Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8cldDAL4N6ncG-5fwk8QqqNG0oA.roa
File: 8cldDAL4N6ncG-5fwk8QqqNG0oA.roa (raw, json)
Hash identifier: SR3y1ZGH3AHxZfDeZFAZPe6BHyI2J5EqqXLvOuxCFkA=
Subject key identifier: F1:C9:5D:0C:02:F8:37:A9:DC:1B:EE:5F:C2:4F:10:AA:A3:46:D2:80
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0186972D2C0084BC28B6FC0C61A32A7D3E49
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8cldDAL4N6ncG-5fwk8QqqNG0oA.roa
Signing time: Tue 28 Feb 2023 08:39:25 +0000
ROA not before: Tue 28 Feb 2023 08:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34568
IP address blocks: 193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:2d:2c:00:84:bc:28:b6:fc:0c:61:a3:2a:7d:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Feb 28 08:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1c95d0c02f837a9dc1bee5fc24f10aaa346d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:7d:0b:5c:92:b9:78:94:fe:f8:a1:09:51:
8e:77:44:3d:61:61:a3:36:2e:f1:5f:fd:fb:66:4d:
18:43:fe:36:06:0a:50:c2:15:1b:fa:f4:aa:e8:57:
14:4b:5d:d2:c7:0a:42:66:58:23:5b:41:3e:26:4c:
3b:12:10:5d:62:55:9b:0d:88:34:22:31:8a:1c:a8:
92:22:63:25:f8:e1:b5:d4:73:cb:2a:1d:68:73:5f:
8b:e8:e5:32:68:45:c3:2a:5e:60:57:9a:80:a1:13:
88:57:12:99:1f:2a:ee:a0:ef:cc:6e:ae:6e:27:82:
18:ef:37:c3:67:f0:8b:a7:78:f0:5d:8c:32:92:4e:
6f:1c:bb:bc:f0:2a:3a:0f:fe:fc:04:6c:06:fd:57:
f8:0e:1b:5a:40:35:b6:90:84:cd:2e:5c:68:2c:2d:
96:46:93:d9:0a:79:9c:1d:7c:00:67:75:e8:62:0f:
b4:c3:4b:ae:21:07:6b:d0:a4:2b:cb:e5:c2:38:12:
ee:a2:d6:b9:50:5d:4c:7d:f4:4c:de:e1:65:94:6f:
cc:f3:a4:a0:57:21:52:74:a5:e4:69:9f:4d:4d:58:
65:a7:7b:00:7d:a0:f8:35:de:50:d2:42:a6:a2:ad:
d6:7c:15:61:fc:59:2e:2b:ef:f5:d0:92:b3:84:bb:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:5D:0C:02:F8:37:A9:DC:1B:EE:5F:C2:4F:10:AA:A3:46:D2:80
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8cldDAL4N6ncG-5fwk8QqqNG0oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
84.246.120.0/21
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
78:dc:c0:64:57:e2:89:0f:72:fa:8b:08:6b:b7:1f:94:0c:1c:
0b:10:83:e9:72:88:39:57:ae:50:c4:19:03:33:4e:7a:99:d4:
43:06:b5:79:d3:3d:45:6c:e9:1d:3c:39:1b:e8:2f:c8:73:82:
82:58:3b:13:c5:d3:7c:16:40:0a:cc:d1:5f:6b:ff:c5:5c:5d:
86:11:4a:41:d5:87:1c:c4:5c:e7:37:58:27:15:97:14:ed:9c:
9f:1f:54:65:7b:bc:2f:8c:ea:87:ac:e7:1c:90:29:82:96:ff:
59:4e:60:aa:b3:03:19:5e:1e:fe:37:78:02:dd:65:bc:4e:05:
c8:62:f4:5e:2a:01:ab:78:c5:76:8f:b1:49:87:99:9d:03:99:
6b:91:5a:f8:b8:78:f5:2e:c8:c1:f4:58:86:c6:b5:96:8d:01:
88:c9:7f:57:4b:48:79:66:a8:6b:88:89:b2:82:c9:ff:d9:fe:
23:57:b0:ce:58:11:75:ef:a6:fd:89:77:5b:b9:7a:d0:03:57:
6f:c3:50:8b:88:32:17:ea:bb:66:a6:6f:6f:a0:07:00:b2:6d:
10:b6:25:d9:de:a5:a3:8c:ad:0c:83:d6:39:eb:1d:1d:ae:e5:
4d:4a:7f:b2:f6:ed:70:43:b3:18:db:43:83:4e:ed:1f:6c:a5:
ef:fe:0a:07
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYaXLSwAhLwotvwMYaMqfT5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjMwMjI4MDgzOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWM5NWQwYzAyZjgzN2E5ZGMxYmVlNWZjMjRmMTBhYWEzNDZkMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnV9C1ySuXiU/vihCVGOd0Q9YWGj
Ni7xX/37Zk0YQ/42BgpQwhUb+vSq6FcUS13SxwpCZlgjW0E+Jkw7EhBdYlWbDYg0
IjGKHKiSImMl+OG11HPLKh1oc1+L6OUyaEXDKl5gV5qAoROIVxKZHyruoO/Mbq5u
J4IY7zfDZ/CLp3jwXYwykk5vHLu88Co6D/78BGwG/Vf4DhtaQDW2kITNLlxoLC2W
RpPZCnmcHXwAZ3XoYg+0w0uuIQdr0KQry+XCOBLuota5UF1MffRM3uFllG/M86Sg
VyFSdKXkaZ9NTVhlp3sAfaD4Nd5Q0kKmoq3WfBVh/FkuK+/10JKzhLuArQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPHJXQwC+Dep3BvuX8JPEKqjRtKAMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvOGNsZERBTDRONm5jRy01ZndrOFFxcU5HMG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTVf4AwQD
VPZ4AwQAwYpRAwQBwnTqMA0EAgACMAcDBQAqAQH4MA0GCSqGSIb3DQEBCwUAA4IB
AQB43MBkV+KJD3L6iwhrtx+UDBwLEIPpcog5V65QxBkDM056mdRDBrV50z1FbOkd
PDkb6C/Ic4KCWDsTxdN8FkAKzNFfa//FXF2GEUpB1YccxFznN1gnFZcU7ZyfH1Rl
e7wvjOqHrOcckCmClv9ZTmCqswMZXh7+N3gC3WW8TgXIYvReKgGreMV2j7FJh5md
A5lrkVr4uHj1LsjB9FiGxrWWjQGIyX9XS0h5ZqhriImygsn/2f4jV7DOWBF176b9
iXdbuXrQA1dvw1CLiDIX6rtmpm9voAcAsm0QtiXZ3qWjjK0Mg9Y56x0druVNSn+y
9u1wQ7MY20ODTu0fbKXv/goH
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:36 2025 by rpki-client