Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ljzV0z5aUwEwlNY2NFDYxe9sRpo.roa
File: ljzV0z5aUwEwlNY2NFDYxe9sRpo.roa (raw, json)
Hash identifier: QWA5p7MTHAwQyevcVXqFqA7tGNnnH1I1V+oF1Ee4hOA=
Subject key identifier: 96:3C:D5:D3:3E:5A:53:01:30:94:D6:36:34:50:D8:C5:EF:6C:46:9A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195B97F1B602E0125DBA0173E901DB53871
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ljzV0z5aUwEwlNY2NFDYxe9sRpo.roa
Signing time: Fri 21 Mar 2025 16:17:49 +0000
ROA not before: Fri 21 Mar 2025 16:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.47.156.0/22 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:7f:1b:60:2e:01:25:db:a0:17:3e:90:1d:b5:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 21 16:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=963cd5d33e5a53013094d6363450d8c5ef6c469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:3f:d3:cb:f9:53:9f:ad:1f:41:a8:51:b3:
e6:07:9f:08:ce:85:46:df:0e:a9:30:46:90:7b:69:
1c:72:ff:67:27:68:fa:55:ba:ea:cb:3b:34:ff:bf:
7e:86:33:04:b8:15:03:32:a3:1d:35:8c:68:f5:40:
21:d8:ff:c6:74:b8:3e:25:bb:80:17:9f:56:9c:f4:
a6:bf:f1:83:4e:6e:63:cb:d3:d8:24:87:ab:70:b3:
01:71:70:79:93:9a:0d:47:2b:99:e5:d3:03:29:fd:
ec:f6:de:ab:0c:8c:30:71:a1:d1:de:fb:16:d1:77:
f0:7a:26:b0:2f:1d:76:bb:fa:b2:bf:bc:64:28:08:
dd:87:f0:86:14:14:df:e0:c2:07:94:e5:86:64:19:
1e:94:7b:12:8c:91:e0:f8:84:f5:33:f0:75:8e:6e:
2e:e5:57:be:7b:25:1f:29:e2:f5:d0:36:c8:48:cc:
16:30:7d:3e:67:ed:78:06:4a:24:7f:da:c2:6f:bb:
4a:fb:11:fb:0d:5d:b5:86:5e:c4:b7:5f:14:fd:7d:
7e:63:6a:e5:99:34:58:7f:a2:85:3a:41:ef:3e:de:
13:81:24:f2:d8:c6:bc:bb:3c:15:15:ce:dd:2b:e3:
80:42:82:fe:8c:41:64:b2:1f:b0:48:3e:e6:b4:0a:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:D5:D3:3E:5A:53:01:30:94:D6:36:34:50:D8:C5:EF:6C:46:9A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ljzV0z5aUwEwlNY2NFDYxe9sRpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/22
77.47.243.0-77.47.247.255
195.178.140.0/23
195.178.146.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
81:c9:ce:b8:49:99:e2:e1:5b:51:d0:12:41:0f:1e:de:64:72:
4e:85:b0:6d:2f:bc:0c:c9:83:54:60:39:93:db:fc:4c:8b:2a:
8f:cf:7b:be:a3:7d:ed:63:3c:4f:2c:4c:2f:e8:0f:36:8b:be:
9f:a0:02:7b:6d:37:7b:29:9e:8c:c5:32:a7:5a:1d:62:e6:2f:
bf:8b:91:3f:2f:57:1b:01:69:ed:bf:51:27:aa:bd:37:dc:ae:
96:eb:ea:b7:c7:b5:04:7b:1f:cb:e3:bf:11:87:db:4a:34:f5:
f0:07:ab:c3:e6:96:0d:fc:96:86:1d:63:ac:a1:3b:e6:32:19:
83:59:91:c3:0f:0e:3d:af:14:f9:45:c6:d0:4e:f3:12:0d:a2:
1d:49:66:01:d9:0b:72:72:1a:86:2d:45:cc:b0:6c:68:ca:77:
69:d5:da:98:d9:70:50:17:b8:f4:dd:18:6e:4c:61:f6:c2:fa:
9b:ae:96:78:c7:3d:b7:cd:c4:43:3b:5b:e6:e6:ea:3f:51:0c:
d3:45:df:2f:8d:c3:9c:c4:e3:c0:5e:59:ef:ef:e0:d3:3a:a0:
ae:c4:61:e4:2b:c4:4d:e9:bc:60:bc:5d:ff:6b:e6:d9:dd:3e:
fa:03:fe:2c:fa:ae:6d:fa:0b:2e:c6:b1:18:2c:29:44:ad:c2:
24:0d:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:08 2025 by rpki-client