Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vWkR2ommemciEbtTvGipPteD6Gk.roa
File: vWkR2ommemciEbtTvGipPteD6Gk.roa (raw, json)
Hash identifier: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=
Subject key identifier: BD:69:11:DA:89:A6:7A:67:22:11:BB:53:BC:68:A9:3E:D7:83:E8:69
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F85EF19C978BC4766B60D662D6187
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vWkR2ommemciEbtTvGipPteD6Gk.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 77.47.180.0/22 maxlen: 24
212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:ef:19:c9:78:bc:47:66:b6:0d:66:2d:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd6911da89a67a672211bb53bc68a93ed783e869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:d8:66:1b:6e:46:27:8f:a3:31:ad:05:53:
95:53:db:aa:63:1d:6c:9f:f1:5f:65:45:de:ad:64:
9b:4a:03:57:2d:7e:0a:9d:eb:92:93:66:f9:42:23:
db:30:4d:6f:9f:9e:92:26:b2:30:31:ff:81:16:db:
b7:c6:23:e7:19:73:44:28:09:d8:b6:41:e2:03:58:
5c:bc:ba:4c:c7:63:dc:56:0a:ad:9f:29:df:36:49:
0e:4c:0b:56:35:a7:53:33:d0:73:6f:d2:01:8b:2c:
72:22:6c:de:92:9b:f7:18:28:8b:83:d2:69:d5:eb:
5c:5c:89:48:e4:ea:76:2e:1b:de:f8:a5:72:f5:85:
be:38:e3:ef:ff:3b:ed:05:09:de:4c:31:7d:71:4b:
76:4d:66:3e:4e:96:d1:a1:7f:1f:a7:9a:b0:0c:25:
bf:a1:9f:aa:95:cc:7b:1e:23:10:7f:85:8b:d3:b0:
50:71:79:c7:e7:ce:ce:d9:da:ef:5e:52:1e:3e:18:
35:a7:dc:5c:48:ad:be:fe:5b:be:ab:b0:9f:7a:c4:
15:63:63:bc:3a:c7:91:5a:0a:1e:92:fc:bb:5d:49:
81:8e:fb:7d:94:6f:df:ff:55:13:e4:07:f1:6f:2b:
32:3f:af:ba:f2:5f:eb:32:88:0a:dc:4b:94:c7:3d:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:11:DA:89:A6:7A:67:22:11:BB:53:BC:68:A9:3E:D7:83:E8:69
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vWkR2ommemciEbtTvGipPteD6Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
212.111.211.0/24
212.111.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:b6:9b:67:e7:c0:64:01:5a:1b:e4:ad:78:c8:70:72:f5:99:
4f:db:73:fa:a0:87:0d:65:c6:89:93:cc:08:67:8c:21:64:d7:
9d:dc:7a:9b:59:2a:27:21:7d:ad:a5:21:10:18:0e:23:8a:2d:
9d:a3:ca:6b:96:93:db:b0:59:0c:08:0f:62:31:f2:f6:a0:e1:
1e:31:d7:05:72:42:8e:a6:bd:ca:38:87:87:3d:b8:46:43:83:
f7:3a:7d:5a:e6:8c:48:be:f4:de:48:37:2c:b3:e2:cf:2e:4f:
cc:b6:41:c3:1b:12:f8:25:46:2d:8c:92:e4:b6:21:3d:aa:27:
29:30:a5:bf:6c:c3:31:2b:98:1e:aa:40:fc:e5:3c:2f:94:ad:
b1:3a:cf:d7:d2:7b:66:31:5c:54:f1:85:66:f6:a4:b8:a3:8b:
16:8b:de:8e:0e:3e:5c:5d:c6:61:41:bd:01:25:eb:71:f2:f6:
34:90:6c:51:00:73:c3:c0:3f:cf:7b:54:a4:9b:a4:d0:ce:0d:
35:73:2d:6a:e6:d6:fe:f7:80:1b:bb:af:db:3e:93:9a:d7:12:
04:e6:43:01:54:a0:ee:7d:68:1f:b7:0b:7d:59:b5:fc:b2:c4:
9d:5f:72:f6:ef:08:e5:72:fc:ac:df:81:b5:db:8c:ea:76:3d:
a4:4f:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:46 2025 by rpki-client