Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5o0glizAhu2iHR3nMU4e72b4p1c.roa
File: 5o0glizAhu2iHR3nMU4e72b4p1c.roa (raw, json)
Hash identifier: IWlcv4iO4Y+cvbWPW7p3LRXH6xwkc4RUVRXO2Iu5H1k=
Subject key identifier: E6:8D:20:96:2C:C0:86:ED:A2:1D:1D:E7:31:4E:1E:EF:66:F8:A7:57
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BFF2603E54AE8E5BE4D5E4553F184
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5o0glizAhu2iHR3nMU4e72b4p1c.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210866
IP address blocks: 77.65.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:26:03:e5:4a:e8:e5:be:4d:5e:45:53:f1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e68d20962cc086eda21d1de7314e1eef66f8a757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:cc:fa:d7:c4:48:a8:28:78:da:b8:0e:73:
c1:df:9d:87:8b:57:c1:ed:a6:a4:e6:53:a5:0f:d1:
a6:47:8b:83:30:b0:5a:8c:35:f4:a7:fc:03:3a:cc:
c4:1d:6f:7f:29:5c:ca:bb:6a:82:2c:e5:49:12:c6:
59:2c:05:3e:7f:e3:a9:06:b6:5f:66:e6:09:cc:71:
ec:eb:ea:fa:77:b8:aa:ff:75:18:23:2d:a1:5f:a5:
18:96:38:d3:9d:3f:c6:c6:f4:74:af:09:06:ab:a4:
9c:94:64:0f:dd:94:50:fa:ec:b4:76:ee:52:9b:70:
e4:32:8b:92:93:a5:58:11:01:ef:ff:e3:07:74:71:
3e:85:bf:7f:58:1b:60:25:19:58:ea:10:0a:16:fb:
06:8a:23:9b:b7:7d:03:d4:3e:df:62:b5:e7:62:6b:
e9:cd:b2:5d:64:59:39:a9:b9:18:a7:9f:26:a1:d4:
f2:13:76:74:dc:db:af:f0:15:64:5d:ae:f9:1a:9c:
20:5f:b6:8a:7f:7f:9d:a7:fd:fa:58:e5:83:aa:50:
3a:eb:46:7a:93:19:74:19:a1:16:33:a7:b9:f1:4c:
90:2a:7b:33:6b:04:aa:dc:92:fe:a6:24:cb:f9:ed:
cc:46:0b:ae:ea:6d:b8:38:84:2a:b2:13:8b:32:af:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:20:96:2C:C0:86:ED:A2:1D:1D:E7:31:4E:1E:EF:66:F8:A7:57
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5o0glizAhu2iHR3nMU4e72b4p1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.208.0/24
Signature Algorithm: sha256WithRSAEncryption
72:63:16:fc:f4:4a:98:05:7b:33:ee:38:aa:81:46:d9:6c:6a:
97:c2:bc:be:ad:24:56:79:94:3c:82:29:a8:58:6a:15:68:a0:
65:64:f2:02:84:74:71:36:26:ad:81:38:1c:fa:85:ac:9f:c7:
50:65:e1:ac:f4:d6:5f:71:4f:f7:5b:e6:0e:ed:66:f6:87:d5:
e7:f6:f4:8d:7c:06:5a:00:a7:62:99:e0:2e:e4:57:ae:eb:df:
21:ea:99:b1:55:30:8c:13:e7:2e:45:4d:c2:e9:fa:83:f2:8c:
09:76:12:14:6f:e4:30:28:ac:2c:f0:31:03:e2:bf:79:90:bc:
a9:ff:6a:be:f0:c7:42:64:b0:84:af:89:a6:07:5e:b4:2e:78:
96:22:21:c3:ec:15:7b:da:2a:af:44:73:0f:7a:36:d2:55:c5:
73:c2:9c:d5:3d:eb:08:14:ad:e0:2c:31:2c:d7:db:ba:41:52:
24:eb:a5:4f:88:c5:df:83:ba:7c:9b:81:f3:c5:4d:a0:b1:17:
8d:e2:cd:ed:b5:12:71:cf:3d:a6:16:29:ba:4a:91:86:0a:3c:
f6:b9:e5:a2:11:95:72:2d:4b:17:4b:39:20:e0:89:37:bf:dc:
ba:64:ca:fe:fb:7b:73:0d:15:46:ef:c6:fb:a8:38:93:a0:1c:
7b:e5:2d:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma/8mA+VK6OW+TV5FU/GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhkMjA5NjJjYzA4NmVkYTIxZDFkZTczMTRlMWVlZjY2ZjhhNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUzM+tfESKgoeNq4DnPB352Hi1fB
7aak5lOlD9GmR4uDMLBajDX0p/wDOszEHW9/KVzKu2qCLOVJEsZZLAU+f+OpBrZf
ZuYJzHHs6+r6d7iq/3UYIy2hX6UYljjTnT/GxvR0rwkGq6SclGQP3ZRQ+uy0du5S
m3DkMouSk6VYEQHv/+MHdHE+hb9/WBtgJRlY6hAKFvsGiiObt30D1D7fYrXnYmvp
zbJdZFk5qbkYp58modTyE3Z03Nuv8BVkXa75GpwgX7aKf3+dp/36WOWDqlA660Z6
kxl0GaEWM6e58UyQKnszawSq3JL+piTL+e3MRguu6m24OIQqshOLMq+lgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaNIJYswIbtoh0d5zFOHu9m+KdXMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvNW8wZ2xpekFodTJpSFIzbk1VNGU3MmI0cDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUHQMA0G
CSqGSIb3DQEBCwUAA4IBAQByYxb89EqYBXsz7jiqgUbZbGqXwry+rSRWeZQ8gimo
WGoVaKBlZPIChHRxNiatgTgc+oWsn8dQZeGs9NZfcU/3W+YO7Wb2h9Xn9vSNfAZa
AKdimeAu5Feu698h6pmxVTCME+cuRU3C6fqD8owJdhIUb+QwKKws8DED4r95kLyp
/2q+8MdCZLCEr4mmB160LniWIiHD7BV72iqvRHMPejbSVcVzwpzVPesIFK3gLDEs
19u6QVIk66VPiMXfg7p8m4HzxU2gsReN4s3ttRJxzz2mFim6SpGGCjz2ueWiEZVy
LUsXSzkg4Ik3v9y6ZMr++3tzDRVG78b7qDiToBx75S3k
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:33 2025 by rpki-client