Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa
File: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (raw, json)
Hash identifier: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=
Subject key identifier: 55:3E:4D:4D:21:84:0F:1E:44:81:49:A4:6E:5F:FD:23:B1:AB:E9:94
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 0195DC135701799EA513EE44AD3175777A55
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa
Signing time: Fri 28 Mar 2025 09:26:49 +0000
ROA not before: Fri 28 Mar 2025 09:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 77.83.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:13:57:01:79:9e:a5:13:ee:44:ad:31:75:77:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Mar 28 09:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553e4d4d21840f1e448149a46e5ffd23b1abe994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:67:61:9f:10:44:d6:57:99:a0:24:88:6e:
3f:f4:41:9f:4d:5c:83:e6:e1:a9:7c:e7:fa:b8:b8:
e6:a7:30:be:b6:59:3d:e3:c4:2b:6a:2c:9d:b5:e0:
9e:ee:51:70:93:b7:41:29:ac:d9:cc:52:9f:d0:07:
b0:c9:cb:f9:a9:e4:02:03:04:fe:fe:ce:c3:2b:1f:
20:d7:54:da:20:2c:26:52:04:8b:f8:63:66:5e:e3:
ba:fc:48:16:da:f2:23:7e:30:0f:b6:cb:e2:36:04:
67:cd:c0:59:a7:e6:be:40:2c:c3:5e:fe:d8:33:d5:
6b:40:9b:02:38:1e:9a:4c:0d:63:85:13:cd:87:93:
53:2d:31:d1:68:6a:41:1e:e6:97:11:91:8f:7e:c3:
2e:9e:13:0a:8e:eb:d9:c8:2f:0b:bc:3d:9b:63:04:
40:90:04:9c:3e:e0:82:78:49:d7:4b:ee:26:80:4e:
5f:99:48:fd:b5:c9:9b:e7:9a:f0:98:58:1d:1a:5c:
f8:88:9b:cd:53:68:7b:c9:97:bf:c3:e5:a2:eb:0e:
78:ac:02:f5:37:b1:b4:2c:6b:16:59:73:b9:47:cd:
39:7c:84:3a:57:f1:f7:92:af:b8:2d:65:7e:8b:75:
70:87:a8:5b:3b:43:b1:dd:32:0e:34:0c:2f:be:a2:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:4D:4D:21:84:0F:1E:44:81:49:A4:6E:5F:FD:23:B1:AB:E9:94
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d3:51:70:71:40:08:d0:a4:11:ad:47:ca:98:5b:62:02:c7:
8c:9d:c6:9a:b4:24:23:a5:2e:b7:42:fd:ad:dc:b7:ef:66:26:
3f:a7:3f:4c:5c:aa:3e:26:55:ab:76:c8:9d:42:7d:bb:62:96:
e6:b1:59:4c:4a:d9:8c:b7:a7:6a:aa:27:df:f9:3a:b5:ea:e9:
5d:5e:81:06:7c:e3:9e:70:5a:ba:58:41:20:c1:20:f5:dc:43:
04:70:13:79:6b:d2:74:1b:2a:32:8a:75:10:e3:5a:0e:ea:b2:
28:87:1b:c7:a5:34:68:83:15:e6:7b:0b:fd:1d:1a:1e:44:2a:
c8:0d:38:39:70:85:73:06:ed:93:ad:93:52:01:b6:b5:b3:6d:
bd:38:8d:a9:ed:11:41:5a:cf:54:df:95:87:c1:18:92:0c:ad:
96:b3:a5:46:e1:bc:74:e0:18:8b:c1:ff:93:37:25:53:9e:9a:
20:45:88:ee:f5:86:31:8e:5e:4e:e3:1f:48:73:3b:9f:7c:1b:
54:e1:f7:2a:9a:29:90:45:ac:fa:a0:8e:f2:2b:f2:4d:37:09:
b5:90:48:c7:de:b4:97:2f:93:b7:a9:4f:02:16:84:30:8f:c2:
4d:94:51:d2:7b:81:b6:d1:32:7f:0b:01:b5:f2:51:c8:f6:5b:
00:7b:f2:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXcE1cBeZ6lE+5ErTF1d3pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjUwMzI4MDkyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTNlNGQ0ZDIxODQwZjFlNDQ4MTQ5YTQ2ZTVmZmQyM2IxYWJlOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w1nYZ8QRNZXmaAkiG4/9EGfTVyD
5uGpfOf6uLjmpzC+tlk948QraiydteCe7lFwk7dBKazZzFKf0Aewycv5qeQCAwT+
/s7DKx8g11TaICwmUgSL+GNmXuO6/EgW2vIjfjAPtsviNgRnzcBZp+a+QCzDXv7Y
M9VrQJsCOB6aTA1jhRPNh5NTLTHRaGpBHuaXEZGPfsMunhMKjuvZyC8LvD2bYwRA
kAScPuCCeEnXS+4mgE5fmUj9tcmb55rwmFgdGlz4iJvNU2h7yZe/w+Wi6w54rAL1
N7G0LGsWWXO5R805fIQ6V/H3kq+4LWV+i3Vwh6hbO0Ox3TIONAwvvqJkbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFU+TU0hhA8eRIFJpG5f/SOxq+mUMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvVlQ1TlRTR0VEeDVFZ1Vta2JsXzlJN0dyNlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVOFMA0G
CSqGSIb3DQEBCwUAA4IBAQAV01FwcUAI0KQRrUfKmFtiAseMncaatCQjpS63Qv2t
3LfvZiY/pz9MXKo+JlWrdsidQn27YpbmsVlMStmMt6dqqiff+Tq16uldXoEGfOOe
cFq6WEEgwSD13EMEcBN5a9J0GyoyinUQ41oO6rIohxvHpTRogxXmewv9HRoeRCrI
DTg5cIVzBu2TrZNSAba1s229OI2p7RFBWs9U35WHwRiSDK2Ws6VG4bx04BiLwf+T
NyVTnpogRYju9YYxjl5O4x9IczuffBtU4fcqmimQRaz6oI7yK/JNNwm1kEjH3rSX
L5O3qU8CFoQwj8JNlFHSe4G20TJ/CwG18lHI9lsAe/Lm
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:54 2025 by rpki-client