Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa
File: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (raw, json)
Hash identifier: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=
Subject key identifier: F0:C6:95:7F:9B:29:E4:2B:13:C8:08:40:18:B6:5C:39:FB:1A:25:7C
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 0194266BC6016D51350F687844DBF115B597
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39449
IP address blocks: 77.95.160.0/21 maxlen: 21
88.151.80.0/21 maxlen: 21
178.20.80.0/21 maxlen: 21
185.52.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:01:6d:51:35:0f:68:78:44:db:f1:15:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0c6957f9b29e42b13c8084018b65c39fb1a257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:95:83:d6:b5:4b:d2:ef:c2:74:4f:25:d2:
b3:e7:50:24:7c:c6:bc:79:29:9d:55:86:79:13:6b:
46:01:6d:51:1d:e7:dc:ff:3e:0c:3d:8c:b1:4f:8c:
af:63:af:57:c2:0a:92:b2:bf:d8:a3:b4:3e:dc:57:
03:c8:f4:c9:f4:21:16:8f:49:45:81:2a:87:d3:11:
ba:83:90:64:ce:31:67:2f:73:70:ce:05:33:3f:bb:
81:64:ff:29:ae:02:b1:dc:99:02:83:ee:af:28:0a:
e5:95:30:b4:db:ae:32:0a:9d:47:c7:8f:ec:17:74:
f3:62:a8:40:47:84:a6:31:81:d8:c9:e7:a9:da:75:
6d:55:85:f6:d2:f7:72:34:66:7c:2f:c8:88:ba:d0:
ec:31:81:7a:e4:d3:7c:df:49:a8:b4:1f:c6:47:ef:
82:02:56:1f:ce:2c:57:46:a4:13:5d:d6:ee:68:b7:
d0:92:c4:ea:cd:ce:5c:59:03:5c:b6:4a:9e:f0:2d:
26:70:7c:4e:b8:0a:03:62:b8:d0:2a:5f:71:62:b2:
5f:bb:5e:de:f1:a7:6a:2b:0b:1d:8c:4b:2f:cd:60:
ad:c9:5f:c7:8a:61:15:97:db:ff:46:5f:01:bf:3e:
73:95:86:f6:ba:ec:b0:75:d5:11:bf:53:4c:2c:27:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:95:7F:9B:29:E4:2B:13:C8:08:40:18:B6:5C:39:FB:1A:25:7C
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.160.0/21
88.151.80.0/21
178.20.80.0/21
185.52.92.0/22
Signature Algorithm: sha256WithRSAEncryption
30:2c:88:f1:a4:90:72:d7:95:70:0e:13:89:c1:a6:c6:0b:99:
5e:66:b2:1c:83:ba:5a:8c:21:1c:f4:4a:ec:e8:8a:1a:58:22:
c9:fb:fd:f4:44:ce:ff:38:8e:03:00:76:55:72:02:95:8b:26:
18:05:a5:6c:33:fa:5a:b5:7f:07:83:11:49:5c:c6:72:2b:1f:
eb:b7:da:24:18:f8:47:5e:f8:42:e0:3a:62:32:e9:13:02:90:
f4:ca:3a:61:48:16:a9:89:b1:36:3e:f6:fc:e7:1d:93:65:bd:
95:eb:14:01:b3:03:2c:c5:a8:13:c3:ad:c7:09:5a:2a:f4:7a:
27:6d:11:01:be:0f:17:9f:6b:17:e3:22:2b:23:48:7b:7f:49:
d0:87:55:66:d7:5d:05:e6:03:e1:6a:00:25:aa:1c:ea:53:09:
3d:05:31:3f:a2:5c:62:ee:e8:d6:e6:01:f2:f2:03:e1:3a:fd:
79:6e:01:7c:ed:68:47:8d:2d:42:6f:4f:78:db:6f:76:ae:f2:
b4:b1:f4:c6:cb:55:d5:77:b2:d1:26:57:b4:c2:8f:01:6c:73:
d6:5a:b7:fa:95:3d:84:ca:5e:24:45:3c:27:81:28:e2:5e:de:
cf:ae:a4:d5:95:2b:1c:2f:c4:a4:f9:08:4d:2a:33:2a:40:e6:
0d:1a:75:70
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQma8YBbVE1D2h4RNvxFbWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5
YzNiNGYwHhcNMjUwMTAyMDk0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGM2OTU3ZjliMjllNDJiMTNjODA4NDAxOGI2NWMzOWZiMWEyNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4CVg9a1S9LvwnRPJdKz51AkfMa8
eSmdVYZ5E2tGAW1RHefc/z4MPYyxT4yvY69XwgqSsr/Yo7Q+3FcDyPTJ9CEWj0lF
gSqH0xG6g5BkzjFnL3NwzgUzP7uBZP8prgKx3JkCg+6vKArllTC0264yCp1Hx4/s
F3TzYqhAR4SmMYHYyeep2nVtVYX20vdyNGZ8L8iIutDsMYF65NN830motB/GR++C
AlYfzixXRqQTXdbuaLfQksTqzc5cWQNctkqe8C0mcHxOuAoDYrjQKl9xYrJfu17e
8adqKwsdjEsvzWCtyV/HimEVl9v/Rl8Bvz5zlYb2uuywddURv1NMLCdrawIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPDGlX+bKeQrE8gIQBi2XDn7GiV8MB8GA1UdIwQY
MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut
ZWM5YjY5YjQ2Y2MwLzEvOE1hVmY1c3A1Q3NUeUFoQUdMWmNPZnNhSlh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw
LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDTV+gAwQD
WJdQAwQDshRQAwQCuTRcMA0GCSqGSIb3DQEBCwUAA4IBAQAwLIjxpJBy15VwDhOJ
wabGC5leZrIcg7pajCEc9Ers6IoaWCLJ+/30RM7/OI4DAHZVcgKViyYYBaVsM/pa
tX8HgxFJXMZyKx/rt9okGPhHXvhC4DpiMukTApD0yjphSBapibE2Pvb85x2TZb2V
6xQBswMsxagTw63HCVoq9HonbREBvg8Xn2sX4yIrI0h7f0nQh1Vm110F5gPhagAl
qhzqUwk9BTE/olxi7ujW5gHy8gPhOv15bgF87WhHjS1Cb0942292rvK0sfTGy1XV
d7LRJle0wo8BbHPWWrf6lT2Eyl4kRTwngSjiXt7PrqTVlSscL8Sk+QhNKjMqQOYN
GnVw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net