Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Wad3J1cpofy4riJsLxTk64WwYBA.roa
File: Wad3J1cpofy4riJsLxTk64WwYBA.roa (raw, json)
Hash identifier: XTSX4wqwK2IEzqQM2oW42Ds2NcP/UHSg0U+tfOIG0Bo=
Subject key identifier: 59:A7:77:27:57:29:A1:FC:B8:AE:22:6C:2F:14:E4:EB:85:B0:60:10
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019373CF1037346B60B1089F20F3E3730EA6
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Wad3J1cpofy4riJsLxTk64WwYBA.roa
Signing time: Thu 28 Nov 2024 17:26:10 +0000
ROA not before: Thu 28 Nov 2024 17:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
77.93.143.0/24 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:cf:10:37:34:6b:60:b1:08:9f:20:f3:e3:73:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 28 17:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a777275729a1fcb8ae226c2f14e4eb85b06010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:be:3f:35:5c:ff:98:11:47:fc:89:00:77:
b9:1c:87:8e:f0:91:f0:42:21:8f:3d:71:f4:75:44:
90:bf:72:72:87:cf:13:dc:79:e3:a1:1a:98:84:f4:
0c:68:06:52:df:d8:fd:b3:97:fb:69:cb:f2:03:46:
bc:ef:cf:86:4c:42:3d:5e:09:08:3f:b2:b2:cf:e4:
21:80:72:86:3f:08:5c:25:ad:8a:9d:02:d5:1d:5a:
2c:86:22:b6:ba:30:04:45:a5:5c:11:78:4c:63:89:
84:4d:67:c1:85:63:02:8c:ec:f1:cb:13:bf:a1:3f:
4c:bd:08:7d:5b:9f:97:02:19:1d:7e:30:dd:85:b6:
17:1d:bb:e0:27:89:7b:07:f3:f2:84:83:b2:af:db:
ab:5a:c0:14:fd:f4:81:9d:df:10:f0:20:5d:b4:43:
84:25:53:1f:c1:37:a8:92:e5:ea:84:38:1d:6e:7b:
8b:0c:54:ec:df:7d:5d:2f:87:86:f7:64:a8:c5:00:
69:21:0c:4c:82:a7:e1:c2:5d:42:e1:1d:31:89:ae:
ac:41:98:f1:f2:63:e0:87:f9:ca:6c:b5:c7:8c:72:
d0:8a:2c:54:c5:c6:67:dd:69:aa:33:a1:25:46:31:
7d:92:66:ba:5f:fb:2f:88:9a:d0:49:ef:55:db:71:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:77:27:57:29:A1:FC:B8:AE:22:6C:2F:14:E4:EB:85:B0:60:10
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Wad3J1cpofy4riJsLxTk64WwYBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
62:79:67:8a:1d:e0:b1:ac:2b:24:76:56:4d:f4:0f:51:24:c6:
58:fb:42:c5:0f:97:dc:81:8b:b2:22:31:b3:5f:9a:c9:2c:21:
14:23:78:ae:4f:cd:34:c1:d6:dc:e7:9c:71:6d:4d:fe:1f:9b:
95:3d:05:66:e9:f8:9d:34:4e:42:b4:28:45:a7:6e:c7:2c:53:
29:f8:b9:85:56:61:08:64:4f:6f:08:88:82:a1:a2:fc:2a:0e:
b8:58:e9:ad:de:1d:9b:49:64:48:9b:9c:10:da:ac:27:3e:34:
79:73:20:a9:66:88:f4:e3:a7:31:94:bd:e6:c9:66:d3:d4:9d:
86:97:13:c2:4c:e9:51:03:4f:79:f6:de:a5:57:0f:fa:d3:da:
e0:e6:36:9f:ce:91:f0:4e:eb:2d:52:23:e4:8c:85:33:2c:3e:
ba:1a:66:12:54:cf:5a:f4:ae:be:0b:a0:dc:01:2f:f2:c2:7a:
09:79:5b:ae:bf:0a:48:07:33:d6:3e:b6:98:21:18:90:f3:75:
ca:24:53:82:00:23:ff:86:64:7c:51:ef:2f:4e:42:82:1b:70:
f2:9d:9c:1b:71:34:f3:95:03:59:4e:11:b9:49:d3:92:71:98:
b1:32:93:10:e1:ed:c3:5d:dd:1d:45:5e:22:32:9e:0d:7a:21:
c4:4e:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:10 2025 by rpki-client