Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/34veN2ucTJBbi388PrmLekhLRzM.roa
File: 34veN2ucTJBbi388PrmLekhLRzM.roa (raw, json)
Hash identifier: zPkkR8nXQL9mfEVd+D/kn8bIVDt7EDLAoyKRPC1BVEk=
Subject key identifier: DF:8B:DE:37:6B:9C:4C:90:5B:8B:7F:3C:3E:B9:8B:7A:48:4B:47:33
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 01941FFA77B1FC0923604E994D2D3EF2C166
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/34veN2ucTJBbi388PrmLekhLRzM.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20811
IP address blocks: 77.74.112.0/21 maxlen: 24
109.69.248.0/21 maxlen: 24
185.111.144.0/22 maxlen: 24
2a02:54c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:b1:fc:09:23:60:4e:99:4d:2d:3e:f2:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df8bde376b9c4c905b8b7f3c3eb98b7a484b4733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:a4:9b:5b:f8:ef:59:5e:11:6b:13:e3:4e:
cf:f0:8a:21:17:82:7a:ed:8f:06:bf:25:d3:01:22:
5f:18:a8:7e:ed:a4:48:f9:e3:98:4d:43:9c:2b:1d:
8a:2f:9c:f8:53:af:57:f2:82:4c:d9:31:28:3f:6f:
5c:7a:5c:4f:10:73:fb:93:95:36:b8:d8:0a:84:24:
4f:9e:7e:88:00:f8:27:fc:19:d9:b9:54:8f:ba:da:
03:1a:d4:d1:f5:59:b8:0c:ce:0d:5c:7f:39:7a:f5:
c6:d8:3a:f7:3b:1e:4b:0f:0a:c2:24:5e:a0:15:d5:
a2:29:03:3f:68:ce:a0:66:c1:e4:b2:7d:83:73:8a:
30:2f:65:40:b2:c5:99:a2:34:06:19:ae:6a:8c:70:
6d:3e:2a:04:0a:08:c9:4d:9e:0f:4a:37:b2:f2:2e:
1b:98:f1:7e:29:8a:14:fe:0f:8e:fe:0e:b4:f0:ba:
20:42:fd:d0:44:19:ba:54:25:2b:07:80:f8:1f:c8:
61:9c:3e:b9:fe:73:c5:99:a2:09:e4:35:63:38:18:
58:a9:55:4b:3e:a2:df:fc:d6:a2:ec:77:c2:13:b8:
9e:b1:dc:f2:95:8f:44:28:72:4b:9e:f8:1f:41:d4:
9c:53:d1:f3:1a:4d:c2:36:86:7d:6a:32:42:fa:a1:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8B:DE:37:6B:9C:4C:90:5B:8B:7F:3C:3E:B9:8B:7A:48:4B:47:33
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/34veN2ucTJBbi388PrmLekhLRzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.112.0/21
109.69.248.0/21
185.111.144.0/22
IPv6:
2a02:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:ce:de:61:c7:f5:39:5e:bc:7b:ba:3f:b0:bd:0b:13:8f:fb:
ab:e6:1a:62:d0:61:d1:7a:53:4b:80:85:a2:8f:fb:26:54:fd:
37:42:54:48:ad:1c:9c:87:c5:45:19:79:b4:89:00:91:ec:61:
f5:5e:26:47:85:0d:df:6f:ec:82:32:51:fa:87:78:74:49:99:
ff:42:bd:6a:8e:97:1f:1f:9c:92:d2:c5:12:f9:16:cc:63:6b:
9d:73:cf:3c:db:8f:ad:4e:a2:f4:5f:b6:24:b1:94:6f:d0:ca:
55:3a:4c:10:00:15:e2:4d:36:e6:59:a9:51:08:9a:50:56:6d:
a2:10:a3:b6:f4:89:58:54:34:d7:20:6f:45:3e:f9:1e:26:a1:
93:ce:18:ef:19:a6:d0:d8:9a:de:b4:b0:42:ab:13:12:96:3c:
97:c6:4d:a5:c6:6e:76:2d:ed:80:ba:29:21:8f:2d:cf:fa:1b:
4a:b7:35:52:a1:7b:a0:23:cc:13:73:3c:26:f0:ab:b3:02:b0:
ae:3d:2a:05:75:6a:93:af:1f:3f:98:39:fb:72:35:f4:82:62:
7e:b8:3f:06:2b:0e:e5:3b:6b:b9:33:c9:ff:5a:91:f7:aa:39:
52:94:e1:a2:ed:a5:e3:57:6e:25:4f:e7:d0:c9:cb:49:2a:26:
6e:81:aa:8b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQf+nex/AkjYE6ZTS0+8sFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTkyMTdiZDgzMDYyN2NiM2U2NTdjMGI5MDYzYzgyMjM0
ZGRiY2IwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjhiZGUzNzZiOWM0YzkwNWI4YjdmM2MzZWI5OGI3YTQ4NGI0NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfWkm1v471leEWsT407P8IohF4J6
7Y8GvyXTASJfGKh+7aRI+eOYTUOcKx2KL5z4U69X8oJM2TEoP29celxPEHP7k5U2
uNgKhCRPnn6IAPgn/BnZuVSPutoDGtTR9Vm4DM4NXH85evXG2Dr3Ox5LDwrCJF6g
FdWiKQM/aM6gZsHksn2Dc4owL2VAssWZojQGGa5qjHBtPioECgjJTZ4PSjey8i4b
mPF+KYoU/g+O/g608LogQv3QRBm6VCUrB4D4H8hhnD65/nPFmaIJ5DVjOBhYqVVL
PqLf/Nai7HfCE7iesdzylY9EKHJLnvgfQdScU9HzGk3CNoZ9ajJC+qGSFQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFN+L3jdrnEyQW4t/PD65i3pIS0czMB8GA1UdIwQY
MBaAFAipIXvYMGJ8s+ZXwLkGPIIjTdvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgt
MmM1YmFjMzVjMzQ0LzEvMzR2ZU4ydWNUSkJiaTM4OFBybUxla2hMUnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgtMmM1YmFjMzVjMzQ0
LzEvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTUpwAwQD
bUX4AwQCuW+QMA0EAgACMAcDBQMqAlTAMA0GCSqGSIb3DQEBCwUAA4IBAQC7zt5h
x/U5Xrx7uj+wvQsTj/ur5hpi0GHRelNLgIWij/smVP03QlRIrRych8VFGXm0iQCR
7GH1XiZHhQ3fb+yCMlH6h3h0SZn/Qr1qjpcfH5yS0sUS+RbMY2udc88824+tTqL0
X7YksZRv0MpVOkwQABXiTTbmWalRCJpQVm2iEKO29IlYVDTXIG9FPvkeJqGTzhjv
GabQ2JretLBCqxMSljyXxk2lxm52Le2Auikhjy3P+htKtzVSoXugI8wTczwm8Kuz
ArCuPSoFdWqTrx8/mDn7cjX0gmJ+uD8GKw7lO2u5M8n/WpH3qjlSlOGi7aXjV24l
T+fQyctJKiZugaqL
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net