Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa
File: CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa (raw, json)
Hash identifier: IuDgpmoqQyZe/QgfNMc3PyivvmiOvLYcwJyNp9apwNQ=
Subject key identifier: 0B:09:0B:F3:95:2A:A0:84:5E:EB:F3:36:63:CF:BF:F8:DE:1D:45:98
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D657A6AE8A8E215CC311497B89CD49
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39312
IP address blocks: 77.81.122.0/24 maxlen: 24
84.47.180.0/24 maxlen: 24
188.241.244.0/23 maxlen: 23
195.90.110.0/23 maxlen: 23
2a05:da80:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:a6:ae:8a:8e:21:5c:c3:11:49:7b:89:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b090bf3952aa0845eebf33663cfbff8de1d4598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:d6:5a:74:01:4d:2a:a3:a3:da:bf:2f:c7:
b4:83:a2:6b:9b:08:89:df:c5:de:93:1d:3e:4b:d9:
3e:7e:d1:77:db:e5:1a:a6:d9:36:cb:71:37:2a:ee:
fd:71:03:1c:4f:81:95:44:0b:8b:6f:02:cb:0f:b4:
26:6c:49:4b:75:45:6e:9a:94:15:d1:20:46:c4:c2:
bb:e8:33:1b:4f:68:5f:86:e0:74:22:85:11:84:a8:
6e:1b:d2:15:5c:1c:54:ac:43:3a:35:14:22:58:92:
4b:0f:60:0f:c7:b1:18:e9:db:d7:74:ad:d5:11:a6:
59:0f:80:a9:bc:4a:d6:d5:29:8f:e8:66:7b:a3:6d:
c9:17:2f:86:a0:b1:15:c9:7c:83:cb:84:6e:bb:48:
25:73:0b:ac:35:19:94:c4:fe:cc:62:2b:01:b3:5f:
c8:6b:17:83:ea:30:7e:91:15:c4:ba:05:a7:32:5e:
9b:f2:66:65:e3:20:94:a8:3f:d5:f2:49:3f:76:d4:
b9:87:5a:da:6d:27:9d:27:f1:67:7a:af:df:9c:d5:
e5:82:38:19:a8:13:c0:0f:23:e1:94:d9:11:dd:ef:
9f:b7:fe:21:1c:94:ce:31:92:02:2b:db:74:b7:28:
50:0c:7a:e5:fc:28:ee:cf:12:e1:15:8b:45:f8:c7:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:0B:F3:95:2A:A0:84:5E:EB:F3:36:63:CF:BF:F8:DE:1D:45:98
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.122.0/24
84.47.180.0/24
188.241.244.0/23
195.90.110.0/23
IPv6:
2a05:da80:2000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:d1:af:ab:e5:7b:b8:83:d3:c2:e1:e0:b4:0c:da:52:55:68:
b6:1a:4a:1a:3a:9b:a3:d0:dd:6a:19:2c:bd:8e:3e:c6:bf:7e:
9a:46:d0:b3:fc:aa:49:05:0b:0e:3a:ff:db:e4:1a:e8:a6:c8:
af:0d:7f:b4:ca:d0:d4:4f:a5:8c:88:d6:c3:ab:34:96:54:35:
e0:a4:62:eb:2b:4d:aa:fa:1e:10:61:41:29:d7:35:a3:88:2d:
58:95:e9:89:24:8a:84:89:5f:94:e2:48:de:a2:39:66:6e:10:
0e:cb:15:b0:89:27:cd:98:97:95:ce:cb:e9:e6:7a:4d:ba:b1:
fd:7b:c6:7e:08:16:64:76:39:c0:ad:f1:be:c1:02:f3:3d:e6:
7b:82:54:6d:38:fe:5d:b6:c9:46:38:cc:bc:15:a0:9b:96:d6:
91:0f:1e:b2:ce:02:2f:11:9c:e1:f1:39:0a:e1:f8:8e:99:34:
38:b8:75:6b:70:d4:2e:cb:e4:88:95:5f:da:a4:08:82:a9:ee:
d3:95:6c:8a:81:2c:ca:1a:c8:fa:90:d6:33:d4:e9:d6:fb:8d:
e2:2f:9d:68:a8:cc:be:28:ef:47:d7:85:92:8f:82:c1:7b:cf:
93:57:aa:75:fb:c9:8c:f6:ba:7b:7d:b9:7f:68:19:0d:2c:f8:
77:f3:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:16 2025 by rpki-client