Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/_6aivCsAWH-kqctPZhR5amDxfsA.roa
File: _6aivCsAWH-kqctPZhR5amDxfsA.roa (raw, json)
Hash identifier: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=
Subject key identifier: FF:A6:A2:BC:2B:00:58:7F:A4:A9:CB:4F:66:14:79:6A:60:F1:7E:C0
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F59BA2E98B1E4ECE1159B711A4E3
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/_6aivCsAWH-kqctPZhR5amDxfsA.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 77.91.96.0/24 maxlen: 24
77.91.112.0/24 maxlen: 24
77.91.113.0/24 maxlen: 24
77.91.114.0/24 maxlen: 24
77.91.115.0/24 maxlen: 24
77.91.116.0/24 maxlen: 24
77.91.117.0/24 maxlen: 24
77.91.118.0/24 maxlen: 24
77.91.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:9b:a2:e9:8b:1e:4e:ce:11:59:b7:11:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa6a2bc2b00587fa4a9cb4f6614796a60f17ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:20:b5:76:2e:d0:7c:0b:3f:20:eb:d7:f3:
bf:9d:f9:48:ca:37:30:57:07:b2:64:04:0d:e5:c6:
c9:ea:20:6c:43:1f:bf:40:f5:c7:32:71:25:14:97:
7c:1c:58:5a:fb:13:c7:20:91:b8:67:e3:cd:b3:05:
2e:64:f9:25:50:b1:41:86:de:a1:3b:73:d1:2a:1f:
3d:f3:77:b2:25:0c:29:20:e2:c1:d8:e1:42:73:46:
49:91:ff:6a:17:06:56:a0:7c:97:36:6f:8e:11:b2:
d3:72:c7:6e:2a:16:f7:46:e5:17:56:9c:5f:44:7f:
ec:57:42:36:ea:fd:ae:e8:16:00:cc:e1:c2:63:0a:
eb:b7:46:b8:23:13:74:90:a4:68:37:2b:a2:ba:af:
13:fa:c4:90:0c:52:96:8c:28:e0:ea:63:20:77:3e:
5a:e8:10:7e:bf:e6:cc:89:17:61:23:68:bc:d0:46:
cf:a0:01:f0:4f:b8:37:7e:2e:0c:72:de:7b:6e:b4:
06:f1:a5:85:3f:95:a0:ff:73:c3:81:7c:bd:65:34:
7d:47:a9:bd:28:43:4a:8e:56:a0:5f:18:eb:52:c9:
37:49:39:85:e4:4f:d7:a3:71:f9:8d:8e:8a:ae:f4:
f0:ad:af:5a:58:70:50:40:89:18:9e:70:16:98:1a:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:A2:BC:2B:00:58:7F:A4:A9:CB:4F:66:14:79:6A:60:F1:7E:C0
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/_6aivCsAWH-kqctPZhR5amDxfsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.96.0/24
77.91.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:64:da:0b:3d:9a:e1:41:f7:8e:63:b2:2a:62:ad:18:59:f5:
df:da:1c:1c:5e:6e:8a:95:d5:e7:32:28:59:ac:f4:42:09:fb:
8b:aa:85:64:4d:9c:cd:d4:b2:64:2e:a5:2f:69:e7:33:cc:3f:
81:a8:3a:d1:00:78:82:4c:09:4e:a8:34:c1:c1:8b:8e:c4:e6:
be:78:fa:35:01:23:9f:56:80:2d:73:d4:63:77:fe:cf:8a:bf:
7c:06:67:6d:50:fa:1f:ad:53:64:5f:e6:be:96:9d:86:85:ae:
d2:cd:fd:5f:2e:96:6e:ca:db:f6:cf:74:0b:88:44:f8:85:2c:
98:f5:b3:8d:e2:e2:35:ad:f0:c1:d0:49:0c:a9:16:2b:d7:41:
9f:70:88:6c:74:01:ee:9c:3d:3f:37:1a:f6:90:e6:da:39:10:
99:87:f7:2b:53:9e:1e:bd:38:51:42:39:26:08:c8:5b:1f:ce:
4a:03:9e:9b:78:01:1e:91:71:9a:60:21:f7:d4:80:43:b0:2c:
e7:18:4b:0c:b9:53:b3:8e:94:7d:2b:ab:c5:de:85:94:35:51:
a7:a7:eb:7a:b7:50:cd:6e:d4:41:d2:da:48:8e:ac:5c:92:55:
57:06:b3:ed:4e:7f:ed:17:ff:a1:18:3f:8a:f9:7d:be:6b:a6:
f7:0f:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:48 2025 by rpki-client