Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/rzluH53YuQLweo6czH4qQCevrks.roa
File: rzluH53YuQLweo6czH4qQCevrks.roa (raw, json)
Hash identifier: 3sQ0eKrKDMY26p4idt/oU01AoaZ19a8v9tl6PnI7noM=
Subject key identifier: AF:39:6E:1F:9D:D8:B9:02:F0:7A:8E:9C:CC:7E:2A:40:27:AF:AE:4B
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F50D2AEB014E0ED1E85FE5D332B95
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/rzluH53YuQLweo6czH4qQCevrks.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 23
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:50:d2:ae:b0:14:e0:ed:1e:85:fe:5d:33:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af396e1f9dd8b902f07a8e9ccc7e2a4027afae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:82:6a:49:df:08:fc:cb:3b:ac:15:6e:e0:
e5:0f:9c:7d:86:bd:98:51:fb:b9:1c:91:87:6c:ca:
27:07:f2:4a:d2:45:ef:89:20:1b:15:76:b3:85:1f:
89:d4:fa:c4:38:f2:fc:27:7f:df:36:98:52:19:88:
a7:5d:e9:0b:be:9d:d9:14:cf:8c:1e:27:a5:13:f1:
fa:fd:25:8e:a4:39:05:c0:55:c4:0b:96:0b:92:d3:
21:d6:25:84:57:e7:c7:64:59:ec:92:0d:74:a3:b1:
2c:b7:c6:7c:cd:19:f9:9b:71:78:81:57:f9:f9:f2:
ec:aa:e8:b9:de:3b:c5:c9:3c:e3:9d:5b:3b:7d:67:
ea:29:20:a2:7e:9f:9d:2b:ac:40:f4:58:ed:ac:48:
f6:1a:37:43:e1:42:69:ed:fb:48:ab:ad:7f:3a:29:
62:67:6d:bf:dd:5e:ff:1a:7a:d0:ab:e7:04:bd:a3:
1d:47:ad:e6:2d:e9:77:bd:21:b9:46:b4:19:02:4b:
00:32:56:c1:6b:5d:3f:af:7e:68:99:ad:07:4d:79:
7c:10:dc:c1:f7:e8:6f:d4:37:05:96:e7:de:a6:ab:
21:33:8b:7e:8f:2f:cc:fa:e6:0c:ca:6a:3a:de:f9:
7d:e0:10:cb:ef:36:ab:98:24:cc:09:be:c3:4d:e9:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:6E:1F:9D:D8:B9:02:F0:7A:8E:9C:CC:7E:2A:40:27:AF:AE:4B
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/rzluH53YuQLweo6czH4qQCevrks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:52:b6:e5:8e:b3:26:44:d2:9d:5f:7d:0a:94:ea:24:fa:9f:
0d:81:de:cb:08:30:54:2f:dd:e6:4b:9b:f3:79:8e:ff:52:85:
4e:b8:66:0b:30:d1:ce:9e:ee:02:1c:ab:d3:c6:7c:15:a3:aa:
bb:26:54:b9:14:cf:dc:a4:cf:0d:52:59:f9:2e:9c:07:cf:70:
dd:56:b2:53:c2:63:45:a9:d1:5b:1b:0a:4e:68:9b:7b:18:bb:
26:ea:cc:72:74:c8:aa:48:67:ef:9c:ac:10:b7:da:01:25:c2:
b5:c5:d4:ce:a9:24:86:34:a4:77:b5:f2:5e:81:b4:eb:5d:20:
49:52:9e:6a:29:c0:86:5b:12:1a:e7:8d:1a:a4:97:8b:18:76:
83:ce:a0:b8:b9:b6:fa:30:d4:d9:3f:36:ee:9c:99:9c:d5:b0:
81:c2:e7:82:b7:75:e6:0c:d2:68:df:89:36:7a:9a:d5:67:2b:
a3:de:83:82:4f:e6:1c:dc:91:d7:8e:78:48:10:8f:0d:f4:ae:
8a:37:23:d8:e1:3a:86:6e:ad:5d:b2:64:6c:a3:72:a7:28:ee:
fa:ae:14:ca:f8:18:0d:3c:9a:5d:58:43:d5:ef:b9:25:c6:02:
23:97:b3:d3:c9:3d:be:70:50:14:e2:d2:a7:5e:ad:63:47:c0:
f5:b9:6a:4d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQlj1DSrrAU4O0ehf5dMyuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMTAyMDU0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjM5NmUxZjlkZDhiOTAyZjA3YThlOWNjYzdlMmE0MDI3YWZhZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1iCaknfCPzLO6wVbuDlD5x9hr2Y
Ufu5HJGHbMonB/JK0kXviSAbFXazhR+J1PrEOPL8J3/fNphSGYinXekLvp3ZFM+M
HielE/H6/SWOpDkFwFXEC5YLktMh1iWEV+fHZFnskg10o7Est8Z8zRn5m3F4gVf5
+fLsqui53jvFyTzjnVs7fWfqKSCifp+dK6xA9FjtrEj2GjdD4UJp7ftIq61/Oili
Z22/3V7/GnrQq+cEvaMdR63mLel3vSG5RrQZAksAMlbBa10/r35oma0HTXl8ENzB
9+hv1DcFlufepqshM4t+jy/M+uYMymo63vl94BDL7zarmCTMCb7DTentcwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFK85bh+d2LkC8HqOnMx+KkAnr65LMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvcnpsdUg1M1l1UUx3ZW82Y3pINHFRQ2V2cmtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABNUU8D
BAFNUVADBADCGgIDBADCGhUwDQYJKoZIhvcNAQELBQADggEBAG9StuWOsyZE0p1f
fQqU6iT6nw2B3ssIMFQv3eZLm/N5jv9ShU64Zgsw0c6e7gIcq9PGfBWjqrsmVLkU
z9ykzw1SWfkunAfPcN1WslPCY0Wp0VsbCk5om3sYuybqzHJ0yKpIZ++crBC32gEl
wrXF1M6pJIY0pHe18l6BtOtdIElSnmopwIZbEhrnjRqkl4sYdoPOoLi5tvow1Nk/
Nu6cmZzVsIHC54K3deYM0mjfiTZ6mtVnK6Peg4JP5hzckdeOeEgQjw30roo3I9jh
OoZurV2yZGyjcqco7vquFMr4GA08ml1YQ9XvuSXGAiOXs9PJPb5wUBTi0qderWNH
wPW5ak0=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:40 2025 by rpki-client