Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/_4ngIkzD3vQ3tsLqlXCKbBx1Pl8.roa
File: _4ngIkzD3vQ3tsLqlXCKbBx1Pl8.roa (raw, json)
Hash identifier: Q18wAsI5l6Nkcl7AlZ+tFP1jNhktNW0MT+oiIqmaOug=
Subject key identifier: FF:89:E0:22:4C:C3:DE:F4:37:B6:C2:EA:95:70:8A:6C:1C:75:3E:5F
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 0C780AF2
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/_4ngIkzD3vQ3tsLqlXCKbBx1Pl8.roa
Signing time: Mon 04 Jul 2022 09:08:25 +0000
ROA not before: Mon 04 Jul 2022 09:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39582
IP address blocks: 77.79.95.0/24 maxlen: 24
77.79.94.0/24 maxlen: 24
77.79.93.0/24 maxlen: 24
77.79.98.0/24 maxlen: 24
77.79.97.0/24 maxlen: 24
77.79.96.0/20 maxlen: 24
77.79.92.0/24 maxlen: 24
77.79.106.0/24 maxlen: 24
77.79.111.0/24 maxlen: 24
77.79.112.0/21 maxlen: 24
77.79.120.0/21 maxlen: 24
89.106.31.0/24 maxlen: 24
89.106.26.0/24 maxlen: 24
89.106.25.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.27.0/24 maxlen: 24
77.79.64.0/24 maxlen: 24
77.79.68.0/24 maxlen: 24
77.79.67.0/24 maxlen: 24
77.79.66.0/24 maxlen: 24
77.79.65.0/24 maxlen: 24
77.79.71.0/24 maxlen: 24
77.79.64.0/18 maxlen: 32
77.79.70.0/24 maxlen: 24
77.79.69.0/24 maxlen: 24
77.79.74.0/24 maxlen: 24
77.79.73.0/24 maxlen: 24
77.79.72.0/24 maxlen: 24
77.79.78.0/24 maxlen: 24
77.79.77.0/24 maxlen: 24
77.79.76.0/24 maxlen: 24
77.79.81.0/24 maxlen: 24
77.79.80.0/24 maxlen: 24
77.79.79.0/24 maxlen: 24
77.79.85.0/24 maxlen: 24
77.79.84.0/24 maxlen: 24
77.79.83.0/24 maxlen: 24
77.79.88.0/24 maxlen: 24
77.79.87.0/24 maxlen: 24
77.79.86.0/24 maxlen: 24
77.79.91.0/24 maxlen: 24
77.79.90.0/24 maxlen: 24
89.106.4.0/24 maxlen: 24
89.106.3.0/24 maxlen: 24
89.106.0.0/19 maxlen: 32
89.106.2.0/24 maxlen: 24
89.106.1.0/24 maxlen: 24
89.106.0.0/24 maxlen: 24
89.106.6.0/24 maxlen: 24
89.106.5.0/24 maxlen: 24
89.106.9.0/24 maxlen: 24
89.106.8.0/24 maxlen: 24
89.106.7.0/24 maxlen: 24
89.106.11.0/24 maxlen: 24
89.106.10.0/24 maxlen: 24
89.106.17.0/24 maxlen: 24
89.106.12.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.15.0/24 maxlen: 24
89.106.24.0/24 maxlen: 24
89.106.19.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.20.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.0.0/24 maxlen: 24
37.77.0.0/19 maxlen: 32
37.77.4.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.29.0/24 maxlen: 24
37.77.28.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.25.0/24 maxlen: 24
2a02:4300::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209193714 (0xc780af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Jul 4 09:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff89e0224cc3def437b6c2ea95708a6c1c753e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:47:8a:25:cb:5e:51:04:d0:77:76:56:ee:
bd:57:1d:4d:fd:06:99:28:b2:f7:b3:16:08:9e:79:
96:51:16:11:1e:4a:0e:76:a0:1b:28:10:39:1e:d4:
ac:5b:3c:67:ab:32:f8:0f:8b:65:48:c5:4e:d6:cf:
06:b2:e9:e7:df:18:f3:1c:bf:57:9a:c0:b5:59:bf:
b7:a9:5a:b4:de:f3:82:1b:db:83:c8:4c:73:3a:c0:
c5:03:38:06:f3:85:cb:51:68:e0:9a:b7:9c:c2:e9:
6e:53:7b:f0:bb:b2:8f:27:01:a7:87:4f:28:06:29:
a2:8e:c9:69:cb:8c:00:30:19:0b:59:d7:2e:64:b6:
3d:96:4a:e8:d4:5d:49:1a:ab:fb:bc:0e:05:1b:f5:
d5:08:f7:9c:df:4a:40:78:0f:a3:be:80:76:26:4b:
71:9b:e7:34:6d:d3:1c:78:9a:42:68:b1:cc:1c:44:
59:12:ad:37:e9:20:cb:d0:89:43:ce:eb:0d:d1:7a:
d3:00:51:6c:55:2e:54:1f:8a:a7:20:c5:ee:bc:09:
da:6f:9f:8f:e0:6b:fe:ee:8a:e4:29:80:67:4f:ae:
ca:03:4b:41:7e:3e:36:db:1d:2a:93:b9:aa:b9:53:
8a:2f:32:64:97:e2:d8:d2:71:89:28:8a:51:1a:76:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:E0:22:4C:C3:DE:F4:37:B6:C2:EA:95:70:8A:6C:1C:75:3E:5F
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/_4ngIkzD3vQ3tsLqlXCKbBx1Pl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
77.79.64.0/18
89.106.0.0/19
IPv6:
2a02:4300::/32
Signature Algorithm: sha256WithRSAEncryption
76:ca:3d:7c:43:f8:fd:e3:13:a6:3b:55:27:77:9c:5c:59:6f:
79:41:ec:c5:bd:37:8c:ce:a9:dc:2b:d0:17:ca:48:f8:4a:c0:
2e:52:8e:52:56:47:db:f4:e6:ec:07:d0:22:80:5c:13:f9:46:
83:ed:cf:5c:3b:1b:fb:e4:b2:7a:4e:85:c2:15:09:7b:ba:50:
f4:1d:ae:db:47:1d:1e:ef:20:8e:19:54:ea:b0:bc:fa:f9:73:
e5:08:e4:91:08:2f:a3:2a:d6:9e:61:07:c8:0e:3c:7b:a6:ef:
68:95:61:7c:59:53:ac:ea:bf:ce:f1:b0:fe:1b:6c:d8:be:2e:
e6:a9:21:17:47:14:a3:2b:b7:e3:b6:9c:6b:81:02:99:b3:c7:
a6:bf:7a:8f:5d:f8:81:aa:88:c9:67:4f:95:0d:c9:cc:07:bd:
77:dc:82:ca:20:26:aa:09:e5:30:e6:2e:b4:94:f2:cf:cf:1d:
ca:f3:b6:83:ec:8a:fa:9b:b2:c9:5a:f7:b8:9f:12:2f:f4:f3:
5d:64:53:47:58:2f:97:6c:4d:eb:e0:c9:be:b3:a5:0f:ec:31:
3c:08:96:7a:c2:18:58:c2:a0:50:a0:20:4b:fc:06:15:6c:6b:
04:4a:15:00:b4:c6:95:dc:2a:05:e6:97:14:2a:74:45:39:41:
fc:76:4c:46
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEDHgK8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Yjg1ODk0YTg0YmFhMGVjYTBlNmVmNDRhOTkyZmMyYmEwMGY1Mjc3MB4XDTIyMDcw
NDA5MDgyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY4OWUwMjI0Y2Mz
ZGVmNDM3YjZjMmVhOTU3MDhhNmMxYzc1M2U1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJfmR4oly15RBNB3dlbuvVcdTf0GmSiy97MWCJ55llEWER5K
DnagGygQOR7UrFs8Z6sy+A+LZUjFTtbPBrLp598Y8xy/V5rAtVm/t6latN7zghvb
g8hMczrAxQM4BvOFy1Fo4Jq3nMLpblN78LuyjycBp4dPKAYpoo7JacuMADAZC1nX
LmS2PZZK6NRdSRqr+7wOBRv11Qj3nN9KQHgPo76AdiZLcZvnNG3THHiaQmixzBxE
WRKtN+kgy9CJQ87rDdF60wBRbFUuVB+KpyDF7rwJ2m+fj+Br/u6K5CmAZ0+uygNL
QX4+NtsdKpO5qrlTii8yZJfi2NJxiSiKURp2TXcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBT/ieAiTMPe9De2wuqVcIpsHHU+XzAfBgNVHSMEGDAWgBRrhYlKhLqg7KDm
70SpkvwroA9SdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E0V0pTb1M2b095ZzV1OUVxWkw4SzZBUFVuYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvZjVjMDIwLWUxZDctNGZlOS04M2MwLWEzYmU2M2I4NTcyZi8x
L180bmdJa3pEM3ZRM3RzTHFsWENLYkJ4MVBsOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
ZjVjMDIwLWUxZDctNGZlOS04M2MwLWEzYmU2M2I4NTcyZi8xL2E0V0pTb1M2b095
ZzV1OUVxWkw4SzZBUFVuYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBSVNAAMEBk1PQAMEBVlqADANBAIA
AjAHAwUAKgJDADANBgkqhkiG9w0BAQsFAAOCAQEAdso9fEP4/eMTpjtVJ3ecXFlv
eUHsxb03jM6p3CvQF8pI+ErALlKOUlZH2/Tm7AfQIoBcE/lGg+3PXDsb++Syek6F
whUJe7pQ9B2u20cdHu8gjhlU6rC8+vlz5QjkkQgvoyrWnmEHyA48e6bvaJVhfFlT
rOq/zvGw/hts2L4u5qkhF0cUoyu347aca4ECmbPHpr96j134gaqIyWdPlQ3JzAe9
d9yCyiAmqgnlMOYutJTyz88dyvO2g+yK+puyyVr3uJ8SL/TzXWRTR1gvl2xN6+DJ
vrOlD+wxPAiWesIYWMKgUKAgS/wGFWxrBEoVALTGldwqBeaXFCp0RTlB/HZMRg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:05 2025 by rpki-client