Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/8L44IrkkvnWwO7YzdGP90TGDjSg.roa
File: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (raw, json)
Hash identifier: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=
Subject key identifier: F0:BE:38:22:B9:24:BE:75:B0:3B:B6:33:74:63:FD:D1:31:83:8D:28
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019422FB9AE6AEF8C12D13D002E532B59D9F
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/8L44IrkkvnWwO7YzdGP90TGDjSg.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 79.110.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9a:e6:ae:f8:c1:2d:13:d0:02:e5:32:b5:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0be3822b924be75b03bb6337463fdd131838d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:47:de:d0:a5:34:75:6b:26:4d:f3:d5:ef:
8c:74:06:76:a5:67:cb:6e:0d:53:fc:b9:ac:10:e2:
ef:eb:11:90:41:c3:ba:35:b3:4e:16:5a:e0:94:04:
61:71:c5:65:ec:2b:ca:10:59:f9:29:e7:3d:d5:40:
54:17:0e:2e:aa:5b:73:90:ad:bd:4d:36:ea:b3:c3:
fd:27:e3:12:12:57:30:f9:b7:47:c8:f8:f1:d8:63:
5c:41:54:b3:de:d3:d6:44:09:a5:60:96:bf:01:33:
62:c6:1c:af:b7:ea:f6:2a:09:b6:00:f0:9a:f5:e4:
e7:1b:7f:61:9f:43:ae:16:54:75:db:8a:37:fa:d1:
66:f8:09:64:8a:f9:44:0b:61:9a:c9:f9:55:d6:bb:
7d:6d:0f:a6:44:1c:cc:b1:1a:fd:02:02:64:26:4a:
f8:e0:e2:01:46:b9:ef:6c:3a:a1:77:ca:cc:19:61:
a9:8e:eb:97:ef:ed:60:22:23:7e:ed:58:5a:3e:1f:
71:26:eb:7e:ab:c6:85:2f:e6:45:67:a8:34:2a:fa:
28:28:5b:9e:07:f1:07:2a:f6:54:e3:0f:26:50:2a:
65:ff:5c:79:5c:1b:86:10:24:9d:96:76:f1:40:0a:
dd:e5:30:de:59:81:19:25:c7:b5:7b:2a:fb:14:0f:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:38:22:B9:24:BE:75:B0:3B:B6:33:74:63:FD:D1:31:83:8D:28
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/8L44IrkkvnWwO7YzdGP90TGDjSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.166.0/24
Signature Algorithm: sha256WithRSAEncryption
18:aa:fb:bf:ca:47:a3:bf:ea:da:92:7f:47:74:97:d5:0f:70:
de:90:65:ce:61:bc:1e:ad:d6:39:c4:ba:1d:5b:db:cb:94:94:
e8:06:39:a0:a1:74:d1:96:e7:be:26:75:21:c5:2c:76:1e:77:
e6:4f:39:78:b8:d5:c4:9c:f5:94:82:de:db:f0:b7:a1:95:fe:
2c:3d:87:f3:27:ef:a6:0f:45:1e:45:c3:3a:75:81:da:8b:fd:
c7:af:f9:41:88:00:3c:42:26:78:80:12:0d:5d:e2:d9:da:42:
8e:60:8a:47:2c:e9:81:83:89:e4:b5:cc:51:27:fe:53:39:0f:
0e:1f:e0:8b:32:ae:2c:b7:67:0a:a1:47:c9:43:b8:72:12:6c:
15:a3:b5:dc:c8:df:85:aa:9f:52:5a:4b:f2:cf:dc:a2:1f:8a:
4f:28:07:e3:cb:6f:81:13:7e:f4:0c:b9:4f:3b:6b:82:ac:82:
b5:8a:7e:98:dd:cb:45:05:8f:bf:82:e0:4a:a8:a8:7f:19:3b:
4e:28:ec:89:d8:38:ea:a4:62:18:86:e9:e6:24:9e:11:8b:b1:
3a:30:60:a1:dd:3c:36:62:e7:cd:6c:31:71:90:3f:90:5e:57:
26:09:d1:c5:7f:6d:61:00:60:35:7f:a4:4d:9d:ab:ba:34:8a:
59:ff:20:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5rmrvjBLRPQAuUytZ2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjUwMTAxMTc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGJlMzgyMmI5MjRiZTc1YjAzYmI2MzM3NDYzZmRkMTMxODM4ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOFH3tClNHVrJk3z1e+MdAZ2pWfL
bg1T/LmsEOLv6xGQQcO6NbNOFlrglARhccVl7CvKEFn5Kec91UBUFw4uqltzkK29
TTbqs8P9J+MSElcw+bdHyPjx2GNcQVSz3tPWRAmlYJa/ATNixhyvt+r2Kgm2APCa
9eTnG39hn0OuFlR124o3+tFm+AlkivlEC2GayflV1rt9bQ+mRBzMsRr9AgJkJkr4
4OIBRrnvbDqhd8rMGWGpjuuX7+1gIiN+7VhaPh9xJut+q8aFL+ZFZ6g0KvooKFue
B/EHKvZU4w8mUCpl/1x5XBuGECSdlnbxQArd5TDeWYEZJce1eyr7FA+sTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPC+OCK5JL51sDu2M3Rj/dExg40oMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvOEw0NElya2t2bld3TzdZemRHUDkwVEdEalNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26mMA0G
CSqGSIb3DQEBCwUAA4IBAQAYqvu/ykejv+rakn9HdJfVD3DekGXOYbwerdY5xLod
W9vLlJToBjmgoXTRlue+JnUhxSx2HnfmTzl4uNXEnPWUgt7b8Lehlf4sPYfzJ++m
D0UeRcM6dYHai/3Hr/lBiAA8QiZ4gBINXeLZ2kKOYIpHLOmBg4nktcxRJ/5TOQ8O
H+CLMq4st2cKoUfJQ7hyEmwVo7XcyN+Fqp9SWkvyz9yiH4pPKAfjy2+BE370DLlP
O2uCrIK1in6Y3ctFBY+/guBKqKh/GTtOKOyJ2DjqpGIYhunmJJ4Ri7E6MGCh3Tw2
YufNbDFxkD+QXlcmCdHFf21hAGA1f6RNnau6NIpZ/yAC
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:35 2025 by rpki-client