Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/77OcOxeFzxjHCfdPvBeWZkAiHyw.roa
File: 77OcOxeFzxjHCfdPvBeWZkAiHyw.roa (raw, json)
Hash identifier: 4vIlwXBJA0SDYmy6QTaJOBFxfP7emXqu/GsbSdQLsTg=
Subject key identifier: EF:B3:9C:3B:17:85:CF:18:C7:09:F7:4F:BC:17:96:66:40:22:1F:2C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683A84ED99E038CA42BD57851F9019
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/77OcOxeFzxjHCfdPvBeWZkAiHyw.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.132.0/24 maxlen: 24
147.45.133.0/24 maxlen: 24
147.45.134.0/24 maxlen: 24
147.45.135.0/24 maxlen: 24
147.45.136.0/24 maxlen: 24
147.45.137.0/24 maxlen: 24
147.45.138.0/24 maxlen: 24
147.45.139.0/24 maxlen: 24
147.45.140.0/24 maxlen: 24
147.45.141.0/24 maxlen: 24
147.45.142.0/24 maxlen: 24
147.45.143.0/24 maxlen: 24
147.45.144.0/20 maxlen: 24
147.45.160.0/20 maxlen: 24
147.45.180.0/24 maxlen: 24
147.45.181.0/24 maxlen: 24
147.45.182.0/24 maxlen: 24
147.45.183.0/24 maxlen: 24
147.45.184.0/24 maxlen: 24
147.45.185.0/24 maxlen: 24
147.45.186.0/24 maxlen: 24
147.45.187.0/24 maxlen: 24
147.45.189.0/24 maxlen: 24
147.45.190.0/24 maxlen: 24
147.45.191.0/24 maxlen: 24
147.45.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3a:84:ed:99:e0:38:ca:42:bd:57:85:1f:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb39c3b1785cf18c709f74fbc17966640221f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:de:18:a6:3c:75:af:87:78:be:63:47:b5:
f6:fe:f6:37:72:8d:55:bb:0a:e8:b8:6f:16:d6:23:
b0:97:32:81:e3:3c:96:3d:58:7d:c9:0a:a8:d1:fa:
5b:13:cb:4a:bc:02:a4:ff:e2:a3:51:eb:8c:11:5f:
8d:94:d9:43:92:8f:f3:b9:2b:6a:d3:de:2b:11:3d:
a8:87:14:0e:e2:b2:30:00:3d:a5:0a:a0:eb:3a:5d:
dd:41:95:05:9d:e9:9d:03:14:a6:af:03:e9:ab:d7:
68:89:fb:60:98:d0:9e:5a:e9:3e:0c:c9:e4:4c:ad:
ad:4d:ed:2d:62:1e:9f:d6:08:5e:29:9b:5c:29:b6:
af:34:1b:bd:4f:ef:54:d8:e8:be:86:bb:da:9f:3b:
92:c1:f1:04:25:37:85:fd:b9:24:3c:c9:84:cc:7d:
30:96:2b:0d:d0:ac:0b:ac:98:e7:a1:41:4d:d4:d2:
92:35:24:28:26:04:b1:51:50:00:1c:6e:6b:84:c9:
00:0d:77:d5:af:d3:94:1e:47:50:a9:40:66:74:b7:
31:b1:86:4f:6b:29:ef:aa:24:14:fd:2d:0e:37:7d:
73:b6:ab:68:80:77:a7:a1:5b:f5:de:c7:56:b0:93:
e5:eb:15:09:98:23:ed:1d:5e:ef:9f:e4:e2:88:03:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:9C:3B:17:85:CF:18:C7:09:F7:4F:BC:17:96:66:40:22:1F:2C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/77OcOxeFzxjHCfdPvBeWZkAiHyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
147.45.132.0-147.45.175.255
147.45.180.0-147.45.187.255
147.45.189.0-147.45.191.255
147.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:49:02:cb:cd:fd:44:c7:a4:92:d7:eb:5d:d6:2c:b4:c2:9a:
d1:ea:60:fb:cb:bc:2c:72:83:c7:82:ca:4a:7c:c4:43:19:34:
81:63:f5:97:27:25:27:3d:45:f1:07:5e:39:e0:6a:90:5a:5e:
e2:19:58:1d:54:ac:40:8b:cd:53:ce:9f:b2:ce:0e:66:be:26:
bd:0a:e3:0b:43:7f:c0:4c:67:f2:f3:89:28:88:bf:18:35:79:
38:bd:ae:4b:27:55:b6:92:b3:c4:64:3e:4c:6b:fc:72:44:39:
42:cf:6d:f2:5f:16:97:3e:56:ec:d7:2f:0d:89:1f:5b:f1:7a:
fe:61:95:a3:e4:dc:30:22:74:2f:61:a5:36:4c:bd:98:ad:e7:
8f:bd:aa:0d:19:18:12:63:cd:9d:e8:8b:ba:77:97:d7:c3:43:
58:be:aa:e2:7f:ad:09:bc:5f:56:bf:54:e0:a1:5c:f6:07:ac:
5b:11:5d:0c:64:0b:f9:01:68:d0:66:ec:71:1e:d7:3c:7c:ff:
af:2a:d2:83:db:7c:d0:91:94:a2:89:1c:48:c4:8f:34:c9:54:
71:4c:2f:6c:1c:1e:fa:57:f5:9f:b1:79:38:c1:e0:92:a4:51:
f3:9d:ea:4c:a9:81:d9:bc:ff:07:17:e2:40:3e:f0:bb:4b:85:
fa:bc:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:02 2025 by rpki-client