Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/b5nAqkkbKBuuBF130kEHNP2qdVo.roa
File: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (raw, json)
Hash identifier: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=
Subject key identifier: 6F:99:C0:AA:49:1B:28:1B:AE:04:5D:77:D2:41:07:34:FD:AA:75:5A
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0194266BB402A5A65A3AF600CC95F001E92B
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/b5nAqkkbKBuuBF130kEHNP2qdVo.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48806
IP address blocks: 37.77.57.0/24 maxlen: 24
37.77.61.0/24 maxlen: 24
37.77.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b4:02:a5:a6:5a:3a:f6:00:cc:95:f0:01:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f99c0aa491b281bae045d77d2410734fdaa755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:92:f3:31:7b:62:28:6c:b2:53:97:c0:1f:
2c:67:3c:b3:02:89:f2:86:4e:a2:10:ef:e5:2a:34:
12:3e:27:bf:87:df:ab:1d:15:7c:69:c4:c6:56:87:
4a:f4:37:6d:cb:02:33:49:fb:24:4b:ec:a5:fa:8a:
7f:cb:60:ae:62:02:c9:8c:c3:39:6c:97:ea:47:b6:
7b:2c:89:1a:93:cb:1e:f1:b5:88:2c:3b:fd:4f:af:
86:0a:25:ae:4d:d9:90:29:26:62:dd:f2:f3:da:a2:
2c:84:29:d7:f4:71:bc:68:bf:55:ee:e0:56:fa:33:
cf:3e:79:2a:c6:fe:dd:64:a8:f9:de:f1:9d:e4:7e:
97:7b:bd:63:da:9e:7c:e5:67:e7:fe:59:0f:e0:e8:
59:0d:4d:ab:a0:58:de:f2:32:bf:1a:41:09:75:10:
9b:c3:f0:11:62:46:08:b4:d5:61:f4:2c:c7:66:fc:
92:f4:47:f2:cc:da:9e:6f:5f:96:ec:0c:85:1f:31:
64:ce:3b:97:0f:33:ce:d5:ca:2d:72:98:37:fe:a4:
4d:80:02:b7:e5:86:88:d6:d6:af:51:e6:2c:f6:66:
01:8a:40:a2:a8:0d:06:08:fe:eb:2b:3c:f6:cf:6c:
57:cf:6c:28:a8:11:9b:5d:2c:97:f0:2c:48:c8:ca:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:C0:AA:49:1B:28:1B:AE:04:5D:77:D2:41:07:34:FD:AA:75:5A
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/b5nAqkkbKBuuBF130kEHNP2qdVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.57.0/24
37.77.61.0/24
37.77.63.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:2a:1b:fd:bf:0e:59:1a:cb:2d:7e:7d:62:15:4d:c3:12:eb:
96:1b:a3:14:c1:6f:f5:35:1d:56:61:98:35:d0:cc:d1:6a:2c:
08:94:3d:88:b4:6d:d0:e7:3c:e2:5a:dd:df:cd:70:0a:14:27:
28:c3:75:c1:e5:0f:bb:7b:09:25:12:ea:48:82:dd:fc:b9:0c:
fd:25:12:e8:bc:37:07:0e:15:64:af:99:87:63:66:7f:75:03:
b8:b3:1c:ab:74:2b:56:60:86:82:11:60:25:6d:ea:e7:b4:27:
4d:db:7f:ce:b6:48:0d:05:2f:e2:89:36:16:89:8d:c6:6f:ae:
0a:86:a6:99:f6:26:d0:36:4d:9a:80:40:bf:f7:2a:e4:a5:56:
ce:a4:54:ec:c1:ad:c5:6e:a0:7a:cb:9a:da:e1:24:5b:68:1e:
63:7c:5c:38:f6:ec:21:2d:64:f5:5c:c3:69:12:88:70:ca:72:
fd:95:1f:a3:2b:00:a3:34:b3:0c:c8:93:fd:2c:7e:f7:87:19:
98:cb:95:45:7c:92:d4:be:ee:55:db:2e:fa:d9:bc:83:ed:92:
94:9c:b5:54:71:93:a8:f8:d8:fe:a3:05:7e:d5:d4:e0:9a:6d:
14:85:ea:80:b4:f3:c6:89:a5:a4:59:e6:e4:78:e3:74:3a:55:
80:27:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:23 2025 by rpki-client