Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TtfN6MrzuRN0blf6l43DfiJw4FY.roa
File: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (raw, json)
Hash identifier: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=
Subject key identifier: 4E:D7:CD:E8:CA:F3:B9:13:74:6E:57:FA:97:8D:C3:7E:22:70:E0:56
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214E683DF728C05D86F710FDD3D6FD
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TtfN6MrzuRN0blf6l43DfiJw4FY.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 77.111.120.0/24 maxlen: 24
77.111.122.0/24 maxlen: 24
91.190.188.0/24 maxlen: 24
91.190.190.0/24 maxlen: 24
92.61.96.0/24 maxlen: 24
92.61.98.0/24 maxlen: 24
92.61.99.0/24 maxlen: 24
92.61.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4e:68:3d:f7:28:c0:5d:86:f7:10:fd:d3:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ed7cde8caf3b913746e57fa978dc37e2270e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:41:c1:d4:45:1b:c4:e6:d1:05:6e:8b:77:
5e:b0:74:dc:a3:07:d8:b0:4b:78:d6:12:c5:59:50:
60:7f:04:b0:f7:77:55:9a:b4:2c:6e:59:8c:15:8e:
37:9b:b5:9d:77:1a:ad:48:3a:3d:91:e0:3c:58:40:
e4:be:fc:90:4d:0c:88:e7:85:4f:a3:d3:5b:92:b8:
29:9b:0c:5f:b5:93:dc:b3:d6:98:e9:a1:66:4f:f3:
e1:2f:69:91:3d:1a:62:5f:90:a4:ff:84:74:19:52:
f9:3e:af:43:cc:d2:ca:8b:f5:96:95:f4:ce:07:9a:
ca:3a:43:5c:d1:6d:cc:9a:d0:38:48:83:a4:48:a8:
48:1e:27:f7:c0:f3:2b:6b:f9:b6:39:b2:1c:c1:a1:
15:f6:4c:4d:76:c7:43:d2:37:71:22:6e:22:6a:6e:
b6:cb:b1:ca:32:f2:bf:81:40:fc:44:7b:50:b3:29:
78:0e:85:01:3b:69:f3:57:b4:ac:77:1c:55:6a:2d:
14:cd:63:a9:bb:0c:ef:de:1f:87:bf:85:fb:82:31:
f0:b2:ce:d0:1b:0f:5d:77:05:1b:7a:99:a8:99:15:
7b:f1:96:b1:b9:41:c1:dd:a4:62:62:c7:4c:cb:cd:
f0:09:11:a3:01:8c:f1:75:78:a6:8e:81:eb:1f:51:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:CD:E8:CA:F3:B9:13:74:6E:57:FA:97:8D:C3:7E:22:70:E0:56
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/TtfN6MrzuRN0blf6l43DfiJw4FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.120.0/24
77.111.122.0/24
91.190.188.0/24
91.190.190.0/24
92.61.96.0/24
92.61.98.0-92.61.101.255
Signature Algorithm: sha256WithRSAEncryption
3f:d6:ce:ba:4e:b7:45:16:1d:84:59:d3:f5:2b:fd:a1:8d:08:
67:f1:6d:c1:25:4f:3a:85:a5:74:bc:61:89:98:b5:0d:b7:38:
a6:d6:7c:da:d2:90:ff:42:fd:a9:ea:4f:aa:b4:56:c1:cb:95:
bb:77:05:18:b3:29:dc:02:52:4e:0b:12:04:5c:65:cf:4a:6a:
ac:e8:22:26:0e:a2:85:28:24:56:93:17:5c:de:45:92:df:bb:
a5:b8:cf:01:d1:32:41:60:c2:ef:8f:c0:6b:82:ac:8e:dc:b0:
4c:de:e0:10:9a:a7:38:11:7d:4e:df:06:ce:3c:61:12:d9:f8:
e8:91:02:7d:7d:49:73:29:c8:6d:2e:41:c1:dc:65:29:ea:a6:
cd:f0:d9:bf:44:25:a4:3d:96:15:24:90:25:90:d1:05:46:3b:
87:bd:92:98:24:33:8a:a2:13:24:01:73:45:ba:72:28:7c:4f:
4d:35:2b:10:8f:d1:cb:2a:e4:d8:61:cc:a8:77:13:3b:73:85:
1b:8b:49:af:64:6a:1c:a9:83:e1:8e:23:32:4e:4e:d0:61:d3:
89:15:9f:0b:8f:eb:07:5d:44:c0:2d:a4:18:05:59:84:88:3c:
29:f8:d6:95:f2:0d:27:bd:7e:ad:b9:7f:52:c7:c7:9f:7c:05:
d8:54:b9:fe
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQlIU5oPfcowF2G9xD909b9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjUwMTAyMDM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWQ3Y2RlOGNhZjNiOTEzNzQ2ZTU3ZmE5NzhkYzM3ZTIyNzBlMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogpBwdRFG8Tm0QVui3desHTcowfY
sEt41hLFWVBgfwSw93dVmrQsblmMFY43m7WddxqtSDo9keA8WEDkvvyQTQyI54VP
o9NbkrgpmwxftZPcs9aY6aFmT/PhL2mRPRpiX5Ck/4R0GVL5Pq9DzNLKi/WWlfTO
B5rKOkNc0W3MmtA4SIOkSKhIHif3wPMra/m2ObIcwaEV9kxNdsdD0jdxIm4iam62
y7HKMvK/gUD8RHtQsyl4DoUBO2nzV7SsdxxVai0UzWOpuwzv3h+Hv4X7gjHwss7Q
Gw9ddwUbepmomRV78ZaxuUHB3aRiYsdMy83wCRGjAYzxdXimjoHrH1EdkQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFE7XzejK87kTdG5X+peNw34icOBWMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvVHRmTjZNcnp1Uk4wYmxmNmw0M0RmaUp3NEZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQATW94AwQA
TW96AwQAW768AwQAW76+AwQAXD1gMAwDBAFcPWIDBAFcPWQwDQYJKoZIhvcNAQEL
BQADggEBAD/WzrpOt0UWHYRZ0/Ur/aGNCGfxbcElTzqFpXS8YYmYtQ23OKbWfNrS
kP9C/anqT6q0VsHLlbt3BRizKdwCUk4LEgRcZc9KaqzoIiYOooUoJFaTF1zeRZLf
u6W4zwHRMkFgwu+PwGuCrI7csEze4BCapzgRfU7fBs48YRLZ+OiRAn19SXMpyG0u
QcHcZSnqps3w2b9EJaQ9lhUkkCWQ0QVGO4e9kpgkM4qiEyQBc0W6cih8T001KxCP
0csq5NhhzKh3EztzhRuLSa9kahypg+GOIzJOTtBh04kVnwuP6wddRMAtpBgFWYSI
PCn41pXyDSe9fq25f1LHx598BdhUuf4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:34 2025 by rpki-client