Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/0WgKhjREJrZPp5eivCc5Ledwy08.roa
File: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (raw, json)
Hash identifier: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=
Subject key identifier: D1:68:0A:86:34:44:26:B6:4F:A7:97:A2:BC:27:39:2D:E7:70:CB:4F
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01941F8C9DAEFC79B9074F7B46C505EF9E87
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/0WgKhjREJrZPp5eivCc5Ledwy08.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 185.77.1.0/24 maxlen: 24
185.77.2.0/24 maxlen: 24
2a05:5ec0::/29 maxlen: 29
2a05:5ec0:1::/48 maxlen: 48
2a05:5ec1::/32 maxlen: 32
2a05:5ec2::/32 maxlen: 32
2a05:5ec3::/32 maxlen: 32
2a05:5ec4::/32 maxlen: 32
2a05:5ec5::/32 maxlen: 32
2a05:5ec6::/32 maxlen: 32
2a05:5ec7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:ae:fc:79:b9:07:4f:7b:46:c5:05:ef:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1680a86344426b64fa797a2bc27392de770cb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:9c:57:fd:68:1f:ac:ad:07:cc:4a:3e:19:
46:88:9b:30:9d:94:e7:8d:77:8a:92:ed:d3:e6:51:
8b:1d:98:93:64:c9:c5:0f:2a:64:8c:51:de:84:89:
0d:01:ee:f1:ce:25:12:eb:6a:a8:e9:b9:c1:ad:6c:
c2:af:fb:4e:85:e4:04:17:e5:47:6e:b9:ef:5d:93:
56:14:59:e9:6c:8a:d2:85:42:0a:66:6a:7f:6a:a0:
4f:f7:53:62:be:dc:a5:1f:13:0f:67:88:b3:9a:ef:
81:df:ec:60:96:2a:50:2b:ca:f2:45:11:4c:97:14:
dc:4e:48:39:15:49:14:8f:a2:09:36:b1:5f:d5:5f:
f1:b0:8c:3b:e0:44:da:69:a7:eb:3a:66:63:25:d8:
9f:95:ab:55:da:3c:b2:55:bd:67:b7:92:1d:f4:3d:
5b:87:8b:a6:9e:c8:97:18:b9:b9:85:7f:a6:27:1b:
db:af:2c:0d:ef:04:5d:af:4e:02:4a:be:d5:e9:37:
55:6b:0a:18:3a:a8:cf:72:5c:e1:5d:8f:6d:8f:ee:
c3:6f:f2:e7:13:a9:89:2a:84:6c:e0:11:8c:22:31:
e9:52:d6:99:3d:f4:f8:e2:de:34:52:41:f1:c6:5e:
e3:eb:73:9c:62:1a:4d:b5:bb:3c:21:29:11:53:49:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:0A:86:34:44:26:B6:4F:A7:97:A2:BC:27:39:2D:E7:70:CB:4F
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/0WgKhjREJrZPp5eivCc5Ledwy08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.1.0-185.77.2.255
IPv6:
2a05:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
44:84:24:0b:3b:05:c5:d1:87:6f:95:93:28:d2:64:a8:65:b3:
ba:e6:5f:9c:2a:21:c3:26:4e:85:81:c8:b8:a2:3b:10:01:91:
11:54:99:0d:f7:24:e0:7e:03:33:dc:db:9d:75:04:4f:cf:87:
86:74:f3:e6:70:9f:82:ea:45:90:fc:8a:f8:4a:f0:d9:96:21:
cc:7a:78:a8:97:17:ee:86:34:b3:19:53:25:fc:c7:d7:d2:ad:
f4:cd:49:2b:da:23:2c:e3:a9:1f:b5:12:ab:a8:1c:9d:71:0d:
64:03:c0:85:84:c5:9c:0d:38:08:bc:3d:61:e2:78:88:16:57:
b4:c3:b7:35:4e:c8:af:f1:fa:e8:a6:10:f0:a4:09:d9:90:4a:
2c:9a:37:78:6f:2f:1a:fa:88:78:3b:f1:2a:e0:0e:e2:27:5b:
83:51:98:c4:bd:99:45:e7:93:6a:90:de:33:55:e7:95:34:68:
e0:b3:4a:b3:d3:b4:ab:90:cb:3c:07:ed:ca:4c:ba:c0:60:10:
9b:d5:0d:9b:a1:01:f8:60:29:e2:a0:d1:91:ad:2d:ef:46:30:
2a:d5:c7:bd:3d:55:ac:e5:a8:7f:29:82:28:d7:45:dd:89:48:
f7:97:e0:b7:40:af:24:5a:6d:0d:80:e1:1a:af:d5:71:55:d0:
9f:a6:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:46 2025 by rpki-client