Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/j_UALKYJ-ID6RleHiBKadB9SmSU.roa
File: j_UALKYJ-ID6RleHiBKadB9SmSU.roa (raw, json)
Hash identifier: ySsm8AkEvndEL8TW/hwiYWhqSkt2kz2Iy9T3rJRGBdI=
Subject key identifier: 8F:F5:00:2C:A6:09:F8:80:FA:46:57:87:88:12:9A:74:1F:52:99:25
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266C006290D466CB4E650CDC1EBCADBD
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/j_UALKYJ-ID6RleHiBKadB9SmSU.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210959
IP address blocks: 77.65.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:00:62:90:d4:66:cb:4e:65:0c:dc:1e:bc:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff5002ca609f880fa46578788129a741f529925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:bc:d1:ce:b5:0d:6b:97:98:ec:ec:80:57:
1d:5b:0f:5d:45:aa:80:57:d1:76:86:7f:56:de:fb:
52:4c:ae:fb:86:7b:69:bb:bd:3a:71:7a:3a:fa:73:
88:79:96:0b:14:46:38:ba:a2:e0:da:3e:6b:95:f2:
7f:22:7a:88:af:f1:52:69:61:c9:a4:26:ac:57:03:
f3:ee:e6:ad:97:19:c1:ba:cf:f8:e2:ce:94:8f:e8:
79:7e:19:b3:32:80:cb:1e:21:72:ca:55:2f:49:be:
62:10:85:7d:bc:40:f3:65:84:6c:2d:e8:68:d1:8f:
56:63:c0:76:3c:3e:06:13:65:61:af:25:a3:c8:71:
2b:0e:f1:a8:b7:66:39:80:64:de:3b:52:d9:d8:8e:
49:79:49:31:74:69:36:fa:56:ee:c7:25:72:b8:96:
01:42:33:89:6f:00:3f:29:94:9e:f7:39:50:d9:75:
af:17:5a:90:74:73:20:0b:86:e1:2a:f2:89:96:64:
50:66:50:9b:8a:c6:f5:fa:74:4a:d7:75:c9:f0:30:
49:f0:d5:1d:4b:d3:e1:5b:fe:5b:46:bc:85:fd:6c:
de:4a:7f:7d:ba:2c:d3:d1:be:b0:6c:13:9f:22:06:
9d:dc:a5:94:4a:12:d9:b3:01:50:e3:09:90:25:e5:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:00:2C:A6:09:F8:80:FA:46:57:87:88:12:9A:74:1F:52:99:25
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/j_UALKYJ-ID6RleHiBKadB9SmSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.206.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a6:fc:10:40:d0:ac:26:40:1c:d2:37:78:2e:83:e4:2f:30:
da:24:c7:b4:ab:35:6d:4d:7c:94:29:46:30:84:15:83:3f:a0:
af:ba:3e:f1:53:9e:15:bb:13:1f:6e:1f:96:b3:1d:7d:2e:5c:
12:2b:34:84:0e:b6:70:ea:7d:d3:fa:bf:1a:bf:e9:4d:02:d8:
48:cc:97:20:03:bb:ba:68:08:bd:f3:3f:c6:6b:12:21:dc:cf:
89:87:1f:c8:af:5d:ad:89:d5:dc:ee:4a:d1:25:51:c4:55:49:
3b:d5:da:c9:de:21:33:19:f3:ef:db:05:05:ea:77:2c:b5:48:
ae:16:16:eb:e6:fa:4f:90:4e:1a:ac:56:6e:44:70:d8:f4:e2:
25:07:97:5b:40:8b:c7:a6:76:10:0a:a5:d4:f2:b4:2e:26:82:
ae:14:e9:89:fc:e9:86:59:f4:39:22:a5:7f:8f:b2:8c:44:72:
e4:e8:c9:de:c7:06:09:8d:c5:38:a1:53:9e:27:94:d6:20:e7:
f0:f0:a5:b7:0e:03:cb:b4:1e:6b:6e:ac:14:6d:61:c7:a9:c0:
79:1f:d5:42:34:61:5f:7b:25:42:f8:e2:e4:3e:46:50:73:29:
3d:20:f3:d6:c8:0d:08:43:56:50:64:c7:f1:ff:96:e3:e5:40:
e7:09:5e:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbABikNRmy05lDNwevK29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY1MDAyY2E2MDlmODgwZmE0NjU3ODc4ODEyOWE3NDFmNTI5OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QS80c61DWuXmOzsgFcdWw9dRaqA
V9F2hn9W3vtSTK77hntpu706cXo6+nOIeZYLFEY4uqLg2j5rlfJ/InqIr/FSaWHJ
pCasVwPz7uatlxnBus/44s6Uj+h5fhmzMoDLHiFyylUvSb5iEIV9vEDzZYRsLeho
0Y9WY8B2PD4GE2VhryWjyHErDvGot2Y5gGTeO1LZ2I5JeUkxdGk2+lbuxyVyuJYB
QjOJbwA/KZSe9zlQ2XWvF1qQdHMgC4bhKvKJlmRQZlCbisb1+nRK13XJ8DBJ8NUd
S9PhW/5bRryF/WzeSn99uizT0b6wbBOfIgad3KWUShLZswFQ4wmQJeUzRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/1ACymCfiA+kZXh4gSmnQfUpklMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEval9VQUxLWUotSUQ2UmxlSGlCS2FkQjlTbVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTUHOMA0G
CSqGSIb3DQEBCwUAA4IBAQBBpvwQQNCsJkAc0jd4LoPkLzDaJMe0qzVtTXyUKUYw
hBWDP6Cvuj7xU54VuxMfbh+Wsx19LlwSKzSEDrZw6n3T+r8av+lNAthIzJcgA7u6
aAi98z/GaxIh3M+Jhx/Ir12tidXc7krRJVHEVUk71drJ3iEzGfPv2wUF6ncstUiu
Fhbr5vpPkE4arFZuRHDY9OIlB5dbQIvHpnYQCqXU8rQuJoKuFOmJ/OmGWfQ5IqV/
j7KMRHLk6MnexwYJjcU4oVOeJ5TWIOfw8KW3DgPLtB5rbqwUbWHHqcB5H9VCNGFf
eyVC+OLkPkZQcyk9IPPWyA0IQ1ZQZMfx/5bj5UDnCV5B
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:23 2025 by rpki-client