Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa
File: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (raw, json)
Hash identifier: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=
Subject key identifier: 97:A0:6C:6E:69:6A:97:C5:14:A0:63:AB:FF:17:DA:0B:B1:88:24:7E
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0194221F33AF7390F9A03D9CEC2221EC88FF
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa
Signing time: Wed 01 Jan 2025 13:47:37 +0000
ROA not before: Wed 01 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200077
IP address blocks: 77.111.208.0/22 maxlen: 24
185.37.220.0/22 maxlen: 24
2a00:fa60::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:33:af:73:90:f9:a0:3d:9c:ec:22:21:ec:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jan 1 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a06c6e696a97c514a063abff17da0bb188247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:79:6d:c2:ea:20:fc:a5:73:81:c2:7c:f9:
d6:5b:70:14:c4:c9:2d:50:c2:c6:14:62:7c:b0:01:
a7:32:94:9d:9e:da:6b:42:19:f9:b0:fa:0c:d8:92:
0a:ee:14:5a:04:f6:0e:f7:50:fc:52:a6:7f:f0:e3:
a3:f2:4a:aa:35:08:78:f6:56:f2:ee:67:78:06:a3:
81:dd:15:a9:e8:2a:3b:50:db:08:a9:21:2c:6b:2e:
13:64:de:a2:8f:2f:98:eb:16:89:ce:b1:57:b2:1a:
5f:72:71:a5:a2:f9:5c:95:34:ca:b1:43:50:52:32:
64:24:67:08:8d:ff:9e:50:a6:dd:d6:71:b8:2c:44:
e4:bd:50:01:94:52:ff:e8:13:bf:d9:b5:7d:eb:3b:
0b:a6:89:96:9b:3b:2a:11:7d:94:93:5f:16:e4:18:
5f:42:96:3d:30:4b:59:bd:d7:e8:d0:0d:a9:f5:22:
99:28:3f:b4:f6:33:23:e8:43:da:0f:9a:f0:33:6d:
fd:e4:59:39:f9:6d:6d:6e:14:02:68:14:e6:77:e0:
3c:76:49:2f:43:a4:a0:36:7b:6b:06:42:a9:7a:05:
ab:a5:e1:6e:c7:ab:5f:2d:bb:2c:b5:04:a5:5f:78:
df:cb:c3:a3:ac:d3:00:db:04:d4:e3:53:ae:13:f0:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:6C:6E:69:6A:97:C5:14:A0:63:AB:FF:17:DA:0B:B1:88:24:7E
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.208.0/22
185.37.220.0/22
IPv6:
2a00:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
a6:f4:b1:f8:00:6d:42:d7:4d:ae:95:c4:53:1e:57:36:4a:eb:
2e:3c:97:ee:02:83:71:ee:8f:f5:5e:54:88:c2:4c:fc:de:59:
ce:24:fd:bf:31:07:16:dd:f5:fc:d3:5e:5f:96:c7:42:33:8e:
09:45:25:07:e6:2f:f2:39:e1:c4:b3:d4:8f:48:7a:a6:cc:1e:
0d:c8:32:62:27:9e:b2:ab:14:ff:d0:a4:0a:95:ab:ad:9e:0a:
fb:db:3c:73:53:1c:d2:9b:71:20:22:c1:de:a8:fb:26:01:c6:
b6:33:65:37:3e:74:f4:d2:41:9f:6d:37:2c:67:5f:39:02:68:
3b:0c:6a:4f:dc:eb:1c:8f:fc:7a:02:28:f4:8a:ca:af:e0:19:
5c:96:dc:8b:94:ab:d0:c9:0e:5a:2f:d2:7d:1c:20:75:0a:aa:
78:16:71:e7:db:63:ad:0a:75:76:ec:07:3d:89:bd:29:96:f8:
02:00:77:2a:87:99:a7:7c:13:bb:c2:62:3e:cd:14:e3:ef:08:
3c:55:fb:86:84:ba:c2:50:44:1c:d2:59:be:22:73:93:41:c8:
9f:a8:bd:9e:31:d8:b1:ed:0d:7c:9c:c6:3a:33:c4:14:c7:f9:
e9:89:d1:e4:01:98:24:cd:10:1c:a7:a0:9c:d0:de:d0:2e:18:
95:1d:49:ce
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiHzOvc5D5oD2c7CIh7Ij/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjUwMTAxMTM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2EwNmM2ZTY5NmE5N2M1MTRhMDYzYWJmZjE3ZGEwYmIxODgyNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL55bcLqIPylc4HCfPnWW3AUxMkt
UMLGFGJ8sAGnMpSdntprQhn5sPoM2JIK7hRaBPYO91D8UqZ/8OOj8kqqNQh49lby
7md4BqOB3RWp6Co7UNsIqSEsay4TZN6ijy+Y6xaJzrFXshpfcnGlovlclTTKsUNQ
UjJkJGcIjf+eUKbd1nG4LETkvVABlFL/6BO/2bV96zsLpomWmzsqEX2Uk18W5Bhf
QpY9MEtZvdfo0A2p9SKZKD+09jMj6EPaD5rwM2395Fk5+W1tbhQCaBTmd+A8dkkv
Q6SgNntrBkKpegWrpeFux6tfLbsstQSlX3jfy8OjrNMA2wTU41OuE/AuMwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJegbG5papfFFKBjq/8X2guxiCR+MB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvbDZCc2JtbHFsOFVVb0dPcl94ZmFDN0dJSkg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTW/QAwQC
uSXcMA0EAgACMAcDBQAqAPpgMA0GCSqGSIb3DQEBCwUAA4IBAQCm9LH4AG1C102u
lcRTHlc2SusuPJfuAoNx7o/1XlSIwkz83lnOJP2/MQcW3fX8015flsdCM44JRSUH
5i/yOeHEs9SPSHqmzB4NyDJiJ56yqxT/0KQKlautngr72zxzUxzSm3EgIsHeqPsm
Aca2M2U3PnT00kGfbTcsZ185Amg7DGpP3Oscj/x6Aij0isqv4BlcltyLlKvQyQ5a
L9J9HCB1Cqp4FnHn22OtCnV27Ac9ib0plvgCAHcqh5mnfBO7wmI+zRTj7wg8VfuG
hLrCUEQc0lm+InOTQcifqL2eMdix7Q18nMY6M8QUx/npidHkAZgkzRAcp6Cc0N7Q
LhiVHUnO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net