Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/0nXyA8H0ywmwHEGpFoiD9DZypK4.roa
File: 0nXyA8H0ywmwHEGpFoiD9DZypK4.roa (raw, json)
Hash identifier: t3xwn0/rd2xN+mGkroygUhtgEntMVBTmoop2g96kmIc=
Subject key identifier: D2:75:F2:03:C1:F4:CB:09:B0:1C:41:A9:16:88:83:F4:36:72:A4:AE
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 0195CD0B613E760F0C02B6DF6F9409B7846F
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/0nXyA8H0ywmwHEGpFoiD9DZypK4.roa
Signing time: Tue 25 Mar 2025 11:23:49 +0000
ROA not before: Tue 25 Mar 2025 11:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50436
IP address blocks: 5.28.64.0/18 maxlen: 19
5.28.64.0/19 maxlen: 19
5.28.96.0/19 maxlen: 19
37.120.0.0/17 maxlen: 18
77.64.183.0/24 maxlen: 24
77.64.220.0/23 maxlen: 24
92.206.8.0/21 maxlen: 24
92.206.32.0/20 maxlen: 24
92.206.48.0/20 maxlen: 24
92.206.209.0/24 maxlen: 24
92.206.254.0/23 maxlen: 24
94.139.0.0/19 maxlen: 20
217.68.167.0/24 maxlen: 24
2a02:2455:8000::/36 maxlen: 36
2a02:2455:9000::/36 maxlen: 40
2a02:2455:a000::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:0b:61:3e:76:0f:0c:02:b6:df:6f:94:09:b7:84:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Mar 25 11:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d275f203c1f4cb09b01c41a9168883f43672a4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:d5:ba:f7:e9:85:b4:52:cc:c2:ee:8f:60:
d0:bd:c6:49:76:00:a9:1f:29:cd:a0:0c:5e:b7:37:
c2:b2:59:cc:6c:48:5e:dc:9d:91:f6:94:bc:4c:2b:
3e:8d:a7:eb:df:84:af:6e:ef:bf:1f:e2:8d:85:f5:
87:61:44:fa:86:ce:da:b1:ed:aa:92:4b:1a:7f:37:
b5:66:c1:2f:a7:f7:69:4d:88:09:52:9f:2f:e6:8d:
2c:8f:f3:8e:53:eb:48:ce:d6:30:34:aa:54:be:a9:
b8:da:40:32:48:07:e2:c2:42:68:af:cb:a1:41:8b:
65:21:bd:94:70:cd:c4:39:29:59:a2:d1:97:a5:84:
1e:a1:3c:d2:a6:b4:14:fc:71:a2:00:20:c9:4e:9b:
1b:3f:3f:1b:c2:df:a5:3a:23:37:cc:69:94:65:1f:
a4:42:25:91:01:c4:ca:d3:10:13:a5:69:eb:06:67:
1f:1e:58:7b:26:e6:e4:aa:97:92:72:69:45:e6:3a:
32:9a:07:b9:cc:a8:db:94:91:10:00:2f:a7:68:f8:
58:9d:e7:74:92:19:28:d6:30:f0:b3:47:09:5b:e5:
ab:42:5e:32:0d:ce:9d:d7:b8:28:94:08:22:f8:22:
1d:54:f8:da:21:45:23:08:30:d7:73:6c:f7:f1:e6:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:F2:03:C1:F4:CB:09:B0:1C:41:A9:16:88:83:F4:36:72:A4:AE
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/0nXyA8H0ywmwHEGpFoiD9DZypK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
37.120.0.0/17
77.64.183.0/24
77.64.220.0/23
92.206.8.0/21
92.206.32.0/19
92.206.209.0/24
92.206.254.0/23
94.139.0.0/19
217.68.167.0/24
IPv6:
2a02:2455:8000::-2a02:2455:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:48:b5:c8:b8:da:17:57:f9:73:0c:ea:a7:8a:c4:83:1f:3d:
f8:ac:35:1f:c6:3a:98:f0:ad:30:18:b9:fb:57:ce:e4:62:33:
8d:15:40:e5:f9:3c:51:2c:59:8e:66:3c:a2:7c:3f:3f:07:d6:
be:e8:93:fb:08:8b:bc:f0:7a:a2:41:a7:8d:e4:ef:7a:c7:82:
a5:26:ad:9c:5e:fe:96:7b:d2:ca:13:56:be:0b:63:1a:c5:0a:
ee:ee:34:6b:a6:2e:b8:82:e4:6a:62:3d:23:42:c5:a3:b9:0e:
8f:04:5f:25:7a:ce:9b:16:c2:77:72:ec:fc:66:c1:02:58:0d:
8f:38:83:3a:60:21:4c:b1:5e:2f:a6:42:60:8f:6a:4f:af:d0:
12:30:44:0b:6e:8c:cd:77:88:40:c4:d6:50:bc:67:79:cf:38:
e8:78:00:9b:24:a1:bf:15:3f:05:51:76:9b:da:55:71:31:59:
da:7b:94:54:b2:f3:15:39:4e:4c:5a:df:ba:1a:c3:8d:fb:13:
61:67:5f:4b:4a:54:16:e4:9c:19:d3:51:28:84:78:9a:2f:4f:
c3:a3:e0:7f:b3:f9:e0:84:f7:99:cb:0a:98:e9:ac:90:83:c1:
da:07:bc:d5:fd:09:69:f8:ac:f9:bc:a8:21:bb:5f:da:03:93:
c9:05:83:8e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZXNC2E+dg8MArbfb5QJt4RvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUwMzI1MTEyMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjc1ZjIwM2MxZjRjYjA5YjAxYzQxYTkxNjg4ODNmNDM2NzJhNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY7VuvfphbRSzMLuj2DQvcZJdgCp
HynNoAxetzfCslnMbEhe3J2R9pS8TCs+jafr34Svbu+/H+KNhfWHYUT6hs7ase2q
kksafze1ZsEvp/dpTYgJUp8v5o0sj/OOU+tIztYwNKpUvqm42kAySAfiwkJor8uh
QYtlIb2UcM3EOSlZotGXpYQeoTzSprQU/HGiACDJTpsbPz8bwt+lOiM3zGmUZR+k
QiWRAcTK0xATpWnrBmcfHlh7JubkqpeScmlF5joymge5zKjblJEQAC+naPhYned0
khko1jDws0cJW+WrQl4yDc6d17golAgi+CIdVPjaIUUjCDDXc2z38eYF8QIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFNJ18gPB9MsJsBxBqRaIg/Q2cqSuMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvMG5YeUE4SDB5d213SEVHcEZvaUQ5RFp5cEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBCBAIAATA8AwQGBRxAAwQH
JXgAAwQATUC3AwQBTUDcAwQDXM4IAwQFXM4gAwQAXM7RAwQBXM7+AwQFXosAAwQA
2USnMBgEAgACMBIwEAMGByoCJFWAAwYEKgIkVaAwDQYJKoZIhvcNAQELBQADggEB
AKRItci42hdX+XMM6qeKxIMfPfisNR/GOpjwrTAYuftXzuRiM40VQOX5PFEsWY5m
PKJ8Pz8H1r7ok/sIi7zweqJBp43k73rHgqUmrZxe/pZ70soTVr4LYxrFCu7uNGum
LriC5GpiPSNCxaO5Do8EXyV6zpsWwndy7PxmwQJYDY84gzpgIUyxXi+mQmCPak+v
0BIwRAtujM13iEDE1lC8Z3nPOOh4AJskob8VPwVRdpvaVXExWdp7lFSy8xU5Tkxa
37oaw437E2FnX0tKVBbknBnTUSiEeJovT8Oj4H+z+eCE95nLCpjprJCDwdoHvNX9
CWn4rPm8qCG7X9oDk8kFg44=
-----END CERTIFICATE-----
Generated at Wed Apr 2 00:21:28 2025 by rpki-client on console.sobornost.net