Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/OJBXn8ahus4CYQ_JBZWoAwm0fBM.roa
File: OJBXn8ahus4CYQ_JBZWoAwm0fBM.roa (raw, json)
Hash identifier: KrBhnzstVYlNMNAmj1xSZZ7wijvP42WUpSfzyqSTpHE=
Subject key identifier: 38:90:57:9F:C6:A1:BA:CE:02:61:0F:C9:05:95:A8:03:09:B4:7C:13
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193FBCDF5EC5EE0CBEEAB493665358233A3
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/OJBXn8ahus4CYQ_JBZWoAwm0fBM.roa
Signing time: Wed 25 Dec 2024 03:13:19 +0000
ROA not before: Wed 25 Dec 2024 03:13:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 23
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:cd:f5:ec:5e:e0:cb:ee:ab:49:36:65:35:82:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 25 03:13:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3890579fc6a1bace02610fc90595a80309b47c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:e0:81:88:40:51:77:e4:93:07:a5:80:70:
b6:0d:76:9c:f1:ae:a8:fc:ec:e3:3b:90:fd:0d:c6:
ca:a6:1c:2c:0b:90:b3:d0:8d:24:a5:14:44:61:47:
f2:bd:34:78:39:02:86:79:e2:cf:59:f4:87:ad:47:
20:a5:d2:7c:b1:10:48:42:13:2a:5f:a2:05:a2:60:
98:5a:b5:a9:c1:11:d7:66:5a:cc:f5:5f:95:31:52:
66:94:ec:ea:c4:46:b8:fc:dc:0c:23:05:6c:a9:05:
15:84:cb:26:f3:3d:79:ac:c1:b1:c0:ba:8d:8d:9c:
a3:65:6a:f2:c6:86:2c:2e:2e:26:d5:d8:cb:36:2b:
f6:9b:2e:62:30:86:4c:de:7d:82:57:95:eb:b7:7b:
d4:8d:f3:11:67:33:6d:fc:00:72:a2:bb:f6:c3:9f:
46:14:a5:4b:1b:41:11:f9:53:7b:83:5d:39:de:98:
e8:77:87:89:a1:f3:19:60:3c:62:0e:0e:4f:a2:23:
a2:d3:d0:f8:06:2a:e4:78:a2:25:7d:89:ef:cf:3b:
d2:42:f7:fd:05:73:f1:85:07:46:4a:68:16:3b:2a:
f8:61:31:33:6c:ec:35:64:3b:6a:5c:50:19:dd:3b:
4e:00:72:27:fa:94:43:4f:07:77:71:2e:ff:d1:51:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:57:9F:C6:A1:BA:CE:02:61:0F:C9:05:95:A8:03:09:B4:7C:13
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/OJBXn8ahus4CYQ_JBZWoAwm0fBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7a:bf:0e:34:05:a9:2f:a9:05:33:a0:e8:13:d8:a1:dd:f0:
8c:16:4c:6a:05:ae:fd:93:41:0e:2a:ec:5d:1f:1b:34:3b:3d:
b9:75:2c:04:ee:3e:76:56:ba:6f:92:9b:44:38:4d:cf:f7:41:
da:d5:98:45:bd:a0:c7:0f:a7:0e:32:35:9f:4f:a3:b6:ae:8b:
3d:9e:6c:01:1c:66:10:1a:14:ea:a5:5e:62:22:ca:b3:80:54:
b9:cd:92:d4:6a:fe:c4:6e:31:ed:73:02:b0:52:a8:d5:05:02:
99:82:4c:fb:9b:50:89:a7:ab:1f:34:b7:8d:94:9a:53:39:4c:
f4:53:e4:cb:e8:ac:f4:80:1b:19:63:02:cd:05:4b:c8:f6:f4:
c4:18:fd:a4:c4:ab:b8:80:7a:aa:0a:96:1e:2b:ba:43:49:b6:
08:47:b4:e9:68:5f:d0:57:a6:8c:c4:89:50:9b:aa:97:d6:ec:
48:8b:6e:25:2a:52:b3:36:2b:49:6d:f0:75:d6:5d:52:6a:b0:
ee:c2:87:70:bd:46:f5:e6:ed:93:fd:0f:20:3b:d6:43:08:c9:
91:68:13:79:57:93:f5:3e:5c:36:3e:e2:3e:85:4c:ff:26:91:
b8:ca:37:16:37:12:a1:94:39:a4:e2:37:68:b0:19:f6:a8:88:
63:d9:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:06 2025 by rpki-client