Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/70Zrvtr4nuS-PVwqAB7GFzvSCps.roa
File: 70Zrvtr4nuS-PVwqAB7GFzvSCps.roa (raw, json)
Hash identifier: /iJVRb+B9I3ooDnoMdPG5FHTA+NvihSaLYbf26Rqffs=
Subject key identifier: EF:46:6B:BE:DA:F8:9E:E4:BE:3D:5C:2A:00:1E:C6:17:3B:D2:0A:9B
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0195299591576564B3B28263EA9A7C0499DC
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/70Zrvtr4nuS-PVwqAB7GFzvSCps.roa
Signing time: Fri 21 Feb 2025 17:37:02 +0000
ROA not before: Fri 21 Feb 2025 17:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.102.0/24 maxlen: 24
89.46.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:95:91:57:65:64:b3:b2:82:63:ea:9a:7c:04:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Feb 21 17:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef466bbedaf89ee4be3d5c2a001ec6173bd20a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:24:17:f5:57:49:e2:e2:fb:f1:8e:b6:fe:
ec:0d:0c:6b:7a:f2:4c:65:fb:22:47:f1:35:ea:86:
1f:7c:35:1f:3e:ce:51:4e:95:7a:0f:02:12:6b:74:
a2:da:84:20:a1:ae:81:51:83:ce:ee:8f:70:ab:b0:
a1:e6:0c:5b:bf:80:44:c5:2d:c3:ca:cb:29:0e:e2:
f2:76:d2:5b:5d:55:41:1d:48:20:b7:a4:88:45:23:
05:f1:f5:ea:63:b1:d0:e9:f1:2e:da:83:4d:19:d6:
3e:0e:e7:e5:48:02:ad:a6:11:ae:80:2a:c0:e9:fd:
7c:c1:12:ac:f7:3b:ae:cf:ca:d6:7e:50:6d:45:81:
ea:be:47:29:00:bd:b5:e4:96:82:d8:f7:20:30:1c:
7e:da:94:d9:a4:bb:d4:4e:60:2f:3a:f8:06:62:1c:
25:fb:8d:58:4e:32:3d:48:7f:54:1c:f6:5c:da:cb:
83:7d:3e:af:04:1f:d9:6c:ed:c7:85:58:e6:96:7c:
c4:38:ab:0b:e1:1e:de:5a:77:06:6b:a2:9c:12:95:
b9:7d:aa:5f:0a:cf:17:a9:b6:2b:1b:4a:52:19:43:
bd:81:e9:8d:fc:3c:19:de:cb:3a:49:e0:1a:3f:2f:
f8:47:83:6b:24:a3:bb:8e:0a:3c:67:2d:56:68:9a:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:6B:BE:DA:F8:9E:E4:BE:3D:5C:2A:00:1E:C6:17:3B:D2:0A:9B
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/70Zrvtr4nuS-PVwqAB7GFzvSCps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
89.46.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8e:77:6a:a4:bf:68:e9:80:42:54:81:ab:f1:c5:fd:63:14:
81:bf:23:6d:a9:df:49:19:d2:c0:1e:38:a8:8b:b1:d8:6d:26:
2d:23:56:8e:8d:2a:8e:26:47:60:bf:01:f9:f7:86:9a:eb:8a:
0a:53:0b:31:68:d9:7b:58:9d:2c:8b:6e:b9:7d:65:67:9c:e1:
31:9d:25:c1:f1:54:ed:91:0b:56:e0:31:a4:5c:e3:f3:8c:5f:
38:5c:91:d3:1d:bf:31:ce:70:76:65:ce:92:a0:b0:f1:00:f0:
82:de:21:dd:cb:0b:89:3d:9e:dd:22:98:3f:e7:97:b2:06:c4:
48:f5:a0:ce:4d:82:aa:33:4f:f8:4c:be:20:f1:52:b2:2c:a8:
cb:ed:e8:0d:30:8a:4f:44:ee:09:90:df:e0:d1:d2:53:83:03:
3e:1c:fc:6b:54:cc:77:3e:38:90:82:52:b8:68:c1:49:0c:78:
e7:f9:9b:b3:83:23:2a:18:a8:91:22:a1:fe:37:24:60:db:99:
24:79:64:e5:6e:b6:ed:03:b3:de:ab:94:66:22:6d:ca:bc:34:
16:e4:6e:20:d1:f6:5b:fa:95:d4:fd:e5:02:d4:84:75:1c:6e:
6f:c6:d8:eb:79:dd:68:b4:46:bd:cb:ba:23:1c:84:0e:24:a7:
7c:ee:05:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUplZFXZWSzsoJj6pp8BJncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjUwMjIxMTczNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQ2NmJiZWRhZjg5ZWU0YmUzZDVjMmEwMDFlYzYxNzNiZDIwYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBQkF/VXSeLi+/GOtv7sDQxrevJM
ZfsiR/E16oYffDUfPs5RTpV6DwISa3Si2oQgoa6BUYPO7o9wq7Ch5gxbv4BExS3D
ysspDuLydtJbXVVBHUggt6SIRSMF8fXqY7HQ6fEu2oNNGdY+DuflSAKtphGugCrA
6f18wRKs9zuuz8rWflBtRYHqvkcpAL215JaC2PcgMBx+2pTZpLvUTmAvOvgGYhwl
+41YTjI9SH9UHPZc2suDfT6vBB/ZbO3HhVjmlnzEOKsL4R7eWncGa6KcEpW5fapf
Cs8XqbYrG0pSGUO9gemN/DwZ3ss6SeAaPy/4R4NrJKO7jgo8Zy1WaJomcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9Ga77a+J7kvj1cKgAexhc70gqbMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvNzBacnZ0cjRudVMtUFZ3cUFCN0dGenZTQ3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVFmAwQA
WS77MA0GCSqGSIb3DQEBCwUAA4IBAQAGjndqpL9o6YBCVIGr8cX9YxSBvyNtqd9J
GdLAHjioi7HYbSYtI1aOjSqOJkdgvwH594aa64oKUwsxaNl7WJ0si265fWVnnOEx
nSXB8VTtkQtW4DGkXOPzjF84XJHTHb8xznB2Zc6SoLDxAPCC3iHdywuJPZ7dIpg/
55eyBsRI9aDOTYKqM0/4TL4g8VKyLKjL7egNMIpPRO4JkN/g0dJTgwM+HPxrVMx3
PjiQglK4aMFJDHjn+ZuzgyMqGKiRIqH+NyRg25kkeWTlbrbtA7Peq5RmIm3KvDQW
5G4g0fZb+pXU/eUC1IR1HG5vxtjred1otEa9y7ojHIQOJKd87gXC
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:09 2025 by rpki-client