Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/QIHH7Szt-N9Ia1b-e_bGGGAA4I8.roa
File: QIHH7Szt-N9Ia1b-e_bGGGAA4I8.roa (raw, json)
Hash identifier: nXVLZm0Omo+HF3nDZDKcveg9E7ICVqvpDXO728H/H8k=
Subject key identifier: 40:81:C7:ED:2C:ED:F8:DF:48:6B:56:FE:7B:F6:C6:18:60:00:E0:8F
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019418083686196F6B356692050710DED9A4
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/QIHH7Szt-N9Ia1b-e_bGGGAA4I8.roa
Signing time: Mon 30 Dec 2024 14:46:18 +0000
ROA not before: Mon 30 Dec 2024 14:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29262
IP address blocks: 77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:08:36:86:19:6f:6b:35:66:92:05:07:10:de:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 30 14:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4081c7ed2cedf8df486b56fe7bf6c6186000e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:08:08:2b:ef:a3:03:56:9e:1c:04:ba:26:
15:78:51:ff:63:7e:3f:ff:6e:7b:fd:6e:1b:be:74:
eb:8b:c3:45:59:ce:36:cc:9e:37:7f:50:62:f1:60:
60:6f:3c:a6:7e:8e:8e:63:ef:f0:4d:6f:aa:57:00:
fb:e1:92:a6:ab:89:a6:25:d8:c3:e0:0b:99:d2:dc:
ca:f7:f0:46:16:2a:4f:1e:6d:77:87:b9:1b:67:e5:
1e:0a:2b:47:07:5c:18:ab:99:a3:4e:04:10:17:9f:
b5:d5:b4:10:34:19:aa:52:e4:e5:0f:66:9b:47:7b:
bc:50:18:c4:9f:5f:17:2c:9e:bd:5a:e0:2f:72:ce:
5c:d9:a7:2a:c1:9d:fe:7f:9f:24:69:73:3e:8e:b4:
74:80:45:b1:52:d9:3e:e6:f4:26:ca:a8:71:35:b3:
a1:a0:b9:42:42:40:d8:08:36:06:3b:c6:b5:30:59:
aa:69:23:db:bf:9e:43:d9:3f:21:8b:e7:3a:ca:52:
15:ad:11:25:7a:8d:17:d2:af:8f:c4:42:46:75:9e:
fc:3a:ba:bf:4b:ff:9a:bf:3f:23:b6:06:af:5b:bc:
e1:42:8c:ac:46:7c:21:f5:29:0d:e1:5a:9b:b6:46:
f3:45:14:c0:51:20:d2:e5:d1:e5:56:bb:de:6a:a7:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:C7:ED:2C:ED:F8:DF:48:6B:56:FE:7B:F6:C6:18:60:00:E0:8F
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/QIHH7Szt-N9Ia1b-e_bGGGAA4I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
185.254.55.0/24
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b8:8e:a6:49:03:ee:37:3f:f4:3b:ee:58:03:5c:ff:8a:25:
c1:bb:42:d5:ff:22:ab:0a:84:76:c8:0a:ca:95:eb:d2:b9:3f:
8f:75:b8:8a:d2:c0:4e:59:8e:3c:dd:7a:c1:3e:30:cb:9e:76:
c4:56:ff:2a:79:98:5d:1d:c5:7d:a7:16:1a:11:37:ab:7d:91:
77:35:e4:54:f0:e6:3a:13:63:2d:98:90:2d:fe:18:1e:4a:e2:
56:94:f7:d9:ee:92:62:20:75:a3:b5:3d:f3:9f:d5:20:e4:41:
28:38:d3:ba:bd:40:ce:47:78:13:a3:de:48:1f:31:24:52:d0:
71:ed:42:7f:a6:f9:b5:e0:47:04:5b:a7:8d:83:8a:9c:fa:df:
e9:53:8e:51:a9:d1:cf:27:1a:0e:17:69:de:13:92:56:9d:38:
33:88:98:3f:c3:1e:5a:dc:62:27:56:38:f2:6d:be:5a:83:1a:
81:2c:96:ef:7f:19:1a:4e:84:65:79:15:32:58:f8:22:ee:f4:
98:1c:fe:5f:ad:b5:dc:83:96:ef:95:75:89:2b:04:8f:f2:b8:
b8:8e:a1:4a:f3:95:8e:0c:e1:07:bf:09:9c:e1:72:35:59:41:
26:48:8d:44:a1:d1:25:d8:89:a8:f3:41:01:14:b1:c6:ba:d3:
7d:16:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:43:04 2025 by rpki-client