Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa
File: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (raw, json)
Hash identifier: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=
Subject key identifier: 0B:8A:E4:D4:0A:15:AA:3A:C4:1F:BF:F3:98:02:7F:B2:F9:D0:81:07
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01942445A4FC5D2F498B749B97300426EABD
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15945
IP address blocks: 77.72.216.0/21 maxlen: 22
193.31.52.0/22 maxlen: 24
213.183.64.0/19 maxlen: 24
213.206.160.0/19 maxlen: 19
2a02:24d8::/32 maxlen: 32
2a02:24d8:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a4:fc:5d:2f:49:8b:74:9b:97:30:04:26:ea:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b8ae4d40a15aa3ac41fbff398027fb2f9d08107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:7f:33:dd:f0:78:5d:c8:2d:ed:8b:a1:dc:
9d:d0:64:de:02:fe:df:71:fc:f7:8d:5c:58:63:a0:
36:3f:f3:d1:d5:f5:b7:e2:d8:68:be:6e:4f:5a:bc:
c2:97:f0:1e:13:0a:fd:ef:ac:c6:e4:55:10:c8:92:
c4:39:b2:26:d4:c7:29:a9:6e:5c:6c:0a:40:41:80:
a7:76:1d:f5:5c:7a:0e:c5:95:2f:ab:d8:a9:5a:ae:
82:d6:a3:7f:24:d8:00:aa:6d:30:20:c6:7e:32:53:
9e:84:5c:7c:3a:cc:5b:b2:59:34:6f:44:ed:f1:39:
0d:26:8f:3b:2e:9b:95:5d:a2:4b:12:9e:ba:f7:14:
7d:3a:11:25:ff:93:94:b0:9f:1a:74:b7:7c:1d:ec:
78:69:07:4c:70:67:d7:7a:8e:ae:3e:53:44:89:48:
88:61:91:eb:86:c5:88:06:50:24:1a:c5:68:75:20:
24:0d:a1:0d:cd:18:d2:00:8c:45:b2:41:47:58:8b:
c2:51:45:cf:8e:ee:1a:d0:a0:ef:b3:54:93:75:e1:
ff:a4:44:1e:38:76:28:62:a0:51:a6:5c:c3:dd:dc:
23:3e:a3:c1:38:dd:89:3f:d9:6a:63:f3:f2:c0:86:
48:64:b8:47:2b:25:1d:35:da:75:41:cd:62:cc:c1:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:E4:D4:0A:15:AA:3A:C4:1F:BF:F3:98:02:7F:B2:F9:D0:81:07
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.216.0/21
193.31.52.0/22
213.183.64.0/19
213.206.160.0/19
IPv6:
2a02:24d8::/32
Signature Algorithm: sha256WithRSAEncryption
6a:ef:f4:71:8d:66:4e:aa:64:a8:65:33:99:6d:6a:5d:41:03:
94:5d:04:76:9d:41:76:9d:32:5d:ed:a0:2f:d0:32:d6:87:4c:
ee:10:75:8f:d0:ad:af:b1:31:ce:82:42:8c:b6:77:28:9b:c5:
ca:57:79:b9:f6:5f:ed:4f:58:22:d4:8e:b7:b5:40:48:23:54:
c1:7f:80:b4:ed:62:28:10:76:ed:84:3c:76:21:86:93:cd:37:
aa:fd:7c:d1:c6:22:01:a6:80:fd:9d:53:34:a9:5d:1e:ac:68:
18:22:b9:a9:23:b5:fb:5f:6d:90:ce:23:7e:2a:4f:e5:04:2e:
42:f3:3e:78:5c:da:7d:90:32:ae:ef:37:51:9e:01:60:d5:1c:
0c:ad:95:53:5e:23:f0:43:71:99:cb:44:d8:c9:90:3f:3e:d6:
1c:74:03:99:b4:f1:56:87:5b:e7:b3:7b:09:8c:2b:d0:e5:76:
14:45:29:ff:86:01:8b:55:34:7a:a6:19:46:9f:7a:29:9a:ad:
6c:5f:01:b2:d6:a8:db:e3:0a:c7:7b:7d:76:66:f0:72:db:8c:
72:a1:36:ad:41:a6:cc:ba:c7:36:70:44:41:bc:f4:88:58:03:
70:3a:eb:8e:72:75:3b:0e:bd:9a:97:46:35:62:19:b5:a0:d1:
92:b8:d3:c9
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQkRaT8XS9Ji3SblzAEJuq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1
YzYxMGQwHhcNMjUwMTAxMjM0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjhhZTRkNDBhMTVhYTNhYzQxZmJmZjM5ODAyN2ZiMmY5ZDA4MTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBx/M93weF3ILe2Lodyd0GTeAv7f
cfz3jVxYY6A2P/PR1fW34thovm5PWrzCl/AeEwr976zG5FUQyJLEObIm1McpqW5c
bApAQYCndh31XHoOxZUvq9ipWq6C1qN/JNgAqm0wIMZ+MlOehFx8Osxbslk0b0Tt
8TkNJo87LpuVXaJLEp669xR9OhEl/5OUsJ8adLd8Hex4aQdMcGfXeo6uPlNEiUiI
YZHrhsWIBlAkGsVodSAkDaENzRjSAIxFskFHWIvCUUXPju4a0KDvs1STdeH/pEQe
OHYoYqBRplzD3dwjPqPBON2JP9lqY/PywIZIZLhHKyUdNdp1Qc1izMGYvQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAuK5NQKFao6xB+/85gCf7L50IEHMB8GA1UdIwQY
MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt
NjU1MDNhOTMwNmEwLzEvQzRyazFBb1ZxanJFSDdfem1BSl9zdm5RZ1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw
LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTUjYAwQC
wR80AwQF1bdAAwQF1c6gMA0EAgACMAcDBQAqAiTYMA0GCSqGSIb3DQEBCwUAA4IB
AQBq7/RxjWZOqmSoZTOZbWpdQQOUXQR2nUF2nTJd7aAv0DLWh0zuEHWP0K2vsTHO
gkKMtncom8XKV3m59l/tT1gi1I63tUBII1TBf4C07WIoEHbthDx2IYaTzTeq/XzR
xiIBpoD9nVM0qV0erGgYIrmpI7X7X22QziN+Kk/lBC5C8z54XNp9kDKu7zdRngFg
1RwMrZVTXiPwQ3GZy0TYyZA/PtYcdAOZtPFWh1vns3sJjCvQ5XYURSn/hgGLVTR6
phlGn3opmq1sXwGy1qjb4wrHe312ZvBy24xyoTatQabMusc2cERBvPSIWANwOuuO
cnU7Dr2al0Y1Yhm1oNGSuNPJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net