Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gcpaoxI47uAbfYR_M1Dl9LctMNk.roa
File: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (raw, json)
Hash identifier: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=
Subject key identifier: 81:CA:5A:A3:12:38:EE:E0:1B:7D:84:7F:33:50:E5:F4:B7:2D:30:D9
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F441875D420E989C9E6F91BE30B9
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gcpaoxI47uAbfYR_M1Dl9LctMNk.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 77.91.100.0/24 maxlen: 24
77.91.101.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
77.91.103.0/24 maxlen: 24
77.91.122.0/24 maxlen: 24
77.91.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f4:41:87:5d:42:0e:98:9c:9e:6f:91:be:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ca5aa31238eee01b7d847f3350e5f4b72d30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:d4:3d:79:a5:ca:c2:59:e7:4e:6b:47:89:
ba:01:0b:b1:df:3b:6c:f0:b2:9e:a0:bb:39:b5:39:
b2:7a:3d:df:c4:bf:3c:58:4a:8a:7b:6e:ee:83:14:
df:6e:e2:9c:d9:86:af:21:9f:72:08:3f:10:f1:ea:
e3:9b:ce:71:06:05:d5:43:e0:3b:bb:e8:a6:e6:9a:
39:0f:5e:a0:b8:2f:00:ad:a8:5b:0b:c7:99:5c:82:
93:dc:1a:ed:ad:85:37:14:5e:8f:18:fd:64:ef:79:
c0:5c:6a:f7:49:22:df:a3:94:82:ef:25:4d:52:8a:
52:a6:94:73:ab:80:5a:5a:53:19:82:71:d7:c8:2c:
5d:38:06:cd:3d:0b:ef:82:08:d5:f9:91:3f:24:21:
e6:36:40:9b:36:7a:1c:cd:1d:af:4e:e1:c6:b3:cf:
07:7d:5f:f6:c4:bd:e3:26:63:5f:ad:84:50:5f:9b:
ad:9d:3a:22:7d:fc:1d:bd:f8:af:2e:2a:2b:70:c9:
2d:20:fc:eb:1b:32:4e:1e:89:a8:94:5d:93:03:ec:
93:94:84:bd:8f:d9:0f:05:7d:85:9c:d9:da:fd:8a:
d0:9d:f1:64:ee:19:c0:e8:c2:62:bc:5f:f7:06:f2:
dc:d1:82:87:ba:b1:02:dc:a2:61:ef:a6:6d:75:1e:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:5A:A3:12:38:EE:E0:1B:7D:84:7F:33:50:E5:F4:B7:2D:30:D9
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gcpaoxI47uAbfYR_M1Dl9LctMNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0/22
77.91.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:0a:83:78:8c:cf:4c:81:1a:7e:c3:72:b9:9a:06:fa:83:2f:
75:1e:19:bf:2b:b3:a2:24:24:a5:32:a7:c7:33:26:e9:fe:9f:
0a:d3:c5:9a:af:e8:00:f8:14:1b:af:9d:cb:ca:31:4c:1d:1f:
b4:8e:f7:24:ff:41:9c:8b:0c:35:d8:89:ba:7f:4f:05:e0:02:
a5:36:ba:cf:6c:bb:e1:fb:96:56:2d:c0:5c:16:6a:d9:5d:d3:
ee:d4:d2:8e:81:10:37:ae:20:0d:3d:0d:9e:a7:2a:f7:e9:87:
59:95:8b:ec:e7:a5:45:19:90:40:9e:38:bb:b4:9e:7f:86:98:
f6:3a:70:2b:05:98:10:af:0a:0a:b0:33:0e:ed:02:aa:c8:be:
15:2c:f9:ce:0b:86:cd:47:3f:42:d7:ce:39:96:90:d6:b6:7e:
dc:c8:c6:dd:24:01:b1:5c:5e:27:9c:7e:eb:d9:79:13:dd:54:
e0:f2:db:31:00:85:81:d9:56:82:65:6f:7a:87:56:54:ae:68:
2e:5d:17:54:41:35:49:c6:7d:aa:78:65:3d:4b:68:36:2b:a5:
23:03:1e:7a:17:3c:91:23:9e:77:4c:3b:10:7f:2f:10:85:c6:
cb:a8:56:29:55:c0:c6:76:9a:41:65:38:90:87:d5:1b:ad:2c:
eb:49:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:19 2025 by rpki-client