Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa
File: TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa (raw, json)
Hash identifier: 5TOUXLSShUEIyyWwQvXlNv+6kmdqCB9iCboytyJ7clM=
Subject key identifier: 4C:30:1C:F4:27:09:E3:55:22:F1:DF:EE:FD:15:86:EE:89:42:CE:6F
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214C054587D6BD434B47BE032BC37D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4c:05:45:87:d6:bd:43:4b:47:be:03:2b:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c301cf42709e35522f1dfeefd1586ee8942ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:20:df:a7:07:d9:6d:32:44:c1:f4:f5:97:
24:77:00:cd:7c:a4:95:50:51:71:43:c3:9e:ef:83:
e6:ca:9c:86:55:d5:30:57:34:ca:42:52:2e:45:71:
87:f8:8e:85:17:bb:7e:49:0b:ba:b1:5e:30:63:a0:
b5:da:0b:cb:fd:c2:57:30:7c:d5:4a:6a:8e:7f:e0:
9c:2f:1a:12:74:5d:e1:53:15:fe:ad:36:ad:0a:0e:
59:4c:56:ba:10:39:be:79:c3:b8:e8:c3:6c:a2:e0:
2c:b9:3e:b7:2b:a2:89:2d:04:29:a1:67:0e:d9:37:
f6:cb:52:05:78:c8:c9:29:e2:d8:41:b2:48:15:8a:
19:1e:c6:9d:75:0c:81:3e:0a:9e:d5:09:87:67:6b:
e5:b2:b4:99:7b:ae:d8:fa:ba:27:20:33:73:48:0a:
43:a8:d4:3e:a5:99:f4:8c:91:fa:b6:0b:f8:f7:92:
fc:be:e8:56:de:79:2c:82:9f:9a:94:08:6b:79:3e:
62:89:ce:d4:a4:36:d5:55:35:4f:57:5b:85:ca:1e:
e1:ae:b1:34:df:60:e3:ae:45:81:4e:14:b6:b0:f9:
b1:89:d1:72:65:60:90:2f:03:b3:9c:01:91:16:33:
f5:39:cd:81:e0:43:fd:15:14:dd:64:ef:f7:05:0b:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:1C:F4:27:09:E3:55:22:F1:DF:EE:FD:15:86:EE:89:42:CE:6F
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
91.190.187.0/24
92.61.103.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
73:26:a7:99:11:95:fd:ab:fc:f3:8f:0d:c3:22:b5:a0:9b:91:
44:84:14:99:73:4b:d6:67:65:bc:59:21:ed:84:94:9d:0c:93:
d4:23:84:c8:30:c8:24:30:1f:21:a7:06:b6:c6:ff:f9:e6:fd:
e4:26:0e:87:20:4a:ea:19:07:18:a8:c1:b5:74:9b:3f:96:6c:
e2:a4:5f:58:85:58:d3:99:34:1c:e8:72:33:37:e6:71:82:ba:
2d:39:d1:fb:51:74:be:38:ae:72:5f:ad:e5:91:6e:ff:3a:3a:
f7:2d:2d:ef:ef:07:cc:89:49:ea:36:54:99:a7:c3:d6:77:e0:
88:68:d7:1e:ae:99:ad:97:5f:70:57:a9:ce:b2:3c:81:c1:7b:
4d:8c:52:ab:b0:a6:d4:57:c4:8b:be:cb:9a:07:e2:e1:53:f7:
a0:e0:84:62:1e:1a:e1:b4:20:60:4e:8e:30:dd:e6:55:30:61:
c7:6d:49:ea:c8:62:d9:73:bb:2d:6d:b7:59:3d:ef:8f:95:9b:
bc:9a:c3:5f:3f:c2:42:dc:fe:49:eb:ed:48:e8:7f:44:ad:4f:
71:1f:4f:0d:7b:8c:25:b4:8e:40:c0:f0:51:d7:49:e2:a9:58:
50:92:d1:4d:a4:18:cf:84:87:1c:a8:3b:ab:76:1d:f9:9c:c3:
5e:e2:ed:4c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQlIUwFRYfWvUNLR74DK8N9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjUwMTAyMDM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzMwMWNmNDI3MDllMzU1MjJmMWRmZWVmZDE1ODZlZTg5NDJjZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4g36cH2W0yRMH09ZckdwDNfKSV
UFFxQ8Oe74PmypyGVdUwVzTKQlIuRXGH+I6FF7t+SQu6sV4wY6C12gvL/cJXMHzV
SmqOf+CcLxoSdF3hUxX+rTatCg5ZTFa6EDm+ecO46MNsouAsuT63K6KJLQQpoWcO
2Tf2y1IFeMjJKeLYQbJIFYoZHsaddQyBPgqe1QmHZ2vlsrSZe67Y+ronIDNzSApD
qNQ+pZn0jJH6tgv495L8vuhW3nksgp+alAhreT5iic7UpDbVVTVPV1uFyh7hrrE0
32DjrkWBThS2sPmxidFyZWCQLwOznAGRFjP1Oc2B4EP9FRTdZO/3BQvcIwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEwwHPQnCeNVIvHf7v0Vhu6JQs5vMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvVERBYzlDY0o0MVVpOGRfdV9SV0c3b2xDem04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATW91AwQA
TW97AwQAW767AwQAXD1nAwQAXD1qAwQAXD1tAwQCuXDwMA0GCSqGSIb3DQEBCwUA
A4IBAQBzJqeZEZX9q/zzjw3DIrWgm5FEhBSZc0vWZ2W8WSHthJSdDJPUI4TIMMgk
MB8hpwa2xv/55v3kJg6HIErqGQcYqMG1dJs/lmzipF9YhVjTmTQc6HIzN+Zxgrot
OdH7UXS+OK5yX63lkW7/Ojr3LS3v7wfMiUnqNlSZp8PWd+CIaNcerpmtl19wV6nO
sjyBwXtNjFKrsKbUV8SLvsuaB+LhU/eg4IRiHhrhtCBgTo4w3eZVMGHHbUnqyGLZ
c7stbbdZPe+PlZu8msNfP8JC3P5J6+1I6H9ErU9xH08Ne4wltI5AwPBR10niqVhQ
ktFNpBjPhIccqDurdh35nMNe4u1M
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:35 2025 by rpki-client