Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/59SaltDz-0o_TQoBEKFXLERY6y8.roa
File: 59SaltDz-0o_TQoBEKFXLERY6y8.roa (raw, json)
Hash identifier: 8OZsJspR0zg99vIUKnzi0iZkH7/6VtXXwr7pGOuqCK0=
Subject key identifier: E7:D4:9A:96:D0:F3:FB:4A:3F:4D:0A:01:10:A1:57:2C:44:58:EB:2F
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 019426D9E1D32C3B3A7256D6D1408478E9E8
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/59SaltDz-0o_TQoBEKFXLERY6y8.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213162
IP address blocks: 83.138.57.0/24 maxlen: 24
176.116.120.0/22 maxlen: 22
2a0f:fa40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e1:d3:2c:3b:3a:72:56:d6:d1:40:84:78:e9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7d49a96d0f3fb4a3f4d0a0110a1572c4458eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:f7:e0:f7:e9:e3:78:32:03:f1:49:ef:30:
82:9e:93:b5:f2:c9:fc:17:92:f5:8d:89:b0:51:48:
20:90:8d:1d:5e:ad:b2:e9:8d:c7:b8:a8:94:7e:4c:
9a:cc:67:72:30:a4:2c:47:a6:3d:20:41:39:49:06:
c6:61:76:09:b8:c7:bf:c6:a4:3b:96:80:74:86:90:
bb:ef:6f:7d:8a:9c:bb:18:cc:de:99:f4:7d:fc:ac:
01:7f:b9:83:c0:df:06:ab:cf:be:4e:52:49:27:c0:
54:00:18:02:b3:e9:46:86:d9:75:70:d6:c2:fd:9d:
e9:30:df:6f:9b:9b:ea:db:ae:7c:92:94:cb:4e:dc:
25:96:12:17:d9:20:8c:86:dc:b0:71:29:3b:17:57:
54:41:4f:53:2e:b5:6e:be:4b:6d:fc:5a:ba:9b:8e:
10:30:11:43:f1:1d:d0:6a:72:3b:80:eb:76:d3:cc:
4c:20:77:4d:de:c9:2e:b3:d9:ed:cd:81:a9:55:51:
37:94:7f:74:03:ff:32:f7:b1:dd:b7:3e:22:d3:78:
7f:e8:89:4a:dc:00:b0:dd:b4:7f:07:68:00:89:d9:
01:ff:85:64:eb:42:9c:ad:82:bb:bf:31:ec:13:16:
ca:f0:24:df:ca:73:70:97:37:76:86:f5:a4:d6:2d:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:9A:96:D0:F3:FB:4A:3F:4D:0A:01:10:A1:57:2C:44:58:EB:2F
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/59SaltDz-0o_TQoBEKFXLERY6y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.57.0/24
176.116.120.0/22
IPv6:
2a0f:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cc:c1:55:2d:6a:3a:13:c3:24:3a:86:54:cd:65:60:81:90:
82:b7:09:3c:e8:62:6a:d8:87:93:e0:27:a8:87:d9:2f:48:47:
2c:6e:eb:f1:0d:2b:bf:92:db:c8:4b:db:65:9b:b5:63:7f:0a:
fb:29:e2:f7:07:e0:f7:fc:0d:a9:63:60:63:a7:92:e4:3d:1c:
e2:ca:72:b1:bb:11:3e:b4:64:63:45:53:69:1a:12:77:db:a6:
d1:6b:44:92:35:14:b6:9b:49:74:bc:38:eb:5a:05:0f:f6:6d:
f3:09:bc:f1:f2:5d:4e:92:02:93:0a:29:00:d0:0b:7c:47:57:
6c:5f:03:d0:b0:8f:cd:5a:58:6d:2d:c2:ca:29:66:f3:a6:b1:
cd:d7:81:1a:3d:11:34:47:88:f4:4f:84:06:6a:f5:dd:37:ad:
22:3c:e8:47:3c:3d:cd:1d:d1:5b:8e:43:0d:b5:b1:02:03:b3:
4b:89:29:75:5c:d9:6b:53:2f:49:b6:a8:a7:d4:51:43:38:5a:
9c:32:fc:79:92:63:b4:53:b5:8e:e1:32:68:56:79:99:b0:92:
7b:9c:0f:71:f3:d9:62:6a:34:f4:11:19:70:68:4c:70:c0:7e:
cc:7b:03:3c:63:b7:46:d4:bd:0b:92:24:52:4f:3f:fe:4a:c4:
d1:19:de:4b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQm2eHTLDs6clbW0UCEeOnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjUwMTAyMTE1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Q0OWE5NmQwZjNmYjRhM2Y0ZDBhMDExMGExNTcyYzQ0NThlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnav34Pfp43gyA/FJ7zCCnpO18sn8
F5L1jYmwUUggkI0dXq2y6Y3HuKiUfkyazGdyMKQsR6Y9IEE5SQbGYXYJuMe/xqQ7
loB0hpC77299ipy7GMzemfR9/KwBf7mDwN8Gq8++TlJJJ8BUABgCs+lGhtl1cNbC
/Z3pMN9vm5vq2658kpTLTtwllhIX2SCMhtywcSk7F1dUQU9TLrVuvktt/Fq6m44Q
MBFD8R3QanI7gOt208xMIHdN3skus9ntzYGpVVE3lH90A/8y97Hdtz4i03h/6IlK
3ACw3bR/B2gAidkB/4Vk60KcrYK7vzHsExbK8CTfynNwlzd2hvWk1i2MNQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOfUmpbQ8/tKP00KARChVyxEWOsvMB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvNTlTYWx0RHotMG9fVFFvQkVLRlhMRVJZNnk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAU4o5AwQC
sHR4MA0EAgACMAcDBQMqD/pAMA0GCSqGSIb3DQEBCwUAA4IBAQCezMFVLWo6E8Mk
OoZUzWVggZCCtwk86GJq2IeT4Ceoh9kvSEcsbuvxDSu/ktvIS9tlm7Vjfwr7KeL3
B+D3/A2pY2Bjp5LkPRziynKxuxE+tGRjRVNpGhJ326bRa0SSNRS2m0l0vDjrWgUP
9m3zCbzx8l1OkgKTCikA0At8R1dsXwPQsI/NWlhtLcLKKWbzprHN14EaPRE0R4j0
T4QGavXdN60iPOhHPD3NHdFbjkMNtbECA7NLiSl1XNlrUy9Jtqin1FFDOFqcMvx5
kmO0U7WO4TJoVnmZsJJ7nA9x89liajT0ERlwaExwwH7MewM8Y7dG1L0LkiRSTz/+
SsTRGd5L
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:01 2025 by rpki-client