Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D4AsfIo2odjHPoOJioCspxnogeI.roa
File: D4AsfIo2odjHPoOJioCspxnogeI.roa (raw, json)
Hash identifier: BhTRZAS9BQH/NjnVUjbhXiwoNnA+DVkL/2yQ8R1GguM=
Subject key identifier: 0F:80:2C:7C:8A:36:A1:D8:C7:3E:83:89:8A:80:AC:A7:19:E8:81:E2
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266C01F8D4805770734DD355405A415F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D4AsfIo2odjHPoOJioCspxnogeI.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212915
IP address blocks: 77.65.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:01:f8:d4:80:57:70:73:4d:d3:55:40:5a:41:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f802c7c8a36a1d8c73e83898a80aca719e881e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:80:a1:a6:12:ef:a6:da:2f:f1:64:e3:0d:
0d:da:2c:4c:24:59:f3:73:ab:8b:87:09:76:9e:0a:
9e:f8:61:c6:49:9a:96:42:ef:b7:a6:37:52:f6:e3:
ea:a8:c2:57:16:e8:0c:7d:71:86:98:34:fb:5e:c6:
63:d9:1a:d2:b8:9a:a3:6b:b2:c1:57:cf:6b:5c:4c:
a7:2f:ef:cd:c1:15:61:93:05:bc:97:0e:93:c1:e1:
ef:59:bc:2b:ee:34:07:9d:c6:54:26:35:d7:f2:84:
6a:f1:54:1a:19:0a:56:d7:e5:ac:ae:15:df:2c:62:
de:37:4e:1a:ec:ce:6a:3f:ab:0c:e2:6f:e9:b7:2c:
6c:a0:a3:da:2e:b6:ef:5b:07:bd:e2:05:20:82:8c:
f4:40:47:26:d1:92:e7:fe:6a:bd:4c:c5:0e:46:cd:
da:fc:3d:9b:e3:1d:9d:7d:7d:3b:a1:36:bd:d1:5d:
d8:de:d9:63:7e:8c:dc:78:ce:dc:53:b2:da:2d:c5:
bc:94:2a:ee:7b:ce:37:a8:f1:1f:72:4d:db:fa:3a:
4b:ba:44:32:e6:b7:25:dd:d8:ab:33:6c:12:92:4a:
d5:91:c4:c8:45:ef:90:ac:6c:28:66:0f:1a:4d:2c:
6b:0a:62:7d:95:65:db:ee:ea:19:d9:7c:9a:81:8a:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:2C:7C:8A:36:A1:D8:C7:3E:83:89:8A:80:AC:A7:19:E8:81:E2
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D4AsfIo2odjHPoOJioCspxnogeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.170.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8d:8b:ae:f9:c1:5a:0f:3b:ba:46:e8:0d:b6:22:14:4f:e8:
a9:ce:31:0b:22:2d:7b:65:0a:44:a3:5a:bb:0a:96:81:32:7a:
82:42:9d:cc:96:ed:98:d9:f4:67:5e:d4:85:5b:63:cd:e2:f0:
f3:8f:68:1b:94:71:c6:45:2d:da:60:ca:71:00:aa:e9:f8:cd:
8c:8b:e9:15:2d:b8:91:7c:5d:dd:49:26:bf:cb:b9:4e:bd:f7:
73:1d:d8:aa:56:ad:94:90:74:60:31:7b:19:84:22:80:af:40:
42:18:13:3f:4b:75:ff:ae:b8:67:5a:38:d5:a1:78:74:37:6a:
5c:98:8d:8d:8a:6b:95:b0:b9:e9:66:eb:e5:7a:d0:bb:24:30:
2b:b6:1c:6d:e2:c3:0e:d3:37:d2:cb:2b:45:b1:98:ea:0f:5a:
97:10:a4:3d:87:5c:b6:57:bb:a5:ed:bc:80:03:f2:aa:e3:4f:
7c:cb:1a:71:f3:f1:a9:5a:b9:49:4b:a5:53:6a:a2:d4:0d:f3:
34:a5:ee:9a:24:e7:67:74:03:a6:2a:07:4c:80:0c:35:e8:e4:
07:4b:4e:5c:a7:fd:b9:e7:a9:79:3f:ba:ee:63:c4:49:e3:b8:
e8:91:70:12:75:4c:9e:bf:ef:e7:c0:ef:49:56:55:b8:51:e7:
17:e7:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:53:25 2025 by rpki-client