Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/d852wo13D922O1kxvHO2L_8C0MU.roa
File: d852wo13D922O1kxvHO2L_8C0MU.roa (raw, json)
Hash identifier: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=
Subject key identifier: 77:CE:76:C2:8D:77:0F:DD:B6:3B:59:31:BC:73:B6:2F:FF:02:D0:C5
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01957A182E6C88CD97D1087B329C7C140973
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/d852wo13D922O1kxvHO2L_8C0MU.roa
Signing time: Sun 09 Mar 2025 08:49:19 +0000
ROA not before: Sun 09 Mar 2025 08:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25124
IP address blocks: 81.91.128.0/20 maxlen: 20
81.91.128.0/21 maxlen: 21
81.91.128.0/22 maxlen: 22
81.91.128.0/23 maxlen: 23
81.91.130.0/23 maxlen: 23
81.91.130.0/24 maxlen: 24
81.91.132.0/22 maxlen: 22
81.91.132.0/23 maxlen: 23
81.91.134.0/23 maxlen: 23
81.91.136.0/22 maxlen: 22
81.91.136.0/23 maxlen: 23
81.91.138.0/23 maxlen: 23
81.91.138.0/24 maxlen: 24
81.91.138.40/29 maxlen: 29
81.91.138.48/28 maxlen: 28
81.91.138.80/28 maxlen: 28
81.91.138.112/28 maxlen: 28
81.91.139.0/24 maxlen: 24
81.91.140.0/22 maxlen: 22
81.91.140.0/23 maxlen: 23
81.91.142.0/23 maxlen: 23
91.184.80.0/20 maxlen: 20
109.162.128.0/20 maxlen: 20
109.162.131.0/24 maxlen: 24
109.162.144.0/20 maxlen: 20
109.162.144.0/21 maxlen: 21
109.162.160.0/20 maxlen: 20
109.162.176.0/20 maxlen: 20
109.162.176.0/24 maxlen: 24
109.162.192.0/20 maxlen: 20
109.162.208.0/20 maxlen: 20
109.162.224.0/20 maxlen: 20
213.207.208.0/20 maxlen: 20
213.207.224.0/20 maxlen: 20
213.207.232.0/21 maxlen: 21
213.207.240.0/20 maxlen: 20
2a01:3c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:18:2e:6c:88:cd:97:d1:08:7b:32:9c:7c:14:09:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Mar 9 08:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ce76c28d770fddb63b5931bc73b62fff02d0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:42:62:1d:29:b0:55:5b:1b:c5:6d:ef:c6:
1a:33:7a:9f:63:92:bb:67:5b:ab:6f:41:c7:47:16:
9b:09:39:1f:ce:bf:b6:9b:89:3b:ba:58:4e:fc:6c:
64:de:6a:54:89:b8:39:23:e0:31:a6:09:0e:0e:22:
40:2d:04:dd:8e:0b:0e:72:56:f1:fd:25:db:b7:c3:
b4:44:7b:6e:86:84:b6:af:b6:52:e4:92:84:25:24:
55:de:64:9c:b7:8e:8b:2f:fe:d7:07:70:e9:1e:1e:
bd:2f:41:aa:82:ba:0a:e9:27:8a:3a:4c:bc:26:a5:
59:41:99:e9:0d:c6:8d:89:1e:42:b9:b9:43:98:9d:
8a:71:40:c7:a9:1f:da:11:1c:6a:8e:d0:78:f0:07:
e9:21:fb:68:1e:9e:d1:ec:ee:a4:2a:62:ee:0d:5c:
45:99:50:9a:56:0e:b7:83:50:f8:a1:d2:8a:fd:b1:
09:4d:a3:57:5d:a9:ec:0c:3a:09:61:95:fd:bf:c1:
99:ee:3d:97:f8:6b:51:9a:4c:99:93:28:9c:c2:a8:
4e:2b:48:52:05:5e:c9:53:f8:b5:19:fd:d0:b3:f3:
29:00:56:23:44:ef:8f:f7:ed:e0:da:da:4e:f4:f2:
9a:ff:71:5b:13:18:cf:f8:84:6e:61:cf:84:1e:d7:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:76:C2:8D:77:0F:DD:B6:3B:59:31:BC:73:B6:2F:FF:02:D0:C5
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/d852wo13D922O1kxvHO2L_8C0MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.128.0/20
91.184.80.0/20
109.162.128.0-109.162.239.255
213.207.208.0-213.207.255.255
IPv6:
2a01:3c8::/32
Signature Algorithm: sha256WithRSAEncryption
79:c7:9b:77:6e:62:80:fa:71:99:02:a3:9f:04:7a:d6:c6:87:
68:14:e0:51:79:ad:bd:65:fc:36:eb:74:e7:d9:ad:e3:51:df:
d6:0e:56:d3:3f:4e:ca:7d:56:4f:9b:f0:99:61:e7:04:21:8c:
33:74:df:eb:72:e9:60:ec:9c:03:64:d4:63:69:d3:d9:b4:8e:
ca:4f:a4:56:37:8a:cd:fb:3b:9d:be:e8:fb:cd:83:10:43:a9:
c4:0c:96:c3:59:81:3c:ee:8c:05:3e:ea:28:f9:58:62:e4:25:
16:28:69:66:ae:a2:35:f3:63:b0:2b:97:4f:92:85:0f:ea:3b:
9a:a9:65:55:3b:47:12:7a:17:6c:1d:82:38:fe:73:25:74:61:
22:92:08:0e:56:d9:a8:a7:73:89:84:d2:b1:fe:0b:31:14:5b:
00:1c:16:d0:7c:a5:20:de:5f:a4:42:60:9b:81:89:86:57:54:
f0:c5:a1:65:fd:ef:85:7b:2f:3a:19:da:81:64:d1:38:29:58:
2b:99:8c:69:eb:09:7f:4f:d3:5a:82:e2:d0:a5:c9:40:a0:84:
0e:14:4f:93:82:73:19:c4:ec:ac:a8:90:21:6a:9a:36:a3:07:
ff:ab:24:82:dd:3c:a4:80:0a:76:7c:4e:36:d4:da:1a:ad:06:
01:18:95:d1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZV6GC5siM2X0Qh7Mpx8FAlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjUwMzA5MDg0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2NlNzZjMjhkNzcwZmRkYjYzYjU5MzFiYzczYjYyZmZmMDJkMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAZCYh0psFVbG8Vt78YaM3qfY5K7
Z1urb0HHRxabCTkfzr+2m4k7ulhO/Gxk3mpUibg5I+AxpgkODiJALQTdjgsOclbx
/SXbt8O0RHtuhoS2r7ZS5JKEJSRV3mSct46LL/7XB3DpHh69L0GqgroK6SeKOky8
JqVZQZnpDcaNiR5CublDmJ2KcUDHqR/aERxqjtB48AfpIftoHp7R7O6kKmLuDVxF
mVCaVg63g1D4odKK/bEJTaNXXansDDoJYZX9v8GZ7j2X+GtRmkyZkyicwqhOK0hS
BV7JU/i1Gf3Qs/MpAFYjRO+P9+3g2tpO9PKa/3FbExjP+IRuYc+EHtfdfQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHfOdsKNdw/dtjtZMbxzti//AtDFMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvZDg1MndvMTNEOTIyTzFreHZITzJMXzhDME1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAtBAIAATAnAwQEUVuAAwQE
W7hQMAwDBAdtooADBARtouAwCwMEBNXP0AMDBNXAMA0EAgACMAcDBQAqAQPIMA0G
CSqGSIb3DQEBCwUAA4IBAQB5x5t3bmKA+nGZAqOfBHrWxodoFOBRea29Zfw263Tn
2a3jUd/WDlbTP07KfVZPm/CZYecEIYwzdN/rculg7JwDZNRjadPZtI7KT6RWN4rN
+zudvuj7zYMQQ6nEDJbDWYE87owFPuoo+Vhi5CUWKGlmrqI182OwK5dPkoUP6jua
qWVVO0cSehdsHYI4/nMldGEikggOVtmop3OJhNKx/gsxFFsAHBbQfKUg3l+kQmCb
gYmGV1TwxaFl/e+Fey86GdqBZNE4KVgrmYxp6wl/T9NaguLQpclAoIQOFE+TgnMZ
xOysqJAhapo2owf/qySC3TykgAp2fE421NoarQYBGJXR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net