Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa
File: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (raw, json)
Hash identifier: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=
Subject key identifier: 4E:BD:A5:16:D5:47:97:FE:9A:CD:D2:DF:E0:C8:65:CC:78:C1:5D:E2
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282704ADFE64A7290A0E1A4AA8AEEB43
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 77.91.72.0/24 maxlen: 24
77.91.73.0/24 maxlen: 24
77.91.74.0/24 maxlen: 24
77.91.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:04:ad:fe:64:a7:29:0a:0e:1a:4a:a8:ae:eb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ebda516d54797fe9acdd2dfe0c865cc78c15de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:e1:b4:ee:eb:5e:aa:63:39:ed:d8:dc:aa:
b7:a1:bf:10:eb:57:24:1b:50:0d:fd:d8:2e:25:09:
ba:1e:4d:26:74:53:f7:03:08:d3:a6:6b:e9:dd:05:
03:0f:c3:59:2d:fe:e1:0e:e8:e6:89:12:67:f0:fa:
a9:a4:05:e9:32:28:cd:5f:c4:1c:76:9d:68:7f:0d:
89:36:5e:f0:3c:b8:ff:26:b5:ab:59:18:6a:20:fa:
47:8c:09:fd:c6:ad:c5:5b:bb:e3:ef:6c:03:20:bc:
f2:92:58:7d:ae:a2:a4:c0:34:6a:55:c2:04:79:6c:
3c:05:e8:8d:ea:6c:69:a4:79:db:65:7d:9f:e7:cb:
75:14:11:0a:5d:be:5e:fc:19:20:8a:68:9b:d4:80:
d8:71:46:03:1f:04:07:e3:d2:68:46:90:fd:36:bc:
fc:02:c8:b1:b4:59:e1:f7:fc:0d:88:c6:5a:13:82:
d9:e5:81:a2:a3:1d:cc:54:6b:98:42:4c:77:6d:e0:
14:48:12:04:33:06:d0:dd:7a:65:95:3f:ec:23:15:
32:35:09:70:78:44:60:a7:4b:c0:00:46:56:5c:cd:
ff:f1:11:81:28:fe:bb:24:56:75:3b:44:3d:5d:f4:
9a:8b:31:a7:5a:da:3e:19:81:ba:2a:52:20:04:d3:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BD:A5:16:D5:47:97:FE:9A:CD:D2:DF:E0:C8:65:CC:78:C1:5D:E2
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:13:37:e0:87:b6:54:1f:03:49:e9:02:37:80:99:da:88:ce:
30:84:c1:41:52:2f:c6:67:b7:0e:8f:70:e6:fa:52:ec:50:21:
aa:26:42:a2:1b:70:d1:27:db:b0:d2:fc:73:c9:70:ed:b2:e2:
06:fa:67:e8:df:e4:05:f2:59:6d:69:7e:a6:ec:f6:c9:e6:21:
76:59:cc:1d:22:e4:45:eb:93:f5:1e:38:2f:dd:04:76:c5:93:
9b:db:4f:40:6c:59:d8:5f:d5:60:73:b1:22:37:eb:e4:c4:2c:
7c:cc:64:45:fd:f7:a9:76:01:af:aa:b1:75:86:cf:4d:46:f3:
45:84:fb:dc:a2:5c:7c:51:39:0c:ef:2c:93:8f:62:e7:22:3c:
cc:61:3f:f1:4c:14:95:43:9d:fd:93:b5:ac:c7:08:19:d0:eb:
86:16:6c:93:13:3f:a5:47:a2:10:bf:0c:77:a0:ab:51:25:2d:
d9:32:28:e3:cc:58:ce:61:69:b5:0b:27:79:b8:b7:b0:1e:05:
a8:da:0e:f8:5d:71:e5:9a:9a:16:8f:c2:b8:28:e0:ea:50:8b:
7e:e9:66:2a:ab:40:5f:7b:12:2a:82:01:bb:0c:bc:d6:88:76:
28:c4:1e:42:8f:41:38:07:5d:65:33:22:39:8b:3d:6d:17:e8:
47:cf:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:23 2025 by rpki-client