Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xEnkF5j92tlMN6y9yFq6rf-ZtGM.roa
File: xEnkF5j92tlMN6y9yFq6rf-ZtGM.roa (raw, json)
Hash identifier: S3HA6lQu3bWEiC3+sWYcaGY3bnZKpB78PEktmW2P5zo=
Subject key identifier: C4:49:E4:17:98:FD:DA:D9:4C:37:AC:BD:C8:5A:BA:AD:FF:99:B4:63
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D9692EB57BBB632978073428502C4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xEnkF5j92tlMN6y9yFq6rf-ZtGM.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36671
IP address blocks: 77.77.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:96:92:eb:57:bb:b6:32:97:80:73:42:85:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c449e41798fddad94c37acbdc85abaadff99b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:c3:7f:f1:e9:32:89:b0:fb:c9:9d:7c:75:
94:5e:3c:36:b9:03:e2:b8:f9:e4:6b:30:03:8c:96:
ca:5e:b9:b7:c7:9b:da:c5:45:87:ae:07:c6:be:ed:
ac:06:a7:4a:91:a3:8d:5b:4f:fe:d5:9c:6d:45:6c:
06:fd:6a:bd:a7:d3:6b:f0:6f:b9:e0:53:5f:30:19:
c6:f0:83:17:66:ab:01:50:ba:b3:d2:06:0d:45:e6:
40:24:67:5f:ae:5b:3e:10:cd:3f:b4:1d:8e:e6:26:
93:6b:21:c3:b5:d2:ca:0b:86:98:7a:ba:51:fb:3b:
b6:c1:b3:9c:a2:7b:52:f3:31:5d:bd:74:91:6b:ab:
0d:2c:fc:15:52:d5:af:b8:15:38:7c:fd:cc:63:bf:
2b:5c:36:19:f6:89:14:85:4e:a1:3d:ef:70:c7:5a:
93:86:d0:f2:87:ab:de:2f:c6:b4:91:f2:2c:82:8d:
ce:65:52:c0:25:5a:01:b8:c4:ca:58:b0:14:49:7a:
e8:6c:09:f5:c2:bc:d4:b2:d4:e6:93:c9:39:b2:ba:
d0:46:46:dd:92:0b:6a:14:be:74:82:68:9a:ef:51:
e6:8d:71:7b:59:4c:55:8b:fe:14:7f:21:6e:5d:71:
cc:18:51:ff:56:a1:6f:30:30:59:75:be:64:bf:cb:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:E4:17:98:FD:DA:D9:4C:37:AC:BD:C8:5A:BA:AD:FF:99:B4:63
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xEnkF5j92tlMN6y9yFq6rf-ZtGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c0:f0:5c:e9:c4:97:aa:78:98:86:37:b5:10:5a:4d:f7:12:
d5:2a:df:5e:62:e0:99:7f:c9:a8:ee:57:e5:ce:c1:30:dc:49:
2f:24:9f:4f:bf:b4:71:4a:f4:56:15:32:dd:28:d4:4a:1d:67:
25:f5:4e:5e:7b:1e:6f:f6:04:99:ac:1f:a7:2d:55:4b:e6:a1:
1c:9f:6d:e8:5b:e7:d3:d9:1a:e7:1b:7a:ed:2b:b8:a6:2d:25:
52:15:78:9c:2f:d5:26:0b:f5:6b:80:77:89:0a:f7:83:e3:8c:
04:5a:f6:91:f5:ca:3b:42:22:b1:37:fc:5c:2f:c4:14:b7:e2:
74:26:7d:07:ee:da:9e:e6:b8:f9:5c:7d:2b:b4:2d:d1:7b:59:
23:b4:84:7c:f2:6e:4e:e2:f9:1f:4a:38:90:36:0a:64:9c:03:
f8:2d:d3:72:ba:7a:8a:69:50:8e:94:18:7c:5e:e2:80:aa:9f:
27:58:a0:9d:6b:ee:8d:07:e7:cb:64:09:d4:8f:ee:85:fd:30:
84:02:0d:17:72:40:27:2e:bf:81:ff:de:06:e7:c8:62:e7:87:
dd:31:9c:f6:16:a4:61:d7:c6:a4:f6:f8:d4:a9:a0:ed:50:60:
f5:d0:30:23:a2:9f:cd:fc:1f:9c:90:a0:4f:b5:fe:7e:b2:bf:
55:a9:7e:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijZaS61e7tjKXgHNChQLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwMTAxMTU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQ5ZTQxNzk4ZmRkYWQ5NGMzN2FjYmRjODVhYmFhZGZmOTliNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtDDf/HpMomw+8mdfHWUXjw2uQPi
uPnkazADjJbKXrm3x5vaxUWHrgfGvu2sBqdKkaONW0/+1ZxtRWwG/Wq9p9Nr8G+5
4FNfMBnG8IMXZqsBULqz0gYNReZAJGdfrls+EM0/tB2O5iaTayHDtdLKC4aYerpR
+zu2wbOcontS8zFdvXSRa6sNLPwVUtWvuBU4fP3MY78rXDYZ9okUhU6hPe9wx1qT
htDyh6veL8a0kfIsgo3OZVLAJVoBuMTKWLAUSXrobAn1wrzUstTmk8k5srrQRkbd
kgtqFL50gmia71HmjXF7WUxVi/4UfyFuXXHMGFH/VqFvMDBZdb5kv8un/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRJ5BeY/drZTDesvchauq3/mbRjMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEveEVua0Y1ajkydGxNTjZ5OXlGcTZyZi1adEdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU2sMA0G
CSqGSIb3DQEBCwUAA4IBAQA8wPBc6cSXqniYhje1EFpN9xLVKt9eYuCZf8mo7lfl
zsEw3EkvJJ9Pv7RxSvRWFTLdKNRKHWcl9U5eex5v9gSZrB+nLVVL5qEcn23oW+fT
2RrnG3rtK7imLSVSFXicL9UmC/VrgHeJCveD44wEWvaR9co7QiKxN/xcL8QUt+J0
Jn0H7tqe5rj5XH0rtC3Re1kjtIR88m5O4vkfSjiQNgpknAP4LdNyunqKaVCOlBh8
XuKAqp8nWKCda+6NB+fLZAnUj+6F/TCEAg0XckAnLr+B/94G58hi54fdMZz2FqRh
18ak9vjUqaDtUGD10DAjop/N/B+ckKBPtf5+sr9VqX42
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:16 2025 by rpki-client