Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/S4EG6rgQ3B8fwlmWgKf4yy21TCU.roa
File: S4EG6rgQ3B8fwlmWgKf4yy21TCU.roa (raw, json)
Hash identifier: 5ggzvaoeOp1wyzv8E9K2nZzJI3rQqbhEaRtgPJclKAc=
Subject key identifier: 4B:81:06:EA:B8:10:DC:1F:1F:C2:59:96:80:A7:F8:CB:2D:B5:4C:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019461193D596D80B093065D5FD5E2F3A62B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/S4EG6rgQ3B8fwlmWgKf4yy21TCU.roa
Signing time: Mon 13 Jan 2025 19:17:11 +0000
ROA not before: Mon 13 Jan 2025 19:17:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213673
IP address blocks: 77.239.106.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:19:3d:59:6d:80:b0:93:06:5d:5f:d5:e2:f3:a6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 13 19:17:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8106eab810dc1f1fc2599680a7f8cb2db54c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:65:cd:82:64:28:a3:bc:df:a2:70:66:e9:
0e:3d:f2:69:4c:dd:08:25:3d:6d:96:09:d3:94:db:
63:a7:b8:f4:e3:d4:d8:57:58:a6:1e:6c:a2:25:17:
a3:8e:7f:56:f1:7a:50:8f:2f:5a:cc:06:39:e4:c0:
04:61:1e:f8:2f:32:44:48:f7:1b:71:e4:f5:3f:9d:
55:02:16:0b:67:5e:f2:31:4e:83:02:38:76:74:1e:
c3:1d:19:17:9a:15:5c:3a:3a:28:85:93:16:65:04:
52:1b:a9:8c:cc:10:09:9c:ab:7e:55:bd:d2:74:32:
4c:75:36:66:0e:ff:b0:a7:96:9b:ff:cd:f1:28:f3:
33:6f:af:52:fd:c4:4e:ac:f8:07:13:4d:e8:fc:ad:
b5:fb:ed:60:4a:1c:98:d3:5a:ba:2d:e9:ae:8a:d8:
a1:a4:e1:54:2f:00:42:d3:9e:a2:63:ea:3d:62:8e:
d8:a5:7c:f7:38:92:c1:3c:8f:46:c7:cb:6b:d8:d6:
37:a3:69:c0:77:cf:d6:c0:45:55:e4:47:39:ef:5c:
8c:0e:af:59:9c:2d:a0:ee:2a:b4:6a:99:90:d0:49:
d8:eb:36:bf:ac:10:7a:b4:a2:15:8d:8d:0d:f2:b3:
9a:b6:d1:94:24:f8:f3:fb:86:e5:3c:07:42:65:db:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:06:EA:B8:10:DC:1F:1F:C2:59:96:80:A7:F8:CB:2D:B5:4C:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/S4EG6rgQ3B8fwlmWgKf4yy21TCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.106.0/23
Signature Algorithm: sha256WithRSAEncryption
55:3b:51:a4:08:e0:fe:79:7a:ca:68:59:52:83:e9:60:98:9d:
8d:c2:03:02:fb:a4:ee:54:9c:3a:03:d9:e0:35:61:55:b8:d6:
00:1e:fa:a6:82:d1:0b:ec:7b:36:d3:4e:44:40:d5:49:33:cf:
93:71:31:3d:e4:83:fb:05:27:38:51:ff:17:f5:ba:c6:df:8a:
c5:a0:17:48:53:1c:3a:33:e4:07:87:e3:3b:cb:66:37:b1:6e:
9e:86:d4:8f:b2:b5:73:52:18:b0:72:8b:16:7d:2d:3f:28:42:
f2:db:8a:43:f1:ec:45:61:fb:e1:47:64:bf:54:c3:ce:9a:b8:
fa:06:66:1c:f0:03:5a:7c:a8:8a:8b:03:f5:60:af:cd:4b:0d:
35:1a:39:cb:dd:32:ca:8d:41:ba:ce:d1:35:f8:6e:15:87:54:
01:4a:3d:a9:3c:32:a0:d4:05:88:2d:9a:4b:84:fe:84:9a:d5:
c2:45:74:08:2f:03:59:71:a0:42:1e:6c:82:f9:03:b8:00:99:
ee:bd:36:6c:0a:7f:14:ee:fb:6a:85:52:32:b4:91:70:7e:67:
b8:cf:c4:d8:b8:ea:bf:2c:bf:85:c2:18:ff:b4:51:2b:f6:d0:
dc:69:ff:00:18:f1:a8:e4:43:b2:27:7b:09:73:3c:ee:3e:80:
eb:f3:f0:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRhGT1ZbYCwkwZdX9Xi86YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMTEzMTkxNzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjgxMDZlYWI4MTBkYzFmMWZjMjU5OTY4MGE3ZjhjYjJkYjU0YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiplzYJkKKO836JwZukOPfJpTN0I
JT1tlgnTlNtjp7j049TYV1imHmyiJRejjn9W8XpQjy9azAY55MAEYR74LzJESPcb
ceT1P51VAhYLZ17yMU6DAjh2dB7DHRkXmhVcOjoohZMWZQRSG6mMzBAJnKt+Vb3S
dDJMdTZmDv+wp5ab/83xKPMzb69S/cROrPgHE03o/K21++1gShyY01q6Lemuitih
pOFULwBC056iY+o9Yo7YpXz3OJLBPI9Gx8tr2NY3o2nAd8/WwEVV5Ec571yMDq9Z
nC2g7iq0apmQ0EnY6za/rBB6tKIVjY0N8rOattGUJPjz+4blPAdCZdvkmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuBBuq4ENwfH8JZloCn+MsttUwlMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUzRFRzZyZ1EzQjhmd2xtV2dLZjR5eTIxVENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTe9qMA0G
CSqGSIb3DQEBCwUAA4IBAQBVO1GkCOD+eXrKaFlSg+lgmJ2NwgMC+6TuVJw6A9ng
NWFVuNYAHvqmgtEL7Hs2005EQNVJM8+TcTE95IP7BSc4Uf8X9brG34rFoBdIUxw6
M+QHh+M7y2Y3sW6ehtSPsrVzUhiwcosWfS0/KELy24pD8exFYfvhR2S/VMPOmrj6
BmYc8ANafKiKiwP1YK/NSw01GjnL3TLKjUG6ztE1+G4Vh1QBSj2pPDKg1AWILZpL
hP6EmtXCRXQILwNZcaBCHmyC+QO4AJnuvTZsCn8U7vtqhVIytJFwfme4z8TYuOq/
LL+Fwhj/tFEr9tDcaf8AGPGo5EOyJ3sJczzuPoDr8/Cw
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:34 2025 by rpki-client