Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LouV9CNyeDg8LwFm0WQg3Epf8sM.roa
File: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (raw, json)
Hash identifier: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=
Subject key identifier: 2E:8B:95:F4:23:72:78:38:3C:2F:01:66:D1:64:20:DC:4A:5F:F2:C3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D8BEB9EDCBB3F58836CE904C256C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LouV9CNyeDg8LwFm0WQg3Epf8sM.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d8:be:b9:ed:cb:b3:f5:88:36:ce:90:4c:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8b95f4237278383c2f0166d16420dc4a5ff2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:2d:b0:25:f5:38:a7:90:fa:78:4b:bc:c1:
1c:a8:c0:79:8a:6e:af:b1:ea:6a:3d:ea:f6:8e:13:
22:7f:32:13:e8:9a:9e:35:1e:26:32:24:32:5e:28:
44:e1:54:90:a0:30:22:73:42:90:36:8f:4f:63:ce:
56:13:68:f0:82:23:29:97:51:cc:7c:1b:cb:94:64:
f3:5b:bd:e0:a2:6f:7a:9b:c9:e4:8f:56:cd:79:62:
09:37:53:eb:bf:28:39:0d:73:98:89:da:bd:40:e3:
5a:d8:81:95:64:df:fd:7b:e1:f2:44:4f:0e:1b:e8:
9a:e6:b3:36:f3:63:d0:e9:31:e6:68:11:a8:cf:de:
c0:4b:2a:2d:98:82:c5:d5:98:80:b7:8a:3e:cb:31:
da:e0:2c:7c:0b:35:4e:2d:32:57:19:10:23:7d:bb:
b2:2b:23:16:63:43:c3:2d:d6:a2:72:08:d7:eb:cb:
a9:1a:cc:d3:4e:c1:14:a1:84:ee:81:1b:a6:f5:c1:
14:d8:8b:da:69:69:d2:3a:64:77:d3:8d:9e:28:f2:
26:07:09:ad:4e:3a:a3:95:5b:da:10:de:62:64:13:
73:46:3f:08:73:ae:aa:e1:2a:fe:78:6c:e0:61:e3:
a3:1a:27:12:41:32:f6:6f:f4:4d:a0:58:0e:19:7a:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:95:F4:23:72:78:38:3C:2F:01:66:D1:64:20:DC:4A:5F:F2:C3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LouV9CNyeDg8LwFm0WQg3Epf8sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cc:f6:81:e9:4b:ac:1d:ac:4d:49:85:a3:1c:29:78:c9:da:
ff:fc:12:ca:0d:19:bd:26:b5:ae:fb:f3:72:bd:7e:f8:49:9a:
ce:ec:5c:7e:a3:89:5b:b9:8a:23:5c:3c:98:7d:f9:3e:06:7a:
23:a8:b2:c5:10:19:26:17:3a:0a:5b:27:e7:c2:2e:73:5e:a0:
d1:44:20:7b:4c:1d:a9:fc:8e:da:39:ed:3c:8f:61:a5:1b:c6:
5f:88:bc:7c:d9:e4:72:f5:2d:48:6d:37:cd:c8:e7:65:0f:94:
b4:5f:1c:fb:05:9e:8e:73:ff:ce:91:97:8e:89:9a:57:a6:0d:
68:f9:59:c6:c2:6e:cf:04:fd:d7:52:ba:ec:49:44:d0:d4:4d:
48:97:4b:3e:96:fd:9e:50:d0:63:50:e8:2c:11:72:99:c2:95:
e4:f8:ff:01:ed:cf:0f:da:67:6a:33:0f:e2:8e:68:cb:de:83:
a8:98:52:65:93:02:74:ad:64:f6:5a:cc:20:8d:1e:14:d8:2d:
95:f2:fc:8a:ad:2f:f6:4a:fa:22:33:92:f5:00:32:b5:a0:a4:
63:b9:41:c4:5f:d5:11:52:03:26:26:93:e0:a5:17:bf:31:30:
1a:7b:c0:1a:d1:d8:6f:dd:e6:8b:a3:03:bc:f2:88:c0:b4:c9:
63:50:0f:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRNi+ue3Ls/WINs6QTCVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMTAxMjM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThiOTVmNDIzNzI3ODM4M2MyZjAxNjZkMTY0MjBkYzRhNWZmMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ctsCX1OKeQ+nhLvMEcqMB5im6v
sepqPer2jhMifzIT6JqeNR4mMiQyXihE4VSQoDAic0KQNo9PY85WE2jwgiMpl1HM
fBvLlGTzW73gom96m8nkj1bNeWIJN1Prvyg5DXOYidq9QONa2IGVZN/9e+HyRE8O
G+ia5rM282PQ6THmaBGoz97ASyotmILF1ZiAt4o+yzHa4Cx8CzVOLTJXGRAjfbuy
KyMWY0PDLdaicgjX68upGszTTsEUoYTugRum9cEU2IvaaWnSOmR3042eKPImBwmt
TjqjlVvaEN5iZBNzRj8Ic66q4Sr+eGzgYeOjGicSQTL2b/RNoFgOGXqp+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC6LlfQjcng4PC8BZtFkINxKX/LDMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvTG91VjlDTnllRGc4THdGbTBXUWczRXBmOHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbeMA0G
CSqGSIb3DQEBCwUAA4IBAQAAzPaB6UusHaxNSYWjHCl4ydr//BLKDRm9JrWu+/Ny
vX74SZrO7Fx+o4lbuYojXDyYffk+BnojqLLFEBkmFzoKWyfnwi5zXqDRRCB7TB2p
/I7aOe08j2GlG8ZfiLx82eRy9S1IbTfNyOdlD5S0Xxz7BZ6Oc//OkZeOiZpXpg1o
+VnGwm7PBP3XUrrsSUTQ1E1Il0s+lv2eUNBjUOgsEXKZwpXk+P8B7c8P2mdqMw/i
jmjL3oOomFJlkwJ0rWT2WswgjR4U2C2V8vyKrS/2SvoiM5L1ADK1oKRjuUHEX9UR
UgMmJpPgpRe/MTAae8Aa0dhv3eaLowO88ojAtMljUA8q
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:09 2025 by rpki-client