Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/skLLx7UGDyrHNQi63GwJ04G060M.roa
File: skLLx7UGDyrHNQi63GwJ04G060M.roa (raw, json)
Hash identifier: dhojEQNV6mGE7W2VqEAmDTSlm6L91HDC2Lcfsg/ItOw=
Subject key identifier: B2:42:CB:C7:B5:06:0F:2A:C7:35:08:BA:DC:6C:09:D3:81:B4:EB:43
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195B97F1C3EEE6BDBC1E52F073C511B0846
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/skLLx7UGDyrHNQi63GwJ04G060M.roa
Signing time: Fri 21 Mar 2025 16:17:49 +0000
ROA not before: Fri 21 Mar 2025 16:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:7f:1c:3e:ee:6b:db:c1:e5:2f:07:3c:51:1b:08:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 21 16:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b242cbc7b5060f2ac73508badc6c09d381b4eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:b3:56:9f:25:d3:ee:33:05:58:ec:f4:2a:
67:15:18:ee:60:48:81:6f:87:eb:ed:25:84:0d:c0:
91:b6:4c:68:15:e5:9f:a2:6b:bc:9c:67:e4:eb:a2:
11:35:89:1b:68:16:48:65:e4:20:09:bd:ce:7b:38:
f3:41:fa:f7:57:9f:4a:c8:b7:f8:f3:66:2d:33:76:
3d:4a:b7:a0:82:a0:5e:da:b1:c6:c7:4a:c7:25:94:
f4:0d:48:48:a5:8b:e4:11:f3:3a:a7:08:a0:18:b4:
0d:3b:2b:73:54:87:b4:fd:51:50:21:bb:29:cf:da:
d7:75:8b:81:8d:f8:f8:03:f6:86:bf:81:f6:8c:9b:
15:9a:41:4e:07:ba:cc:e7:17:c6:c5:bd:d8:b7:88:
ca:5b:42:f2:f1:24:e4:cc:67:66:8f:a5:50:6e:e9:
b8:8a:04:5d:df:6c:d5:69:fb:d6:51:c6:a9:0b:0d:
d3:2d:a0:17:43:ed:a9:1a:8d:8b:85:70:95:7f:bc:
b4:69:e2:56:94:e2:a0:23:bb:fb:c8:24:7d:65:56:
1e:ae:25:bf:69:f8:32:05:d2:7d:ab:b0:ce:5b:a6:
5c:8d:48:62:f4:b5:de:ad:10:52:9d:6c:ef:7d:4e:
3c:11:85:12:32:10:7c:78:11:5f:46:ab:59:ad:4a:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:CB:C7:B5:06:0F:2A:C7:35:08:BA:DC:6C:09:D3:81:B4:EB:43
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/skLLx7UGDyrHNQi63GwJ04G060M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
195.178.140.0/23
195.178.146.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1e:36:dd:04:4d:c2:b2:c3:6e:08:5e:d4:c5:2c:05:0e:54:
0e:6a:36:36:24:13:eb:34:57:fa:5d:e2:f1:3b:14:7f:0b:67:
d9:0c:aa:fc:8a:4f:d1:ba:3f:41:52:d2:e0:42:67:5e:d1:52:
50:54:02:3f:f9:90:38:fd:a9:b8:1f:34:8e:9f:83:e6:22:bd:
eb:0e:ea:3e:4e:0b:90:b4:35:61:b0:cc:74:ee:78:cb:f7:ff:
54:2a:3e:4c:ec:f9:3d:3c:8d:da:f1:0d:ab:58:8e:24:c1:6b:
a7:2a:ad:13:03:15:6b:0b:d3:60:d7:bf:35:7d:fd:cf:cd:55:
62:e4:ee:d7:83:2a:ec:cb:07:36:d0:af:b9:33:bb:ed:fc:2f:
70:28:fd:9b:a4:ee:17:d1:73:5c:b9:14:2f:23:8c:51:08:91:
bd:9d:c5:f0:3c:e1:14:b3:32:f6:b5:a2:bd:32:6a:50:36:19:
79:ed:f8:35:19:ee:ab:15:bc:f1:25:ba:73:09:46:4a:db:d4:
21:81:5e:d6:c7:5e:89:d0:76:d2:62:74:fe:17:d8:01:99:49:
04:57:d6:57:87:3d:6e:1a:37:39:ba:5a:78:d7:bd:a3:e3:6c:
5f:c5:a7:dc:ac:52:45:ba:74:d3:ff:0e:f9:90:1a:60:14:bf:
4a:c7:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:24 2025 by rpki-client