Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Zi1M-O6l4el-IxCM4oKdf5xBtG4.roa
File: Zi1M-O6l4el-IxCM4oKdf5xBtG4.roa (raw, json)
Hash identifier: g85CDhq+awlTVsFsnNkEmG8oMLCx0EVZdZFgtGbWGYM=
Subject key identifier: 66:2D:4C:F8:EE:A5:E1:E9:7E:23:10:8C:E2:82:9D:7F:9C:41:B4:6E
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194BA72B273A2809285FCC97E70258A8727
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Zi1M-O6l4el-IxCM4oKdf5xBtG4.roa
Signing time: Fri 31 Jan 2025 03:41:06 +0000
ROA not before: Fri 31 Jan 2025 03:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48592
IP address blocks: 77.81.76.0/24 maxlen: 24
77.81.78.0/24 maxlen: 24
77.81.82.0/24 maxlen: 24
77.81.83.0/24 maxlen: 24
128.65.160.0/22 maxlen: 22
185.39.180.0/24 maxlen: 24
185.39.181.0/24 maxlen: 24
185.39.182.0/24 maxlen: 24
185.39.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:72:b2:73:a2:80:92:85:fc:c9:7e:70:25:8a:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 31 03:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=662d4cf8eea5e1e97e23108ce2829d7f9c41b46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:94:0f:8a:f5:6f:f7:ed:51:f5:38:d1:ab:
76:a7:59:12:9e:a6:e4:e0:76:8d:22:94:f7:d9:50:
43:65:be:84:10:19:c4:5e:3f:17:13:52:69:c3:37:
12:3c:09:a2:49:c0:09:be:45:93:30:f8:0a:99:d1:
cb:fa:36:bc:fc:e5:bb:51:77:7e:f2:cf:ba:57:71:
a7:48:4b:70:47:1e:25:26:31:9d:88:6e:4b:34:a8:
ab:2c:ea:72:62:42:2c:96:e6:93:38:b0:6a:6e:71:
98:4e:92:67:d3:0c:96:e5:98:ca:9f:1b:36:64:7c:
55:18:69:ce:39:e3:2b:73:32:aa:1f:6c:97:95:e0:
f9:f1:ff:29:87:c8:36:6f:1b:b9:3a:6a:83:f6:f2:
85:26:1d:7f:01:9c:c9:91:b9:66:8c:98:a4:85:93:
d9:21:8a:3a:c9:5f:6b:97:ee:69:aa:cb:86:ee:f8:
e6:fe:c1:16:17:6f:20:d5:c6:db:f3:9f:00:a7:a8:
94:fa:ef:f2:5b:62:1e:cf:a4:4a:9d:93:15:41:9b:
32:0d:2d:35:e0:4c:dc:3d:7d:9f:fa:81:0e:1c:21:
4e:e5:2a:b8:b2:15:79:f8:2e:e5:21:83:3a:f9:d6:
6e:45:ef:f3:17:7f:ef:b2:8c:df:d5:cd:50:f7:75:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:4C:F8:EE:A5:E1:E9:7E:23:10:8C:E2:82:9D:7F:9C:41:B4:6E
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Zi1M-O6l4el-IxCM4oKdf5xBtG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0/24
77.81.78.0/24
77.81.82.0/23
128.65.160.0/22
185.39.180.0/22
Signature Algorithm: sha256WithRSAEncryption
28:6c:c9:5f:e2:bd:bb:dc:0d:32:8c:83:11:a2:ab:91:0e:d4:
04:12:bd:c2:f0:a5:04:81:b7:76:4b:b6:67:eb:9c:7e:68:f1:
41:78:51:65:cd:0c:93:42:c4:6c:90:9c:ae:81:15:13:5b:72:
b7:19:61:26:9a:93:b2:77:48:ad:07:b8:8c:85:0c:6c:32:fa:
69:43:17:81:d8:54:58:e0:83:19:86:0f:2c:92:25:ac:c6:ad:
ec:63:c4:d3:98:5c:41:be:1f:6e:3d:51:54:e3:27:d0:c7:25:
b2:c1:43:d5:7c:7d:50:2e:b1:bb:ed:62:a7:6f:2a:37:80:af:
b8:27:89:6e:7c:e8:b2:d3:36:8c:b6:95:a2:71:7e:39:0c:05:
e6:bd:9c:16:bb:a4:12:09:b0:a7:c3:d0:0b:33:5d:d9:4b:d0:
37:d8:20:af:3f:cf:42:89:8d:aa:f0:5f:90:57:7f:27:5f:60:
57:cc:73:e0:d6:88:4a:61:e6:98:07:a7:59:aa:29:4e:9e:f9:
cc:65:9d:17:0b:b3:8b:bf:bb:cf:c3:da:fd:e5:b0:4f:aa:28:
ec:7e:b9:bf:d5:c3:17:97:71:99:dc:ae:f4:21:e0:d4:2d:35:
7d:70:95:5d:42:58:07:af:f5:80:8e:a1:13:52:47:72:04:7d:
2c:cb:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:13 2025 by rpki-client