Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/SmdVNFnOX-urX6ZiJUJ1eQ_DPXs.roa
File: SmdVNFnOX-urX6ZiJUJ1eQ_DPXs.roa (raw, json)
Hash identifier: wfNQ4ZijlfURHaQftfB2eUoopBX19Lpg77gqnshySA0=
Subject key identifier: 4A:67:55:34:59:CE:5F:EB:AB:5F:A6:62:25:42:75:79:0F:C3:3D:7B
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195BF4D01EF8FE1DA992555D1036068ECD7
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/SmdVNFnOX-urX6ZiJUJ1eQ_DPXs.roa
Signing time: Sat 22 Mar 2025 19:20:49 +0000
ROA not before: Sat 22 Mar 2025 19:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
128.65.168.0/22 maxlen: 24
128.65.172.0/22 maxlen: 24
194.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:4d:01:ef:8f:e1:da:99:25:55:d1:03:60:68:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Mar 22 19:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a67553459ce5febab5fa662254275790fc33d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:78:12:10:a5:77:3d:0e:ac:2f:ce:8f:f0:
ca:2f:15:30:e2:a4:77:e3:97:e5:b8:06:3a:9d:a3:
90:63:64:67:87:cc:00:6f:c6:e3:45:71:2c:38:f3:
ac:5e:dc:01:dd:e9:c1:66:5d:79:3e:1c:c1:96:aa:
70:34:a6:d7:1e:5d:57:96:da:db:5f:21:a2:56:a1:
f6:b3:d9:59:46:4a:73:f4:c6:ac:b0:4b:7a:63:3c:
9f:de:19:5e:97:1a:df:69:74:0a:f2:41:c2:00:65:
84:79:32:32:55:fa:b0:b9:dd:58:3d:cc:24:d0:a8:
c1:84:83:f2:2e:7e:60:f3:ee:2e:04:0a:6c:2c:5f:
7a:54:0d:a0:ed:d2:a2:92:64:eb:f6:f0:76:d5:7b:
15:f6:f6:d8:5e:8f:10:53:b1:68:97:ee:45:3b:31:
df:d0:f5:10:64:09:9c:d0:f0:8e:47:09:42:fb:2e:
72:24:f8:7b:7c:19:09:8d:39:7d:8c:59:11:b0:bd:
20:fc:eb:b7:2d:18:c9:00:6c:9d:7f:0f:74:84:22:
2c:d9:1d:9e:70:0b:7a:12:f1:0d:51:d6:fc:0c:c9:
f2:d3:d7:0b:db:f1:66:9f:31:42:c3:3d:32:26:3d:
17:45:2c:2d:a4:20:bb:b5:ca:d4:0d:39:84:35:c7:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:67:55:34:59:CE:5F:EB:AB:5F:A6:62:25:42:75:79:0F:C3:3D:7B
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/SmdVNFnOX-urX6ZiJUJ1eQ_DPXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
128.65.168.0/21
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
50:df:26:ef:e3:3c:db:8c:de:02:50:fb:90:69:e1:b5:81:44:
76:0e:91:72:9a:76:7a:bf:e3:61:32:77:8a:52:2e:96:2f:87:
90:a8:d7:e2:24:fc:03:01:2e:16:d5:2a:ba:e1:e8:23:ee:71:
c0:00:3e:df:fa:a0:bc:e6:06:a1:63:21:61:ec:e2:88:a3:09:
ba:c2:da:e7:71:79:8a:a6:1f:f8:c8:ee:ad:65:f2:6d:8d:9d:
15:26:d2:2e:0e:45:b3:4a:85:79:3a:25:f3:91:ac:ed:9a:ef:
a8:f1:f5:88:a0:c2:e6:c6:1b:5f:db:6f:10:6b:20:3b:70:f1:
5f:f8:5c:b1:37:a8:46:95:ea:ca:e8:25:34:67:56:b9:45:53:
07:a1:3c:4a:d7:a8:37:dd:3f:bc:5d:46:d4:10:c7:68:1e:04:
c8:bf:f4:c1:60:21:83:67:ff:49:0e:59:1c:84:49:16:3f:ac:
13:81:71:7b:1a:1f:be:aa:6e:9d:5c:8f:c3:cf:f6:20:3b:0c:
ea:01:d3:c9:52:ba:c3:26:0f:5e:42:a3:72:c1:86:33:ee:c4:
fa:4a:35:dc:3a:87:10:68:d2:0e:28:a9:16:9e:55:e0:97:dc:
ad:b5:6d:86:67:53:94:e9:05:c2:90:d9:f9:af:01:a9:87:e0:
df:a3:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:16 2025 by rpki-client