Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/5wJESiDMAZmj-ilD4vzwMI5_ssg.roa
File: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (raw, json)
Hash identifier: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=
Subject key identifier: E7:02:44:4A:20:CC:01:99:A3:FA:29:43:E2:FC:F0:30:8E:7F:B2:C8
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 0194228D6C2D552467626D47536A94AA0224
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/5wJESiDMAZmj-ilD4vzwMI5_ssg.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197248
IP address blocks: 77.221.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6c:2d:55:24:67:62:6d:47:53:6a:94:aa:02:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e702444a20cc0199a3fa2943e2fcf0308e7fb2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:87:3c:bc:e0:0d:b4:1c:76:1c:5b:ee:4f:
d5:1c:8f:8b:37:49:65:44:f6:91:59:38:45:a8:25:
d9:e2:e9:c0:c6:a5:2b:9d:4e:46:e0:c3:b7:49:03:
2c:6e:11:9a:04:24:18:0a:28:cf:55:5f:e1:c7:8c:
15:84:97:99:49:c1:9c:27:8c:d0:96:4c:ee:99:13:
4f:e3:70:09:e8:99:c0:f6:d9:00:31:7f:ac:04:32:
0e:1d:45:86:67:6e:1a:8b:1f:4e:55:9c:79:0e:1e:
ca:78:1f:8f:74:ba:9b:f0:bc:29:b3:1e:07:2c:5b:
c6:74:f5:c2:c2:8f:8a:eb:0d:5a:67:15:69:2e:5a:
06:0f:94:73:6d:85:4c:6c:3e:d4:8b:c0:82:7f:3c:
9a:2a:c6:08:2f:cd:58:41:49:fa:c9:5b:a0:35:02:
f0:28:d2:a8:c4:72:6b:a6:28:f8:bd:8b:be:da:b9:
a0:5b:3f:44:91:2e:73:61:ff:07:ab:fb:7f:af:24:
37:de:99:14:a9:e8:49:f7:df:31:09:27:bc:49:80:
47:50:0d:7e:95:39:c5:47:13:41:0e:86:1c:51:65:
c6:a5:3e:dd:ac:90:f0:a4:09:0d:b9:59:01:a7:5f:
fb:f1:91:40:66:fe:66:ca:cf:26:c5:c7:cd:31:49:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:44:4A:20:CC:01:99:A3:FA:29:43:E2:FC:F0:30:8E:7F:B2:C8
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/5wJESiDMAZmj-ilD4vzwMI5_ssg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a1:f4:78:cc:73:75:a4:1f:31:c8:71:0c:76:41:67:d9:63:
d6:b6:52:49:93:e6:00:9a:0e:c7:ef:58:79:a0:e9:5f:28:a0:
a3:76:ac:ab:c4:49:12:cf:35:0d:03:33:09:53:cb:48:48:31:
aa:12:df:d6:3b:cf:26:de:62:56:a3:20:e7:44:fb:0a:a1:4e:
48:ce:ce:39:7f:8a:62:e8:98:e9:a7:17:89:9e:95:f1:0e:7c:
5b:92:59:e9:12:af:5d:b0:37:c5:a0:33:0c:a4:0e:22:be:fb:
04:0f:77:9a:cf:c7:ca:29:3b:db:91:bd:09:fe:35:3f:a1:b1:
e9:23:73:30:1e:48:23:6f:32:56:c0:65:cf:e0:48:33:22:34:
10:54:51:da:74:ae:3e:7b:2a:18:c6:c3:d2:89:5f:ce:85:71:
8f:60:c6:05:da:e8:a4:d2:78:65:06:c9:34:b3:9e:fa:74:42:
b5:ba:9b:6e:c5:d0:11:4a:d4:ea:f2:9d:92:37:4f:85:54:71:
5c:f0:f3:ba:4e:11:e1:d1:27:ec:8f:74:2e:30:e3:54:02:5c:
d9:44:09:04:1d:3e:91:34:3f:54:e8:73:d9:14:cd:88:d7:56:
ab:3d:47:00:99:e0:fe:e4:ec:c4:ec:25:59:e6:65:06:77:2a:
82:42:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:41 2025 by rpki-client