Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/U9UP5wFjOdBMTiO2f-e1URpL3-o.roa
File: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (raw, json)
Hash identifier: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=
Subject key identifier: 53:D5:0F:E7:01:63:39:D0:4C:4E:23:B6:7F:E7:B5:51:1A:4B:DF:EA
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 019422FBB5D9450D8C01DB6022DE8CCD4217
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/U9UP5wFjOdBMTiO2f-e1URpL3-o.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20650
IP address blocks: 77.72.232.0/21 maxlen: 24
77.72.237.0/24 maxlen: 24
77.72.238.0/24 maxlen: 24
217.145.32.0/20 maxlen: 24
217.145.32.0/23 maxlen: 23
217.145.34.0/24 maxlen: 24
217.145.35.0/24 maxlen: 24
217.145.36.0/24 maxlen: 24
217.145.37.0/24 maxlen: 24
217.145.38.0/24 maxlen: 24
217.145.39.0/24 maxlen: 24
217.145.40.0/23 maxlen: 23
217.145.43.0/24 maxlen: 24
217.145.44.0/24 maxlen: 24
217.145.45.0/24 maxlen: 24
2a01:38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b5:d9:45:0d:8c:01:db:60:22:de:8c:cd:42:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d50fe7016339d04c4e23b67fe7b5511a4bdfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:91:0c:4e:d7:cf:6f:16:4b:9f:68:f9:ff:
1e:73:21:1d:45:d2:16:95:3b:05:bd:22:fc:c4:eb:
7c:89:37:ce:67:a1:8f:60:b9:99:de:d2:d7:6e:46:
4b:a9:94:59:0a:9c:d6:b7:87:f1:59:30:47:49:21:
72:cc:73:a8:79:74:e5:90:e4:d3:aa:2f:db:26:db:
21:da:41:80:f8:85:b5:88:24:f6:78:e3:76:82:4c:
9f:22:46:d5:e2:d5:e7:59:e6:03:7e:00:22:81:20:
e9:09:fa:c2:c5:94:67:8b:83:79:37:65:d8:f4:9d:
3a:51:15:16:61:83:4f:98:b7:17:79:ee:8c:e1:ae:
9a:14:b5:18:d8:1a:37:f5:c2:91:d3:5c:de:dd:9b:
c9:81:87:18:ff:94:ce:e0:0f:a2:a4:10:0a:d7:1e:
e4:6c:a6:8b:69:b1:cc:52:1b:86:fe:c5:e2:41:68:
b9:6f:3c:7d:9c:3c:cf:c3:b6:4d:ab:a8:7b:8e:62:
61:fb:a0:9a:24:96:0f:31:be:05:7d:e7:a7:2e:27:
2c:4b:b9:ab:7c:a4:fe:48:54:0f:8a:55:dd:16:4e:
b7:de:36:1e:2b:d3:e4:b3:da:24:20:e9:a9:f5:f4:
42:ba:d0:88:9c:a8:70:ba:b8:8b:2a:0f:54:de:0b:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:0F:E7:01:63:39:D0:4C:4E:23:B6:7F:E7:B5:51:1A:4B:DF:EA
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/U9UP5wFjOdBMTiO2f-e1URpL3-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.232.0/21
217.145.32.0/20
IPv6:
2a01:38::/32
Signature Algorithm: sha256WithRSAEncryption
64:d0:6c:ff:b0:e2:7a:09:de:d7:37:55:14:17:a7:ac:e6:b5:
e7:b7:d7:47:d8:fc:f9:0e:7c:da:81:dd:81:f9:24:df:4a:3f:
5d:23:fa:3f:07:89:d8:9e:ac:86:2c:13:0a:8b:0d:ec:86:85:
f4:95:4a:0e:9d:52:50:a3:f7:bd:71:c7:ca:1b:df:50:c1:ff:
1e:a3:2f:2b:f7:f4:42:0d:de:8e:be:76:55:8e:08:47:e4:b7:
6d:8f:65:30:53:a6:83:50:dc:2f:6e:d4:1e:8f:f3:db:b2:2c:
09:c7:bf:4f:58:c0:00:f5:56:7a:15:70:20:37:5f:1f:c3:6e:
7e:2a:03:bf:ae:11:e1:38:58:80:f2:ca:20:7b:b2:07:81:f3:
b2:ee:19:16:a5:c8:a8:a9:59:7b:66:e7:c0:04:4c:d8:76:d8:
32:93:ca:c9:5f:8b:33:56:85:14:cb:64:b3:1e:48:66:d3:7b:
af:28:e7:21:a8:b0:d3:02:9a:1d:9c:69:89:db:07:df:44:c5:
cb:01:c0:37:e6:c8:96:89:3b:4b:cf:bb:51:29:d1:48:c6:00:
df:a5:a8:2d:dc:b8:fc:d3:c1:1f:82:32:81:b7:ff:6a:07:c9:
31:5e:f1:31:7d:81:44:68:b2:18:e3:40:f8:93:81:a9:80:14:
6d:5b:d2:68
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQi+7XZRQ2MAdtgIt6MzUIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy
YWFiZjkwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Q1MGZlNzAxNjMzOWQwNGM0ZTIzYjY3ZmU3YjU1MTFhNGJkZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOuRDE7Xz28WS59o+f8ecyEdRdIW
lTsFvSL8xOt8iTfOZ6GPYLmZ3tLXbkZLqZRZCpzWt4fxWTBHSSFyzHOoeXTlkOTT
qi/bJtsh2kGA+IW1iCT2eON2gkyfIkbV4tXnWeYDfgAigSDpCfrCxZRni4N5N2XY
9J06URUWYYNPmLcXee6M4a6aFLUY2Bo39cKR01ze3ZvJgYcY/5TO4A+ipBAK1x7k
bKaLabHMUhuG/sXiQWi5bzx9nDzPw7ZNq6h7jmJh+6CaJJYPMb4FfeenLicsS7mr
fKT+SFQPilXdFk633jYeK9Pks9okIOmp9fRCutCInKhwuriLKg9U3gvqFQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFPVD+cBYznQTE4jtn/ntVEaS9/qMB8GA1UdIwQY
MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt
OWNkMGNhZTA2MjkyLzEvVTlVUDV3RmpPZEJNVGlPMmYtZTFVUnBMMy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky
LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUjoAwQE
2ZEgMA0EAgACMAcDBQAqAQA4MA0GCSqGSIb3DQEBCwUAA4IBAQBk0Gz/sOJ6Cd7X
N1UUF6es5rXnt9dH2Pz5Dnzagd2B+STfSj9dI/o/B4nYnqyGLBMKiw3shoX0lUoO
nVJQo/e9ccfKG99Qwf8eoy8r9/RCDd6OvnZVjghH5Ldtj2UwU6aDUNwvbtQej/Pb
siwJx79PWMAA9VZ6FXAgN18fw25+KgO/rhHhOFiA8soge7IHgfOy7hkWpcioqVl7
ZufABEzYdtgyk8rJX4szVoUUy2SzHkhm03uvKOchqLDTApodnGmJ2wffRMXLAcA3
5siWiTtLz7tRKdFIxgDfpagt3Lj808EfgjKBt/9qB8kxXvExfYFEaLIY40D4k4Gp
gBRtW9Jo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net