e:12:ae:18:fb:37:6b:65:
ad:4f:32:f2:a8:d4:a0:37:16:e8:f0:18:e8:a7:23:
cf:1e:1a:22:a1:fa:84:23:c7:d7:23:4d:47:c6:d4:
42:c6:c2:36:1d:aa:e3:d5:1d:06:62:89:9c:c0:a7:
b4:17:77:d2:07:c1:18:a8:96:a9:9b:31:91:b4:c5:
03:c1:20:07:36:ee:cb:15:7b:04:cf:79:ce:14:d8:
6d:71:51:88:f6:e4:2e:30:8b:cf:9e:6e:9d:12:98:
0b:4f:f0:b0:a4:07:8f:0f:15:86:30:fe:02:2d:d4:
db:46:32:86:79:54:d5:61:10:ca:c3:30:e3:62:90:
d8:e8:cb:30:28:c1:9e:27:38:9e:59:61:df:26:f3:
26:a8:1d:5d:d6:33:07:bf:49:f1:6f:06:d1:a3:73:
ea:bf:11:f6:2f:fe:a3:55:58:f5:94:cb:05:f8:44:
68:ca:6d:7e:c8:f0:46:57:91:73:6b:72:f6:47:93:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:26:FC:88:2C:52:F3:3D:0B:68:2A:FC:E5:36:88:5F:E9:F5:74
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8RAm_IgsUvM9C2gq_OU2iF_p9XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f3:37:f7:f3:cc:88:19:5c:ca:e3:5c:a3:c7:05:fe:24:21:
64:14:89:9f:f6:62:ee:d2:88:2b:ea:2e:49:cd:f1:2e:c8:52:
7e:9c:32:f8:20:58:5c:5d:c1:e2:d4:a9:63:24:26:f9:4a:a9:
26:2c:04:f4:04:9c:63:df:46:52:bd:1a:ef:22:6a:da:d1:c1:
95:d5:cd:09:4c:66:ff:a7:ce:b5:48:d5:bf:d8:a8:f0:06:55:
b7:b1:f7:4e:9d:7c:cf:a5:39:41:ed:56:5f:19:24:b0:2f:a5:
ba:0d:61:78:26:d7:28:a9:77:aa:f9:46:bc:90:29:54:dd:f3:
5e:54:6d:73:a9:3c:f2:b7:c1:28:a6:b1:00:16:7d:1a:6d:3f:
df:7c:15:46:1b:15:80:0c:be:63:f8:58:a2:9b:25:73:d0:63:
e5:6f:81:5c:09:4a:95:58:66:21:1c:f6:3f:bd:8e:a2:d6:b7:
a4:d0:93:f5:1d:15:5e:1c:95:a6:54:50:5e:91:1f:d2:04:1e:
fd:17:de:df:d3:dd:96:63:fe:e1:20:9a:78:b3:ae:b1:d7:bb:
35:ac:24:59:4f:45:d1:4a:59:6c:db:a4:72:11:eb:4e:72:95:
39:9c:d3:f6:db:7e:cc:ab:e0:d9:b3:ee:3d:a2:e3:0a:c9:50:
08:df:b1:0f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAY0W4wjPk3UDmivWi8Ri2uVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjQwMTE3MTAwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTEwMjZmYzg4MmM1MmYzM2QwYjY4MmFmY2U1MzY4ODVmZTlmNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqr0zN3GyVNmFgpAmNAM04jif1Rt
q1s2/aaVSJQMPgTjauSyGNu8jslPy4aIVaXQ807Es9OWoy5p8m38vpnKKjkFDhKu
GPs3a2WtTzLyqNSgNxbo8BjopyPPHhoiofqEI8fXI01HxtRCxsI2Harj1R0GYomc
wKe0F3fSB8EYqJapmzGRtMUDwSAHNu7LFXsEz3nOFNhtcVGI9uQuMIvPnm6dEpgL
T/CwpAePDxWGMP4CLdTbRjKGeVTVYRDKwzDjYpDY6MswKMGeJzieWWHfJvMmqB1d
1jMHv0nxbwbRo3PqvxH2L/6jVVj1lMsF+ERoym1+yPBGV5Fza3L2R5OojQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFPEQJvyILFLzPQtoKvzlNohf6fV0MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvOFJBbV9JZ3NVdk05QzJncV9PVTJpRl9wOVhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQFTYngAwMA
TY8DBALDc3QDBAbV3kAwDAMEANXfLQMEBNXfIAMEANXfijANBgkqhkiG9w0BAQsF
AAOCAQEAffM39/PMiBlcyuNco8cF/iQhZBSJn/Zi7tKIK+ouSc3xLshSfpwy+CBY
XF3B4tSpYyQm+UqpJiwE9AScY99GUr0a7yJq2tHBldXNCUxm/6fOtUjVv9io8AZV
t7H3Tp18z6U5Qe1WXxkksC+lug1heCbXKKl3qvlGvJApVN3zXlRtc6k88rfBKKax
ABZ9Gm0/33wVRhsVgAy+Y/hYopslc9Bj5W+BXAlKlVhmIRz2P72Oota3pNCT9R0V
XhyVplRQXpEf0gQe/Rfe39PdlmP+4SCaeLOusde7NawkWU9F0UpZbNukchHrTnKV
OZzT9tt+zKvg2bPuPaLjCslQCN+xDw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:53 2025 by rpki-client