Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa
File: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (raw, json)
Hash identifier: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=
Subject key identifier: 5F:6A:C0:09:40:B5:0C:D7:E0:E7:05:97:08:37:05:BB:B6:4B:80:4C
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282705CED5C72D3D224C33DCF806F41E
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 77.91.67.0/24 maxlen: 24
77.91.71.0/24 maxlen: 24
77.91.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:05:ce:d5:c7:2d:3d:22:4c:33:dc:f8:06:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f6ac00940b50cd7e0e70597083705bbb64b804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d2:9a:fe:6d:29:ed:25:f6:1d:a5:3a:f0:28:
0e:81:69:02:3b:4b:2c:44:b2:2d:15:0a:75:e8:7a:
c7:2e:ba:79:e1:87:cc:be:d0:a6:6c:bf:31:09:ac:
1c:99:55:a0:aa:94:26:9b:7b:bd:67:81:93:ed:16:
b3:f8:2c:31:be:b0:38:d6:67:5d:b9:60:7c:6a:fc:
b3:8a:e4:9e:ba:50:e8:2a:cf:0a:20:11:3b:ca:d2:
9f:a4:bc:ab:0b:59:47:ed:a7:29:f3:fd:66:c9:b4:
1b:7a:4c:97:50:4a:bd:bd:fa:08:d4:08:3c:86:41:
83:96:79:64:e6:8f:7a:4d:d7:47:eb:05:e5:98:1f:
4f:a3:78:1e:da:7c:0a:79:c0:2f:d8:fc:df:10:79:
57:9e:49:11:8e:bf:56:02:88:26:51:32:ae:74:06:
55:39:bf:6b:37:fb:4b:5b:a5:1e:34:35:b7:f7:d3:
ba:29:c3:56:ec:ac:b2:5d:21:59:69:33:77:aa:46:
02:00:05:5f:b8:4f:6c:95:c8:a3:31:bc:da:c2:76:
56:87:f8:cb:44:5a:84:c7:44:49:c3:45:1c:28:d8:
07:78:01:e9:3b:02:c4:a9:88:3c:83:5a:9b:a7:38:
bd:fb:e2:10:1c:7b:b8:b1:71:6a:65:32:9f:be:95:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6A:C0:09:40:B5:0C:D7:E0:E7:05:97:08:37:05:BB:B6:4B:80:4C
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.67.0/24
77.91.71.0/24
77.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
15:79:4a:ba:68:23:65:e1:bc:bc:b8:a0:35:bf:04:c2:56:17:
bc:9d:22:f5:37:fa:84:5a:b9:0c:ac:83:d2:7e:38:8e:35:30:
95:06:e4:a6:44:78:6a:f4:08:3b:0c:a7:81:19:6e:57:7a:c7:
fa:9f:45:14:ec:f1:53:68:b5:f0:35:e4:f6:65:87:83:97:cd:
da:7e:58:90:21:4f:61:e5:12:4d:46:0a:2f:04:08:41:9b:6a:
db:c7:86:0e:dc:7e:6a:05:ff:cf:40:1a:27:ab:18:19:ea:e1:
59:cb:b1:87:c3:85:cd:3b:95:de:8e:f8:e6:2d:46:c9:b8:cd:
07:21:b5:a0:7d:4c:ad:1b:00:4b:1f:3e:87:6c:a6:ac:06:6e:
08:90:4c:94:8d:c0:73:6d:71:c5:5d:83:14:23:1b:65:23:0e:
bf:7a:45:9a:1f:05:18:27:7a:6c:22:14:37:c4:43:1f:94:81:
b6:a6:ab:6c:31:6b:0a:45:b4:46:31:50:3c:19:cc:19:3a:0e:
bc:31:31:bd:3a:99:1f:26:45:62:8f:b4:98:c6:2a:7a:62:68:
ab:f8:ef:e9:42:7e:75:73:4f:f7:fb:6a:11:e5:84:39:cb:63:
36:9f:20:91:90:f3:45:c5:05:a0:eb:ee:59:36:06:76:d5:06:
5a:e4:1f:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJwXO1cctPSJMM9z4BvQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjUwMTAyMTc1MzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjZhYzAwOTQwYjUwY2Q3ZTBlNzA1OTcwODM3MDViYmI2NGI4MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tKa/m0p7SX2HaU68CgOgWkCO0ss
RLItFQp16HrHLrp54YfMvtCmbL8xCawcmVWgqpQmm3u9Z4GT7Raz+CwxvrA41mdd
uWB8avyziuSeulDoKs8KIBE7ytKfpLyrC1lH7acp8/1mybQbekyXUEq9vfoI1Ag8
hkGDlnlk5o96TddH6wXlmB9Po3ge2nwKecAv2PzfEHlXnkkRjr9WAogmUTKudAZV
Ob9rN/tLW6UeNDW399O6KcNW7KyyXSFZaTN3qkYCAAVfuE9slcijMbzawnZWh/jL
RFqEx0RJw0UcKNgHeAHpOwLEqYg8g1qbpzi9++IQHHu4sXFqZTKfvpXgOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF9qwAlAtQzX4OcFlwg3Bbu2S4BMMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvWDJyQUNVQzFETmZnNXdXWENEY0Z1N1pMZ0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVtDAwQA
TVtHAwQATVtPMA0GCSqGSIb3DQEBCwUAA4IBAQAVeUq6aCNl4by8uKA1vwTCVhe8
nSL1N/qEWrkMrIPSfjiONTCVBuSmRHhq9Ag7DKeBGW5Xesf6n0UU7PFTaLXwNeT2
ZYeDl83afliQIU9h5RJNRgovBAhBm2rbx4YO3H5qBf/PQBonqxgZ6uFZy7GHw4XN
O5XejvjmLUbJuM0HIbWgfUytGwBLHz6HbKasBm4IkEyUjcBzbXHFXYMUIxtlIw6/
ekWaHwUYJ3psIhQ3xEMflIG2pqtsMWsKRbRGMVA8GcwZOg68MTG9OpkfJkVij7SY
xip6Ymir+O/pQn51c0/3+2oR5YQ5y2M2nyCRkPNFxQWg6+5ZNgZ21QZa5B9B
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:12:47 2025 by rpki-client