Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/j7u9CSFurMdq2SMTWp35RpHD5iU.roa
File: j7u9CSFurMdq2SMTWp35RpHD5iU.roa (raw, json)
Hash identifier: +AEep/rA/kcr031w+b12zBS5q0rt6tQdssEwL6QG+88=
Subject key identifier: 8F:BB:BD:09:21:6E:AC:C7:6A:D9:23:13:5A:9D:F9:46:91:C3:E6:25
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0193B03DD560FD169593E4FE40E715B0FAD9
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/j7u9CSFurMdq2SMTWp35RpHD5iU.roa
Signing time: Tue 10 Dec 2024 11:04:22 +0000
ROA not before: Tue 10 Dec 2024 11:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39235
IP address blocks: 77.95.192.0/21 maxlen: 21
80.251.240.0/20 maxlen: 20
185.157.240.0/22 maxlen: 22
2a03:a820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:3d:d5:60:fd:16:95:93:e4:fe:40:e7:15:b0:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Dec 10 11:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbbbd09216eacc76ad923135a9df94691c3e625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:f2:24:f8:b9:4d:71:05:27:ba:b7:8b:35:
d5:d3:2e:4f:9c:d6:12:d9:8e:25:53:22:54:bb:a7:
e7:90:ac:35:17:1e:2f:5a:cd:20:64:2a:cb:46:3c:
a9:06:7a:5a:fe:e4:3a:65:0b:70:b0:44:25:9b:8d:
27:a4:55:70:c4:00:c9:e4:bd:3c:bf:f0:58:c9:da:
59:a3:a0:4f:f4:aa:a3:f8:04:60:f0:3b:5a:61:9f:
88:1e:48:90:4a:29:c1:2a:49:bb:3a:7d:93:ae:b0:
b8:ef:e5:aa:e5:d2:24:64:e8:08:1f:89:bc:b3:ec:
67:bf:0a:6e:00:ad:d0:0b:4c:3d:61:fe:64:4f:dc:
e5:f0:27:29:0d:13:10:ad:9b:e0:b8:cc:b2:05:90:
6c:e8:04:45:6d:a7:e7:b9:eb:e3:e6:83:98:32:e4:
d3:b9:ad:8f:d1:b7:a4:89:e7:b5:12:07:09:1f:5d:
ac:71:25:ef:95:49:1a:f1:ef:d2:34:a1:5a:f0:82:
d8:8e:24:1d:d6:68:2e:39:53:d1:5e:8a:4e:39:b1:
30:6f:22:df:03:f3:b9:47:06:76:42:0f:18:4f:c1:
62:72:13:17:23:81:08:21:fd:d6:34:65:76:d4:d1:
c9:82:b8:f9:67:77:8d:f0:3d:5a:a0:7a:4f:2f:ce:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:BD:09:21:6E:AC:C7:6A:D9:23:13:5A:9D:F9:46:91:C3:E6:25
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/j7u9CSFurMdq2SMTWp35RpHD5iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.192.0/21
80.251.240.0/20
185.157.240.0/22
IPv6:
2a03:a820::/32
Signature Algorithm: sha256WithRSAEncryption
b4:7f:3c:83:0b:62:0e:a5:71:f8:8d:bb:da:bb:4c:40:16:b8:
a4:da:82:80:11:9a:72:6b:3d:6b:96:69:bd:f5:e0:81:33:c1:
71:a5:ea:8b:4f:53:56:23:c0:c2:2b:8e:15:31:0b:8a:b0:5b:
c3:c7:00:7b:32:d3:39:ed:28:95:d7:ec:72:72:f9:66:1a:ed:
c7:66:71:b2:d9:a8:62:43:b7:e1:72:cb:79:48:16:54:f0:61:
16:76:2d:b0:04:46:24:8e:08:a3:37:5a:87:3a:e9:8d:b4:08:
b5:75:db:9b:1e:e9:9b:bb:83:84:89:2a:8c:89:d6:19:2c:a1:
5e:f5:3f:c1:8e:a2:09:0b:d2:2e:ee:a4:60:3e:b4:87:3b:e0:
4f:8f:70:a8:53:34:92:ad:56:dc:6e:b3:5c:29:97:43:41:3e:
1f:3f:5d:98:fb:1f:ef:28:a0:04:39:f3:92:cb:ff:51:8d:de:
ea:c0:c3:a8:84:9f:14:5a:08:78:e9:46:fa:59:e7:9a:a7:f5:
48:ae:da:77:9a:bf:e5:95:86:27:99:54:57:16:81:bf:55:8e:
f9:51:3d:be:fd:c4:e3:5f:b2:2b:a0:46:a0:23:42:6f:47:7d:
a0:e6:32:95:b4:95:93:af:6d:39:59:20:6e:95:0a:07:e7:2d:
f5:64:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:08 2025 by rpki-client