Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/M-829mykxAsFBnvMzjRJ2az4Msk.roa
File: M-829mykxAsFBnvMzjRJ2az4Msk.roa (raw, json)
Hash identifier: HjgE9KqQQBakENsS5sf5myByB0D5zVgXxicLuU0gQik=
Subject key identifier: 33:EF:36:F6:6C:A4:C4:0B:05:06:7B:CC:CE:34:49:D9:AC:F8:32:C9
Certificate issuer: /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial: 019427476F6C79662D91769F805F38C1544D
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/M-829mykxAsFBnvMzjRJ2az4Msk.roa
Signing time: Thu 02 Jan 2025 13:49:40 +0000
ROA not before: Thu 02 Jan 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207833
IP address blocks: 158.255.77.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6f:6c:79:66:2d:91:76:9f:80:5f:38:c1:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
Validity
Not Before: Jan 2 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ef36f66ca4c40b05067bccce3449d9acf832c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:f6:6d:94:ed:12:8b:dc:c1:67:fb:3e:e7:
03:7d:10:d7:67:49:92:ce:87:1e:e5:a6:c4:be:43:
9c:12:b4:7a:45:cb:4c:57:3f:c1:64:ed:5e:8a:e6:
ac:a9:d9:82:69:63:6c:b3:8e:fc:bd:72:b5:98:4d:
cb:56:94:1b:9c:cb:2d:77:7d:c0:b8:a2:86:2d:0a:
d5:99:d5:ee:18:2f:d0:8e:a0:48:f4:41:06:a2:d3:
8f:03:4d:d6:43:3b:83:12:c9:57:1a:a2:6f:9f:56:
59:4c:aa:f8:83:b5:0a:f9:24:17:de:55:a1:aa:63:
bb:21:97:c5:e4:cb:82:b1:ba:99:5b:30:9b:7b:69:
59:8d:94:10:b5:35:a5:0f:11:4d:57:64:71:d6:da:
a0:b7:af:e7:cc:49:9e:36:4c:42:4c:17:79:37:e4:
bb:33:e3:4c:36:83:bb:1a:00:ad:26:bb:e8:b1:50:
41:b6:b2:95:5b:ea:3e:fe:7a:5a:f7:d3:23:40:bd:
9b:b0:1d:94:a0:c4:af:1f:6a:57:10:f2:11:ca:73:
6d:aa:32:94:4c:90:9c:8d:73:f9:dd:db:95:ee:0c:
7c:a9:65:78:24:5f:70:bf:bd:87:ce:62:88:2b:7c:
3e:02:1c:86:19:10:6e:b5:96:3c:77:22:71:70:99:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:36:F6:6C:A4:C4:0B:05:06:7B:CC:CE:34:49:D9:AC:F8:32:C9
X509v3 Authority Key Identifier:
keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/M-829mykxAsFBnvMzjRJ2az4Msk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.77.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3b:94:d5:6d:1f:27:70:91:05:99:12:c6:19:a5:5c:ae:52:
af:e0:8d:34:73:aa:7b:4e:04:70:f2:04:c2:ae:3d:6a:97:d7:
d5:f9:f6:7f:8c:ef:49:c4:6d:78:19:8a:b1:70:9f:95:70:fe:
6d:3f:91:52:97:a1:2c:d6:22:e0:e6:4a:f6:53:aa:31:83:47:
19:ca:bf:56:bb:3b:b2:12:f5:c0:3a:4b:3a:91:45:a3:73:0f:
7e:84:69:45:84:b7:e9:4a:30:a3:57:4b:46:87:af:0e:d4:a3:
13:0c:48:34:19:b8:e7:80:46:f9:e0:6d:db:61:ba:76:1b:78:
02:d6:44:a7:17:3f:15:23:53:05:3f:91:7e:dd:f4:16:08:78:
dc:74:ef:5c:46:ed:f5:68:10:a9:ce:e3:0a:fc:f6:02:cd:56:
e3:7f:bc:0a:de:d8:a6:02:eb:53:f7:de:2c:7d:fb:2c:a6:d8:
17:d5:91:4b:bf:35:ed:8c:37:5e:1d:e1:82:f4:92:43:1d:19:
b5:cb:ad:d0:94:6f:da:d2:23:4f:cd:5e:e6:e5:49:fb:9e:61:
64:b1:ee:30:a4:2c:e4:33:80:a6:6a:2e:37:50:a7:9a:9d:bc:
71:2d:ea:bd:d1:3b:d8:fb:74:35:e9:46:f3:c7:d8:71:3c:c5:
45:8b:5a:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR29seWYtkXafgF84wVRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDE4MzYyM2ZjMTZkYzc0Y2I3NzU0NjJjMzZkMzEwMTZh
NDBhYzEwHhcNMjUwMTAyMTM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2VmMzZmNjZjYTRjNDBiMDUwNjdiY2NjZTM0NDlkOWFjZjgzMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQf2bZTtEovcwWf7PucDfRDXZ0mS
zoce5abEvkOcErR6RctMVz/BZO1eiuasqdmCaWNss478vXK1mE3LVpQbnMstd33A
uKKGLQrVmdXuGC/QjqBI9EEGotOPA03WQzuDEslXGqJvn1ZZTKr4g7UK+SQX3lWh
qmO7IZfF5MuCsbqZWzCbe2lZjZQQtTWlDxFNV2Rx1tqgt6/nzEmeNkxCTBd5N+S7
M+NMNoO7GgCtJrvosVBBtrKVW+o+/npa99MjQL2bsB2UoMSvH2pXEPIRynNtqjKU
TJCcjXP53duV7gx8qWV4JF9wv72HzmKIK3w+AhyGGRButZY8dyJxcJkPEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPvNvZspMQLBQZ7zM40Sdms+DLJMB8GA1UdIwQY
MBaAFBUBg2I/wW3HTLd1Riw20xAWpArBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFHRFlqX0JiY2RNdDNWR0xEYlRFQmFrQ3NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mM2ZiMjQtOWEyMC00NDllLWFmNjIt
MjhmNTIwNTJjMWRkLzEvTS04MjlteWt4QXNGQm52TXpqUkoyYXo0TXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mM2ZiMjQtOWEyMC00NDllLWFmNjItMjhmNTIwNTJjMWRk
LzEvRlFHRFlqX0JiY2RNdDNWR0xEYlRFQmFrQ3NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnv9NMA0G
CSqGSIb3DQEBCwUAA4IBAQCCO5TVbR8ncJEFmRLGGaVcrlKv4I00c6p7TgRw8gTC
rj1ql9fV+fZ/jO9JxG14GYqxcJ+VcP5tP5FSl6Es1iLg5kr2U6oxg0cZyr9Wuzuy
EvXAOks6kUWjcw9+hGlFhLfpSjCjV0tGh68O1KMTDEg0GbjngEb54G3bYbp2G3gC
1kSnFz8VI1MFP5F+3fQWCHjcdO9cRu31aBCpzuMK/PYCzVbjf7wK3timAutT994s
ffssptgX1ZFLvzXtjDdeHeGC9JJDHRm1y63QlG/a0iNPzV7m5Un7nmFkse4wpCzk
M4Cmai43UKeanbxxLeq90TvY+3Q16Ubzx9hxPMVFi1o1
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:58 2025 by rpki-client