Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/U0UedjwFm98ns_lAKOOXn5f0A5o.roa
File: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (raw, json)
Hash identifier: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=
Subject key identifier: 53:45:1E:76:3C:05:9B:DF:27:B3:F9:40:28:E3:97:9F:97:F4:03:9A
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CA7255EF5BB4152C802509659314
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/U0UedjwFm98ns_lAKOOXn5f0A5o.roa
Signing time: Thu 02 Jan 2025 17:50:21 +0000
ROA not before: Thu 02 Jan 2025 17:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12849
IP address blocks: 77.137.0.0/17 maxlen: 24
77.137.128.0/18 maxlen: 24
77.137.192.0/22 maxlen: 24
77.138.0.0/15 maxlen: 24
89.237.64.0/18 maxlen: 24
194.242.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ca:72:55:ef:5b:b4:15:2c:80:25:09:65:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53451e763c059bdf27b3f94028e3979f97f4039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:9d:e1:d2:51:c0:c7:28:45:8b:f0:3c:af:
d1:ec:ee:a3:f4:f7:24:82:d8:37:f7:bd:c7:a5:85:
0b:ce:35:c1:f1:7b:27:77:9e:75:34:ac:7a:75:5b:
54:dc:a1:26:92:e3:bb:75:14:b4:0f:e4:6d:6a:22:
58:10:be:69:2f:ee:46:ca:5f:70:68:5f:10:d4:97:
e8:39:e4:0a:c0:56:ff:dc:a7:55:15:fe:bb:c7:09:
df:79:94:82:84:17:b9:d1:3c:04:06:24:d4:e1:8b:
95:34:02:b2:86:4e:5a:61:52:76:22:cb:4e:c0:e1:
3d:43:7e:2a:19:92:51:1b:7f:18:40:3d:97:00:99:
a5:a4:6b:a3:74:a0:74:a7:1f:95:36:14:31:1b:17:
84:ac:14:62:f2:79:a1:fe:2e:98:d7:e9:0e:cd:0a:
9a:5c:ff:9b:fe:0d:b3:9c:33:58:dc:c4:9d:0b:24:
33:d8:b0:32:6c:c8:21:6e:33:2b:12:9e:30:3b:58:
fb:9d:28:dd:45:6e:0c:33:e6:b2:e4:6a:8a:0f:d6:
f7:be:d8:87:99:ee:58:de:98:03:24:7b:81:c2:21:
c3:f5:2c:fb:79:67:e9:21:32:a2:07:39:4b:fd:d0:
db:2b:10:e0:68:7e:e2:2f:e4:c0:53:3b:32:04:ab:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:1E:76:3C:05:9B:DF:27:B3:F9:40:28:E3:97:9F:97:F4:03:9A
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/U0UedjwFm98ns_lAKOOXn5f0A5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.0.0-77.137.195.255
77.138.0.0/15
89.237.64.0/18
194.242.160.0/20
Signature Algorithm: sha256WithRSAEncryption
68:25:19:ed:db:0a:ae:b5:3c:32:73:e2:fc:e4:68:24:60:a1:
d1:2f:71:eb:62:36:ad:71:7f:72:0a:18:66:90:a1:3d:99:32:
36:7b:a2:3b:37:b0:10:e9:57:f5:8c:bd:8b:e0:7c:d8:63:d6:
f3:08:7b:eb:ec:9c:26:2f:82:cf:00:43:db:e4:69:ed:8b:8e:
28:08:f7:1b:eb:99:7b:5d:b9:29:63:79:78:b3:31:92:8f:ea:
dc:e8:53:61:35:c2:43:1e:49:c4:04:10:3e:8f:3a:56:7e:e7:
01:19:9e:61:e3:4a:c2:8c:83:c0:b0:30:81:26:09:ba:5f:3a:
96:c3:fa:7a:ac:89:0b:a5:c9:6f:2e:66:b5:08:96:fb:f6:11:
cc:69:14:a8:a2:88:4e:90:38:6b:6a:18:5d:cd:0f:69:30:65:
f9:94:ae:a6:66:33:eb:52:c4:6e:df:ab:97:b7:21:09:85:1b:
c7:cb:c5:99:69:67:ba:6e:6c:02:cc:a0:36:1a:12:84:30:66:
71:4a:2b:a2:d5:a8:b0:cc:0f:43:3a:66:a8:26:b5:0d:9c:36:
d7:67:4b:85:15:c1:34:8a:57:ea:ad:0e:cc:b6:0b:bc:0b:50:
73:68:c7:5d:b0:07:3f:06:78:c2:54:5a:82:ad:44:9b:13:6e:
18:01:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:32:03 2025 by rpki-client