Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/nCX_yhPujbBh_apYZpeifHIMMPY.roa
File: nCX_yhPujbBh_apYZpeifHIMMPY.roa (raw, json)
Hash identifier: 61/sQ9frCBuR9z3zYvpiLCXXQ6Ivks/85si3NIHk1hs=
Subject key identifier: 9C:25:FF:CA:13:EE:8D:B0:61:FD:AA:58:66:97:A2:7C:72:0C:30:F6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018E51A1D8BF0C5BE1854BB4F8F6F74033FB
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/nCX_yhPujbBh_apYZpeifHIMMPY.roa
Signing time: Mon 18 Mar 2024 12:55:45 +0000
ROA not before: Mon 18 Mar 2024 12:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49902
IP address blocks: 77.137.224.0/19 maxlen: 20
77.143.0.0/16 maxlen: 18
77.143.17.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
213.222.64.0/18 maxlen: 18
213.222.64.0/19 maxlen: 19
213.222.96.0/19 maxlen: 19
213.223.45.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:a1:d8:bf:0c:5b:e1:85:4b:b4:f8:f6:f7:40:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Mar 18 12:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c25ffca13ee8db061fdaa586697a27c720c30f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:7c:53:e8:f6:fb:b9:03:a8:76:a3:33:1b:
15:a7:cb:63:91:5b:ea:33:0d:c8:be:5e:ee:22:3b:
b3:f2:09:17:9f:50:a0:59:84:ce:d3:77:b2:0b:14:
68:5e:ba:8d:8b:cc:2e:b0:65:cc:70:b7:27:cb:dc:
39:1c:ed:b7:3c:58:27:07:48:19:3d:90:a3:be:6f:
4e:d9:26:95:80:ba:9e:c5:73:9f:7a:7a:f8:f6:a3:
41:cd:4a:31:b5:c1:dc:b1:c2:e6:ef:13:d9:65:6c:
da:9f:1b:a8:e3:bd:99:43:2d:0b:03:c3:a6:9e:b4:
b3:24:7e:2b:8b:23:69:b4:4e:bb:f4:82:2f:ae:2f:
c0:95:65:6d:4b:3c:eb:34:23:67:82:cc:20:e5:6e:
4a:32:8d:c7:19:97:e2:04:b9:3c:88:ee:34:11:17:
65:d2:e9:d2:dc:d3:74:cc:83:91:92:4d:44:40:17:
4b:19:ee:20:cd:c2:cb:d5:74:e6:04:90:69:01:c4:
84:59:5b:67:fa:a5:bd:cc:c6:ef:98:12:23:13:63:
6a:8a:55:35:e8:9d:7b:d2:15:cf:e6:34:30:d5:1d:
87:da:25:50:aa:19:e5:fc:62:02:e9:27:28:a2:ea:
39:14:7f:73:3c:06:f2:1e:84:ff:95:1a:96:65:02:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:FF:CA:13:EE:8D:B0:61:FD:AA:58:66:97:A2:7C:72:0C:30:F6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/nCX_yhPujbBh_apYZpeifHIMMPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d0:8b:f0:ff:5b:0f:15:ae:56:11:f8:2a:67:85:31:62:1d:
ec:a9:7c:ba:ab:c5:c1:b5:58:c6:07:61:0c:dc:de:de:ff:dc:
17:59:93:33:44:65:7f:ed:07:0c:3b:bc:f9:f3:b8:1d:e5:43:
64:e3:e4:78:bc:38:14:bb:1a:6d:3b:d2:b9:38:1a:f4:c3:72:
b9:94:47:89:01:07:fb:ff:96:c8:0f:ee:1e:50:74:9d:65:25:
5c:e9:7e:2f:86:b9:12:58:f3:cc:1e:a2:18:d9:98:5a:ca:9c:
d3:02:88:76:2d:54:bb:00:45:7e:75:99:8d:49:87:8e:a2:37:
59:54:4d:6e:34:79:29:0e:39:cb:6d:aa:e9:81:8f:e6:1d:1a:
2a:08:03:15:e6:3b:a2:a1:a9:08:6b:83:99:d3:f3:2d:1b:ed:
51:71:46:6e:d8:fb:dd:f9:af:6e:7a:e5:de:37:0a:f1:98:54:
3a:fa:7f:9c:34:bd:e9:2a:a9:81:77:99:1c:d5:58:10:3c:e3:
59:62:4a:ac:62:87:ed:2d:7b:2b:fc:81:08:f4:cc:5b:41:c5:
88:dd:45:4a:21:61:0b:ec:42:8b:2c:64:11:5a:d4:85:00:d7:
a4:4f:1a:13:a1:f0:44:d5:2b:18:e8:11:3c:42:7c:61:ba:ca:
6a:06:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:10:56 2025 by rpki-client