Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/co3nvVEl6wZx7dIdeWzG63Ltgm4.roa
File: co3nvVEl6wZx7dIdeWzG63Ltgm4.roa (raw, json)
Hash identifier: 1yIq7JHcvIsWoIhkBPgHr6aI+Jyg6vBbQZURrYKITDA=
Subject key identifier: 72:8D:E7:BD:51:25:EB:06:71:ED:D2:1D:79:6C:C6:EB:72:ED:82:6E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01954D05CD1AD9D1D785EEAB2B77F125DEB1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/co3nvVEl6wZx7dIdeWzG63Ltgm4.roa
Signing time: Fri 28 Feb 2025 14:46:20 +0000
ROA not before: Fri 28 Feb 2025 14:46:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.50.0/23 maxlen: 24
109.61.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:05:cd:1a:d9:d1:d7:85:ee:ab:2b:77:f1:25:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 28 14:46:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=728de7bd5125eb0671edd21d796cc6eb72ed826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:ac:1c:85:f7:83:9e:fa:78:c9:83:4d:fb:
ef:b8:34:6e:07:c4:98:83:36:2e:83:6a:25:ed:ae:
11:61:b7:20:03:f2:49:50:b9:12:17:5b:be:21:8c:
05:95:77:a1:3c:12:f7:c6:59:81:39:c6:84:c4:b0:
33:f2:5f:c7:ec:2a:e2:16:65:81:e1:5e:f8:dc:51:
89:21:e3:c9:89:7b:90:22:3f:a8:66:ed:a3:0f:4d:
0e:e1:12:5f:22:40:e2:5a:77:de:6e:24:36:17:41:
8c:f1:2e:ac:47:35:3a:de:0a:43:16:e7:7d:df:59:
95:31:c7:ca:ad:10:0a:a3:13:26:52:36:f1:db:20:
87:56:3e:10:48:51:9e:da:05:c9:ff:e9:72:cb:78:
c7:90:a8:cb:ea:dc:75:4b:e2:c4:98:82:8c:4b:a2:
38:91:bf:bd:da:5a:01:95:a0:15:f2:8e:65:5a:2e:
a9:63:eb:ab:af:d4:d4:98:38:f1:0e:e6:00:79:3f:
f2:11:25:d9:1e:ba:fb:cf:af:7d:7f:7c:03:19:d9:
84:0e:d4:f7:38:1c:f5:89:74:08:b6:0e:23:8e:e8:
df:0d:df:89:99:be:ae:4f:a4:44:99:ab:e3:10:18:
1a:9c:13:52:c3:03:d9:24:44:c2:4c:15:7a:0d:bd:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:E7:BD:51:25:EB:06:71:ED:D2:1D:79:6C:C6:EB:72:ED:82:6E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/co3nvVEl6wZx7dIdeWzG63Ltgm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
109.61.104.0/22
Signature Algorithm: sha256WithRSAEncryption
37:f3:e5:bd:55:8f:68:d4:9f:be:5c:04:a0:5e:59:51:3b:0b:
9b:a6:f7:83:ae:99:28:73:30:1b:d1:03:10:34:d0:19:51:71:
88:82:ba:ae:63:bd:b3:19:ac:2f:d9:d9:3f:98:8d:c8:bd:f2:
8a:93:fe:3c:00:ab:c4:11:38:04:7e:36:e6:fe:d6:98:58:e6:
ac:3c:0d:99:83:5e:99:64:c3:d3:f3:4b:02:88:3c:44:f1:74:
e1:bc:c2:54:09:54:aa:59:7a:9b:98:1f:17:a9:29:c3:25:3b:
63:37:5a:1c:12:4f:ac:ae:f0:45:90:ee:ca:1e:6c:73:d6:0c:
da:2f:93:ca:0d:94:f4:31:82:94:e5:5c:83:58:c2:d3:d9:12:
1a:28:e7:f4:75:35:8b:ef:65:c6:16:89:62:b1:06:98:d2:fe:
e4:96:be:10:09:ae:d7:46:d6:cb:b7:67:ef:d3:f5:4f:af:ff:
9f:f6:0b:ef:69:ed:43:2b:6c:1e:46:94:09:79:ea:35:75:8a:
c9:02:da:fb:f6:6b:af:a4:45:17:ab:a1:44:53:13:bd:38:3a:
b5:67:0c:60:e8:e4:e3:e2:5b:9f:96:d1:0f:c4:63:06:bd:d4:
e1:82:0d:fe:e6:b4:ef:5c:2f:e2:f4:9e:ab:a1:08:6f:8f:74:
7a:99:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:25 2025 by rpki-client