Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a9z6NqY_PV6Yf5A_6-QZdBOZBzg.roa
File: a9z6NqY_PV6Yf5A_6-QZdBOZBzg.roa (raw, json)
Hash identifier: oUwuELLG6Xv5NS0lVvBg3vnfEIXz/hZ7gHmsSyYNgvQ=
Subject key identifier: 6B:DC:FA:36:A6:3F:3D:5E:98:7F:90:3F:EB:E4:19:74:13:99:07:38
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422201E4C2A62CA1E31A96D873BC0768D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a9z6NqY_PV6Yf5A_6-QZdBOZBzg.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214134
IP address blocks: 77.111.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:4c:2a:62:ca:1e:31:a9:6d:87:3b:c0:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bdcfa36a63f3d5e987f903febe4197413990738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:48:9c:96:f8:c4:bf:c7:1d:20:25:90:e5:93:
a8:c1:8b:11:6d:bb:79:2e:72:d7:05:17:d1:95:cb:
53:5e:7f:1f:eb:a0:39:b1:88:d9:84:fb:df:44:3d:
0d:e2:3b:a0:72:13:6c:88:96:17:97:9d:04:8b:a8:
1e:24:d3:9e:71:d2:6f:80:69:cf:6f:32:e2:d4:9f:
3e:9f:de:ab:c8:f5:39:ce:bf:ac:12:77:e7:40:05:
2a:9d:8b:17:87:9b:ac:07:55:7b:aa:7a:3f:db:fb:
5d:1b:4a:1a:5d:c0:7d:52:13:30:9f:57:cc:d9:e4:
30:78:07:95:14:d0:c3:46:cb:60:ba:34:1a:41:64:
88:aa:a8:be:4d:9d:d9:be:20:e8:02:f1:ed:64:74:
0f:7a:d5:e0:fa:d0:7e:fa:b4:ba:26:50:fd:7e:f1:
b6:c0:5a:79:70:8b:d0:c7:89:e9:a0:74:b3:53:58:
8a:42:dd:25:34:3a:e8:5f:73:83:db:c5:e3:44:27:
8f:26:75:ba:2f:9d:c0:ba:01:08:fe:94:3f:1c:45:
78:43:c7:fe:0a:c0:89:ee:92:08:e1:82:1b:a4:7f:
2c:47:43:fc:ee:8e:6b:a7:18:1e:ba:20:87:23:2e:
f0:16:8d:55:81:89:b3:f1:43:e1:e4:c2:73:f5:ba:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:FA:36:A6:3F:3D:5E:98:7F:90:3F:EB:E4:19:74:13:99:07:38
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a9z6NqY_PV6Yf5A_6-QZdBOZBzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.111.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:9a:61:e9:60:d1:e7:b0:85:42:0b:da:76:09:a3:fa:12:68:
c4:0d:d9:8e:14:8c:b9:fc:47:3c:11:c0:e4:29:c2:7d:51:71:
25:83:e0:b7:fc:56:09:cc:2e:8d:2c:55:63:19:a3:08:ba:da:
6a:cb:af:46:5b:a2:b8:0a:d7:28:73:39:c1:e3:4a:3e:38:e7:
7e:50:66:f5:49:e4:03:31:44:02:de:74:61:1d:16:6c:dc:c1:
c7:5a:93:c6:c1:a4:4e:d0:b0:03:8d:32:aa:f1:44:54:bf:06:
85:e4:86:c4:9b:92:48:2e:8e:2d:7c:74:fd:d2:b6:1d:1e:79:
54:10:e6:2e:b5:df:5c:da:14:f9:76:8f:7c:1f:81:52:33:1f:
cb:37:d6:48:37:29:89:b8:c4:c8:1e:43:52:13:85:0a:94:ac:
fd:3e:1e:72:aa:dd:e1:9e:19:9f:a6:d0:b7:91:e2:11:37:f6:
ba:6c:dd:4c:fb:ad:64:53:4d:1e:e7:ee:4a:d3:c6:e4:3e:f3:
6e:9b:d1:e5:ae:91:dc:9b:6e:c7:b2:b6:f9:c4:e6:d9:43:42:
a7:7e:16:e4:59:07:04:c7:c6:9a:f3:58:9a:69:c9:55:f7:a5:
08:45:de:05:31:33:c2:2c:7b:88:3c:76:51:96:70:ea:d3:49:
a9:b1:c5:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIB5MKmLKHjGpbYc7wHaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRjZmEzNmE2M2YzZDVlOTg3ZjkwM2ZlYmU0MTk3NDEzOTkwNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80iclvjEv8cdICWQ5ZOowYsRbbt5
LnLXBRfRlctTXn8f66A5sYjZhPvfRD0N4jugchNsiJYXl50Ei6geJNOecdJvgGnP
bzLi1J8+n96ryPU5zr+sEnfnQAUqnYsXh5usB1V7qno/2/tdG0oaXcB9UhMwn1fM
2eQweAeVFNDDRstgujQaQWSIqqi+TZ3ZviDoAvHtZHQPetXg+tB++rS6JlD9fvG2
wFp5cIvQx4npoHSzU1iKQt0lNDroX3OD28XjRCePJnW6L53AugEI/pQ/HEV4Q8f+
CsCJ7pII4YIbpH8sR0P87o5rpxgeuiCHIy7wFo1VgYmz8UPh5MJz9brkPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvc+jamPz1emH+QP+vkGXQTmQc4MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvYTl6Nk5xWV9QVjZZZjVBXzYtUVpkQk9aQnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9vMA0G
CSqGSIb3DQEBCwUAA4IBAQDXmmHpYNHnsIVCC9p2CaP6EmjEDdmOFIy5/Ec8EcDk
KcJ9UXElg+C3/FYJzC6NLFVjGaMIutpqy69GW6K4CtcocznB40o+OOd+UGb1SeQD
MUQC3nRhHRZs3MHHWpPGwaRO0LADjTKq8URUvwaF5IbEm5JILo4tfHT90rYdHnlU
EOYutd9c2hT5do98H4FSMx/LN9ZINymJuMTIHkNSE4UKlKz9Ph5yqt3hnhmfptC3
keIRN/a6bN1M+61kU00e5+5K08bkPvNum9HlrpHcm27Hsrb5xObZQ0KnfhbkWQcE
x8aa81iaaclV96UIRd4FMTPCLHuIPHZRlnDq00mpscWI
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:00 2025 by rpki-client