Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OPm3n1Lj7GWTWQrxp02-Ntkl_qA.roa
File: OPm3n1Lj7GWTWQrxp02-Ntkl_qA.roa (raw, json)
Hash identifier: gobgAVPmfnRq3A+9352CizhdeHP3DGLaeEiBJjIsuFM=
Subject key identifier: 38:F9:B7:9F:52:E3:EC:65:93:59:0A:F1:A7:4D:BE:36:D9:25:FE:A0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF311F1EF88D20DA5E1CC2739D69E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OPm3n1Lj7GWTWQrxp02-Ntkl_qA.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205708
IP address blocks: 77.65.141.0/24 maxlen: 24
193.192.160.0/24 maxlen: 24
193.192.161.0/24 maxlen: 24
193.192.162.0/24 maxlen: 24
193.192.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:11:f1:ef:88:d2:0d:a5:e1:cc:27:39:d6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38f9b79f52e3ec6593590af1a74dbe36d925fea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:42:ce:57:67:1c:f9:3d:7e:12:36:04:e3:
e4:33:d4:20:33:14:e6:bc:49:30:6a:bc:54:c4:3b:
05:ae:79:73:1c:0b:38:fc:1a:6a:f7:b4:2f:0c:7e:
83:1f:a3:5e:26:ff:45:c6:bf:60:b2:01:9f:4d:71:
ad:ef:eb:95:96:76:e0:c4:fb:35:73:a3:7f:ef:77:
aa:dc:24:90:81:1e:46:c7:19:66:b0:f2:a6:42:e1:
1b:ed:cf:e8:f3:a3:83:76:56:a9:24:1c:f7:58:08:
25:94:5b:61:51:7d:04:d5:c1:c6:08:ea:c2:96:c3:
21:3f:94:2f:38:27:01:0e:05:ce:b7:58:22:ad:90:
7e:b4:62:ee:90:5a:b0:70:ff:b6:fd:da:19:21:76:
0c:ed:e6:94:da:55:41:eb:70:81:1c:97:1e:ed:74:
f8:cf:68:1e:e1:e2:f5:2c:ea:3a:10:e5:96:fe:ec:
63:3e:00:59:84:f7:d1:39:77:98:b9:05:52:e5:47:
aa:03:c5:6f:34:09:ba:5a:c6:a0:60:94:bf:12:13:
84:87:9d:b9:0c:63:b6:35:47:46:7e:6c:42:de:4c:
64:59:0e:6c:8b:6d:35:7b:2f:b1:82:5e:be:d8:88:
00:4d:ae:8f:b2:00:8d:c0:de:95:3c:1f:1d:08:ab:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:B7:9F:52:E3:EC:65:93:59:0A:F1:A7:4D:BE:36:D9:25:FE:A0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/OPm3n1Lj7GWTWQrxp02-Ntkl_qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.141.0/24
193.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:0c:ec:53:58:03:4a:17:86:eb:ab:ab:44:41:96:cf:bf:0b:
65:9c:0a:84:d8:b1:1f:0c:fe:11:c1:09:1b:e5:e9:ef:29:9f:
fa:79:a2:c6:3c:69:5a:b9:87:b0:54:aa:37:6e:ca:17:ff:f9:
d5:aa:a3:16:e2:f9:20:9e:cb:27:01:ec:0f:10:5e:8e:51:12:
88:12:1b:37:c0:2d:65:5b:64:8e:e9:6b:f2:6d:ad:ab:29:1b:
41:ae:e1:05:17:c8:5b:61:9a:32:51:90:7d:42:56:5c:d6:be:
af:d3:29:31:f2:a3:05:d2:cf:42:19:2d:6c:70:0b:0c:5a:90:
6c:68:77:de:59:43:32:11:5c:58:20:d3:2e:71:1d:79:e6:24:
fc:a8:40:b7:ff:34:a7:a9:1d:43:9f:66:7e:97:94:ba:fd:d7:
54:94:3a:7f:11:89:86:6d:c0:ca:29:94:99:7f:05:77:d9:b7:
02:91:95:53:c2:e2:89:31:4a:1e:b6:43:74:28:fa:4d:63:e9:
96:cf:7c:70:26:d3:59:f3:1e:ac:ed:92:6c:de:3f:34:ad:3d:
3a:2d:90:58:9b:bc:95:a1:93:1f:67:5d:78:22:17:77:a7:13:
3b:0c:b6:22:1d:de:4a:c6:ee:9b:bb:4b:ad:c2:d8:6e:76:50:
22:82:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:02 2025 by rpki-client