Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/gOSFwDqmr9kVEq5C4X98NVryWGg.roa
File: gOSFwDqmr9kVEq5C4X98NVryWGg.roa (raw, json)
Hash identifier: 0wfGFPl6oLnoGYPIbDwrGp75VlwCL4chWrPpje1qUO8=
Subject key identifier: 80:E4:85:C0:3A:A6:AF:D9:15:12:AE:42:E1:7F:7C:35:5A:F2:58:68
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0193B6398358118A10FA4163F296F140B0BE
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/gOSFwDqmr9kVEq5C4X98NVryWGg.roa
Signing time: Wed 11 Dec 2024 14:57:22 +0000
ROA not before: Wed 11 Dec 2024 14:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49234
IP address blocks: 77.87.224.0/21 maxlen: 21
77.87.224.0/22 maxlen: 22
77.87.228.0/22 maxlen: 22
193.30.80.0/24 maxlen: 25
193.30.82.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:39:83:58:11:8a:10:fa:41:63:f2:96:f1:40:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Dec 11 14:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e485c03aa6afd91512ae42e17f7c355af25868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:33:8d:a4:81:a2:3d:01:42:ef:50:8f:bd:
bb:99:96:e1:2f:90:9f:43:fe:18:c8:b0:72:06:43:
a8:5b:b4:1b:02:27:df:08:39:19:ce:2e:6c:8c:2f:
cf:02:33:7d:8f:fa:5c:3b:df:10:92:24:46:eb:f3:
90:62:21:be:3a:8b:ca:3c:7f:2c:8d:d9:55:61:d8:
67:29:91:b2:fd:85:ed:bd:4f:1d:9b:80:64:2c:77:
00:cd:c5:b1:64:9d:8e:d0:20:b0:5a:e5:df:09:c3:
a4:c4:fd:7e:5e:0f:f6:b8:0b:77:f4:27:1e:30:7e:
e5:48:a0:68:48:fc:68:06:dc:dd:24:23:3b:5a:c2:
81:5e:22:9b:20:88:21:18:9d:81:09:46:14:99:d4:
b7:13:4a:b1:fa:67:9d:3d:69:ef:49:50:c1:44:94:
91:82:4e:6f:c8:03:d8:ef:54:57:a8:4e:0b:22:68:
8a:41:26:5a:98:c1:56:26:94:ba:f5:5a:e1:7c:2a:
ca:7e:70:5e:80:c5:89:88:12:b1:03:9b:6c:9d:7a:
ce:0a:1f:35:83:7c:ae:d9:a7:4a:c4:d8:c5:1d:49:
17:ba:49:72:61:97:8c:85:67:28:25:d2:4b:c3:d3:
7e:85:0f:14:99:8e:53:6c:6b:37:17:6c:64:b3:45:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:85:C0:3A:A6:AF:D9:15:12:AE:42:E1:7F:7C:35:5A:F2:58:68
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/gOSFwDqmr9kVEq5C4X98NVryWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.224.0/21
193.30.80.0/24
193.30.82.0/25
Signature Algorithm: sha256WithRSAEncryption
c3:80:98:a6:93:1b:e4:b7:e3:f7:2b:89:dc:e5:47:15:87:9d:
e2:50:9d:3d:c2:e4:69:b6:00:d1:be:87:b5:ee:39:40:ea:c9:
22:bd:42:dc:db:1c:81:0b:ff:06:38:03:34:6c:38:7e:ba:d1:
b4:ba:8b:a0:06:46:20:9f:31:72:06:97:42:bb:1b:79:68:a1:
87:dd:42:eb:da:c4:99:ff:8a:4a:24:81:1b:dc:61:c9:e7:a4:
ee:08:ce:74:57:8a:b7:27:0b:1f:d2:0c:22:2e:86:20:a3:84:
46:86:3f:db:54:76:cd:75:d0:07:f2:0a:2e:c5:d1:fa:0b:84:
2e:9e:7c:3a:82:b6:69:34:83:82:8d:e7:13:01:bb:45:e4:41:
e8:09:d7:ca:e9:01:97:63:93:da:11:fc:49:2b:26:d0:9c:dd:
62:17:98:ca:9b:88:24:5e:e9:a5:12:a0:d7:fc:26:11:9f:2e:
a6:0f:5d:c4:f0:9d:e3:f9:ec:96:62:2e:a9:bd:05:a5:d7:c9:
77:d5:87:cb:cb:55:02:8d:52:7f:8d:ac:5a:9b:06:5e:69:26:
36:05:a7:f2:6a:20:d8:8a:ae:5d:61:6e:1f:83:93:f4:8f:0b:
8b:d0:66:c8:83:19:90:eb:a9:53:7b:90:de:9d:c9:5b:21:26:
64:6d:e1:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:21:37 2025 by rpki-client