Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/Og01fojxRGGibY1rWvCYrh8hqkw.roa
File: Og01fojxRGGibY1rWvCYrh8hqkw.roa (raw, json)
Hash identifier: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=
Subject key identifier: 3A:0D:35:7E:88:F1:44:61:A2:6D:8D:6B:5A:F0:98:AE:1F:21:AA:4C
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B84DA463499B5A75D32D60C5983D8
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/Og01fojxRGGibY1rWvCYrh8hqkw.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200165
IP address blocks: 77.227.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:84:da:46:34:99:b5:a7:5d:32:d6:0c:59:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0d357e88f14461a26d8d6b5af098ae1f21aa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:0c:09:26:ca:94:e4:b7:dd:68:a4:08:05:
d0:0c:70:2f:73:4a:3d:d5:5a:30:79:b3:c1:90:53:
52:02:81:a4:be:36:dd:50:b9:73:20:14:9c:bb:69:
e2:42:c4:90:bb:8c:e0:13:64:56:fa:94:f7:e5:5a:
bd:af:a2:7b:96:fd:9c:43:73:76:ca:ce:a6:c8:d5:
98:a9:f2:53:27:d2:67:82:2c:a9:ce:af:9b:5f:d4:
e5:66:40:cb:ee:66:66:74:3a:52:b7:67:23:8c:d7:
2b:00:28:6c:84:b9:b8:96:b7:c4:09:2e:80:f6:e3:
bc:11:1a:da:81:cf:4b:38:4c:03:35:c3:0f:3c:8a:
d9:30:f5:3d:18:5c:9f:dd:1b:e7:e2:4f:d9:ef:f6:
19:7f:03:2b:c3:e6:6c:f0:4e:2f:4d:cd:b9:6d:f4:
a5:0d:7c:fc:58:70:ee:9f:ed:73:12:69:8a:aa:e6:
34:13:87:6a:59:85:54:16:fb:3a:ea:a4:db:0f:2f:
86:a2:7d:3f:48:ed:b7:c7:90:55:bb:19:6f:3d:4d:
d1:e9:ae:55:2f:3e:3d:63:76:a6:47:6d:48:70:18:
62:f9:b4:44:7c:b8:4c:09:fd:61:0b:8b:1a:fc:c4:
17:f6:f8:e8:b3:fe:3e:21:9e:20:8c:6a:96:d3:6f:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0D:35:7E:88:F1:44:61:A2:6D:8D:6B:5A:F0:98:AE:1F:21:AA:4C
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/Og01fojxRGGibY1rWvCYrh8hqkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e4:17:c4:9a:6d:81:fa:f5:5d:27:1f:98:aa:5b:99:39:3f:
bf:ba:00:f1:0c:07:42:89:0a:b5:6e:f2:b9:82:10:69:4d:02:
c6:28:83:f3:7d:f1:a8:f5:45:8a:d8:d0:f6:ce:2f:8b:16:1f:
3f:01:df:8f:09:88:3b:6b:bd:9f:78:b4:65:76:bb:b0:62:1d:
0e:67:af:3c:0e:35:e1:e9:ab:66:2c:59:ba:fc:57:80:db:97:
1f:00:6e:6a:88:73:8f:82:2d:79:29:62:41:21:19:2b:b2:98:
51:15:64:5e:92:9a:2c:08:04:72:cd:d2:97:a9:3f:8d:ad:de:
84:5c:af:33:96:76:91:32:ee:a1:1d:ee:99:b8:d5:b1:f9:4b:
d2:79:7f:e7:9e:2d:96:c1:bd:e2:bc:80:d9:b3:41:c4:a1:3e:
5f:c2:0d:7a:e3:bc:e6:b5:c1:0c:87:3e:22:8f:3d:87:7a:a2:
26:55:5b:18:5b:08:da:0e:74:99:1b:67:12:74:27:28:cf:17:
62:f7:99:02:8b:21:b3:d9:0c:86:fe:06:70:1e:2b:69:e6:e4:
ba:87:2b:69:49:2d:0b:26:48:31:96:97:73:94:b6:1a:45:ef:
3d:a1:c4:67:fb:e6:1e:8a:bf:18:33:3e:92:04:35:d4:da:a3:
35:ef:95:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4TaRjSZtaddMtYMWYPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3
NGM4N2QwHhcNMjUwMTAyMDk0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTBkMzU3ZTg4ZjE0NDYxYTI2ZDhkNmI1YWYwOThhZTFmMjFhYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GcMCSbKlOS33WikCAXQDHAvc0o9
1VowebPBkFNSAoGkvjbdULlzIBScu2niQsSQu4zgE2RW+pT35Vq9r6J7lv2cQ3N2
ys6myNWYqfJTJ9Jngiypzq+bX9TlZkDL7mZmdDpSt2cjjNcrAChshLm4lrfECS6A
9uO8ERragc9LOEwDNcMPPIrZMPU9GFyf3Rvn4k/Z7/YZfwMrw+Zs8E4vTc25bfSl
DXz8WHDun+1zEmmKquY0E4dqWYVUFvs66qTbDy+Gon0/SO23x5BVuxlvPU3R6a5V
Lz49Y3amR21IcBhi+bREfLhMCf1hC4sa/MQX9vjos/4+IZ4gjGqW02/q5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoNNX6I8URhom2Na1rwmK4fIapMMB8GA1UdIwQY
MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt
MjUwNTBjNTkzYWExLzEvT2cwMWZvanhSR0dpYlkxcld2Q1lyaDhocWt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx
LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATeMAMA0G
CSqGSIb3DQEBCwUAA4IBAQBq5BfEmm2B+vVdJx+YqluZOT+/ugDxDAdCiQq1bvK5
ghBpTQLGKIPzffGo9UWK2ND2zi+LFh8/Ad+PCYg7a72feLRldruwYh0OZ688DjXh
6atmLFm6/FeA25cfAG5qiHOPgi15KWJBIRkrsphRFWRekposCARyzdKXqT+Nrd6E
XK8zlnaRMu6hHe6ZuNWx+UvSeX/nni2Wwb3ivIDZs0HEoT5fwg1647zmtcEMhz4i
jz2HeqImVVsYWwjaDnSZG2cSdCcozxdi95kCiyGz2QyG/gZwHitp5uS6hytpSS0L
JkgxlpdzlLYaRe89ocRn++Yeir8YMz6SBDXU2qM175UN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:16 2025 by rpki-client