Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/0gqOLahIac07PQVDnFWbJcOlPdc.roa
File: 0gqOLahIac07PQVDnFWbJcOlPdc.roa (raw, json)
Hash identifier: glrlapAI8gX7iWCU0O/IxnYAJj4C1toO9Id5uLc/U3w=
Subject key identifier: D2:0A:8E:2D:A8:48:69:CD:3B:3D:05:43:9C:55:9B:25:C3:A5:3D:D7
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195C83017FAD5E70078B05282C75A8CA0A4
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/0gqOLahIac07PQVDnFWbJcOlPdc.roa
Signing time: Mon 24 Mar 2025 12:45:49 +0000
ROA not before: Mon 24 Mar 2025 12:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
128.65.168.0/22 maxlen: 24
128.65.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:30:17:fa:d5:e7:00:78:b0:52:82:c7:5a:8c:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Mar 24 12:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d20a8e2da84869cd3b3d05439c559b25c3a53dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:bc:8a:71:b8:1f:ec:60:ad:35:6e:4a:b2:
fe:5e:1d:c2:6b:3d:b9:20:e8:cc:87:b5:d2:4d:12:
22:ff:5e:dc:f0:ac:a3:29:71:fa:af:a0:e1:20:58:
03:46:b7:e0:c0:78:fc:7d:33:73:73:90:c6:94:11:
01:90:2d:b4:7b:a2:22:71:77:5e:52:ef:05:5f:cd:
86:17:c9:cc:97:d6:a5:ec:65:db:35:95:40:ed:56:
7b:12:73:09:0b:77:30:48:b4:47:de:0d:c9:d2:69:
ac:76:b8:79:e5:88:03:cd:9f:05:c7:06:c3:6e:65:
09:a6:f3:8f:f6:fd:7f:df:90:87:7a:7b:63:41:16:
02:1e:14:da:32:a5:26:59:a3:28:0a:be:0b:3a:b7:
3e:56:44:9c:40:26:48:87:ef:30:06:35:a4:c6:25:
65:ce:9e:00:ad:64:46:9f:ac:38:f7:e3:e1:89:3e:
07:07:9c:f4:89:0d:eb:6a:f1:f6:5f:db:ad:ac:e5:
66:20:43:59:8d:ee:2e:75:2d:c7:85:78:86:f0:c4:
f1:7b:49:11:10:22:6c:54:f3:16:c6:42:91:38:a3:
4b:4e:d9:64:2d:12:74:15:77:04:a3:ea:ff:8d:1a:
ae:1b:43:79:26:43:bc:cb:9b:08:87:98:1e:33:91:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:8E:2D:A8:48:69:CD:3B:3D:05:43:9C:55:9B:25:C3:A5:3D:D7
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/0gqOLahIac07PQVDnFWbJcOlPdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
128.65.168.0/21
Signature Algorithm: sha256WithRSAEncryption
21:94:b8:6b:36:cb:f1:e5:bd:84:4d:5f:c6:b8:88:27:b4:66:
94:73:ea:03:85:cb:54:44:f3:78:9e:e4:b9:ec:18:32:9e:3b:
91:a4:fa:c6:3a:03:b1:f8:60:75:67:74:20:53:6b:d7:cf:bb:
6e:19:4d:ae:98:49:bf:55:b9:d5:65:a0:e9:9a:8c:76:b6:c6:
a5:89:38:82:8e:78:05:d2:28:92:11:0d:ec:af:99:62:64:82:
d5:ba:bb:eb:24:c4:b3:89:54:4a:dc:30:2e:68:82:ab:a6:e1:
09:e9:59:26:12:45:10:c7:2b:3e:27:c1:bf:69:a3:00:c2:c2:
56:c4:1d:44:9e:3d:87:5d:98:1c:05:5a:fb:e1:4f:bd:54:6f:
70:ef:6c:c3:ee:10:27:59:3b:3c:09:43:a2:f2:e1:22:25:a7:
ae:39:b1:4b:46:20:cc:f8:72:f4:a2:c0:0c:ce:97:2b:69:90:
34:47:04:a9:47:20:9a:d0:5d:de:6c:ef:7c:08:31:49:0d:19:
ab:c1:69:fc:a1:2e:ab:98:89:6d:1a:e8:6f:32:2f:3b:b1:51:
30:a9:e9:a7:58:80:97:e7:c3:2e:7f:da:68:68:3a:60:2c:ff:
c2:7e:49:25:aa:6f:98:26:a0:39:dd:ee:bf:50:bd:49:d7:da:
cf:5e:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:34 2025 by rpki-client