Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/y0Qn9mfyoI8oHI5kmtfhaTwt8Rk.roa
File: y0Qn9mfyoI8oHI5kmtfhaTwt8Rk.roa (raw, json)
Hash identifier: dJTfPEScqWqNNYTJ0yTaAYbNR29VziS7PP6kH/LLNR8=
Subject key identifier: CB:44:27:F6:67:F2:A0:8F:28:1C:8E:64:9A:D7:E1:69:3C:2D:F1:19
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9C3C267AAA1E5C2264EC97FFDAB6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/y0Qn9mfyoI8oHI5kmtfhaTwt8Rk.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9c:3c:26:7a:aa:1e:5c:22:64:ec:97:ff:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb4427f667f2a08f281c8e649ad7e1693c2df119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:a9:86:46:c6:1c:e7:59:f3:f5:25:1a:52:
d2:5a:71:bb:28:7f:34:d6:a7:b4:ef:cc:b1:e1:1d:
2d:e6:29:48:aa:17:cf:a8:3f:b8:3b:f4:f8:f2:e2:
f3:64:d4:df:fc:33:fa:6d:d8:e7:81:ca:9a:01:87:
52:06:73:10:c8:00:6e:ef:e2:96:ad:67:41:84:f5:
5d:07:b5:36:fb:d9:18:e7:e7:45:8e:68:f5:39:65:
9d:e6:8d:23:7e:2f:bc:70:2b:52:20:e7:85:5c:ff:
55:6c:26:b5:7d:f5:7a:7a:cb:64:c2:77:9b:64:38:
33:0f:f1:f2:2c:cf:a3:3c:7d:71:4f:3a:13:66:ec:
d5:06:fa:3d:c2:a8:78:a8:fb:a8:59:13:a4:11:7e:
3f:d0:23:1c:1e:74:0b:c7:ed:2c:18:27:7c:91:a8:
9a:ab:92:c5:0c:5a:c8:5e:46:e2:45:39:ed:6a:dc:
c6:6f:96:9a:7d:5e:fe:1f:04:57:50:31:45:ae:15:
2f:b7:9c:43:69:11:8f:7d:6e:50:bb:28:04:57:d5:
d5:b8:ef:a2:18:c9:b2:72:6b:f2:ff:b4:8f:18:39:
94:c5:52:26:47:f8:41:80:4c:81:fe:fe:11:94:57:
a0:34:d2:28:f8:85:0b:41:15:b9:0e:01:25:db:99:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:27:F6:67:F2:A0:8F:28:1C:8E:64:9A:D7:E1:69:3C:2D:F1:19
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/y0Qn9mfyoI8oHI5kmtfhaTwt8Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
05:28:16:55:c0:f6:62:dd:e2:da:14:4d:6f:93:77:eb:96:ac:
01:aa:6f:9f:6a:a1:a8:0a:0f:24:6e:0a:7f:28:f1:14:ac:68:
c7:0d:9d:86:eb:ea:ab:3c:52:95:c2:39:af:ee:8e:d3:23:71:
92:5e:44:aa:47:e5:79:8d:f9:9f:ae:e6:88:5b:13:fa:bc:60:
03:aa:aa:1f:70:a9:d2:92:fc:4c:e1:3e:c2:ff:9b:64:b2:29:
44:a3:6c:74:46:ea:b7:cf:bb:88:d2:7c:07:f5:0d:95:d4:af:
d5:61:23:5e:27:59:0c:f9:3f:65:83:25:8c:44:e0:af:27:67:
81:82:40:8e:ae:0f:ee:76:2d:e2:eb:72:4a:1c:14:95:e2:57:
0d:e7:bf:be:4b:f9:ce:8c:9f:ff:ec:3a:27:9b:a9:f5:ee:aa:
b9:79:ad:9b:3a:ff:8d:b9:eb:c1:89:ee:84:8e:37:b2:68:54:
aa:4e:84:a4:b0:f4:18:27:08:0e:a6:9e:a3:26:00:d5:47:0c:
20:40:16:e2:44:70:ce:32:65:5a:59:82:59:cb:eb:51:82:32:
f2:05:64:ae:48:64:ac:c1:26:73:83:13:14:a5:a8:89:44:e4:
a9:56:46:70:e3:84:95:cb:26:b4:34:9a:f3:25:4c:72:c1:cc:
2a:65:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:12 2025 by rpki-client