Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rcQZim11G5Xxznsrw1JbVOkV_mw.roa
File: rcQZim11G5Xxznsrw1JbVOkV_mw.roa (raw, json)
Hash identifier: AW8GFn5+B9TORfZFdRkwAvkFvQ7ApRaGRDViKpLlvno=
Subject key identifier: AD:C4:19:8A:6D:75:1B:95:F1:CE:7B:2B:C3:52:5B:54:E9:15:FE:6C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D94E236C4D3E5B9CE184D6A9EDD07
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rcQZim11G5Xxznsrw1JbVOkV_mw.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34074
IP address blocks: 77.77.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:94:e2:36:c4:d3:e5:b9:ce:18:4d:6a:9e:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adc4198a6d751b95f1ce7b2bc3525b54e915fe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:ce:4a:ef:ff:16:d0:c9:93:09:e1:22:e9:
b6:11:6f:1e:be:38:d5:d0:2a:84:7c:ee:80:e8:c4:
d0:07:ff:16:52:ae:e2:21:96:e4:d0:d6:f3:88:95:
9b:96:f5:32:bc:9a:62:16:6f:df:75:1f:ca:44:d3:
88:ef:10:aa:42:ca:c6:a4:82:3b:e2:ec:d8:9a:62:
db:05:c8:48:9f:65:e6:da:60:9b:09:df:68:7a:3b:
1e:3a:3b:bf:a5:36:59:37:3a:46:74:aa:e1:49:a0:
dd:0a:94:83:65:89:68:f7:e4:f9:79:5c:6f:ca:2d:
1f:43:88:5e:c2:5b:37:5e:7a:42:ba:b2:48:7e:74:
a7:22:44:94:8b:4a:08:b2:16:5e:92:8d:9c:07:0a:
86:b2:9a:6f:ac:18:50:e8:86:c4:87:c5:da:14:94:
9b:45:6c:2f:3a:51:41:31:0b:1f:64:15:df:b1:8d:
be:19:25:6b:86:e4:d2:52:cd:f2:1f:7a:37:c4:9c:
d2:b1:10:42:72:f8:9e:1d:2e:88:a2:71:c1:d2:ef:
e4:04:f8:9e:87:ec:b6:61:0f:ec:46:46:8e:e9:c8:
06:56:41:a3:a5:14:14:81:5e:81:83:76:db:7c:47:
06:cf:6d:a4:d4:f7:b2:33:8a:a0:02:49:2b:48:76:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:19:8A:6D:75:1B:95:F1:CE:7B:2B:C3:52:5B:54:E9:15:FE:6C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rcQZim11G5Xxznsrw1JbVOkV_mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:74:c7:fb:ba:15:af:94:b0:1e:c5:ad:a6:dc:bb:5b:8b:8b:
27:0a:9a:a1:c9:cf:9e:4e:ce:fe:e7:60:98:73:e5:03:bb:91:
8a:ca:1c:e6:ca:2c:5a:c8:37:46:4a:e6:16:c9:54:05:07:6c:
f3:40:27:b8:91:2e:dd:7d:51:0d:98:b8:23:be:28:d6:24:a1:
be:44:65:e8:a2:00:87:3c:a6:ea:83:91:58:1f:7c:17:48:a1:
da:41:97:22:ba:fa:35:3d:11:87:c8:d6:99:75:ed:08:ee:f5:
64:35:55:f7:79:6e:2e:5e:94:c0:7d:61:f8:ff:2e:6c:38:31:
a1:ef:48:a9:41:9a:45:68:33:30:66:ad:50:6e:11:ba:6e:25:
dd:09:74:57:70:b4:b4:b2:f8:7d:36:e0:83:c4:3b:90:f8:f7:
da:2e:73:6b:eb:23:4b:c2:9b:5d:b9:66:f7:3b:92:72:cc:06:
fe:ca:92:b6:55:9d:8b:bd:33:65:52:54:f6:db:67:e6:51:d7:
5f:de:33:6b:a5:4a:30:6d:11:93:c2:9f:ed:43:86:48:8d:2c:
e7:1a:17:53:6b:cc:7b:ed:dc:f2:ed:72:82:4d:d2:36:1a:b4:
bc:49:0d:40:80:70:8b:80:cb:1e:75:2c:95:ce:49:9c:76:01:
7f:30:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:31 2025 by rpki-client