Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/x4lbL_JiAX4DDdm3hF6-h4ZiT3U.roa
File: x4lbL_JiAX4DDdm3hF6-h4ZiT3U.roa (raw, json)
Hash identifier: 8TiANRIQK+Tf+5LwfmXRUrLhPq7+Vz4c3UkdrfUu2lk=
Subject key identifier: C7:89:5B:2F:F2:62:01:7E:03:0D:D9:B7:84:5E:BE:87:86:62:4F:75
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 01951E0ED2C2FD37E172D6EA4A2F55B4ADF2
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/x4lbL_JiAX4DDdm3hF6-h4ZiT3U.roa
Signing time: Wed 19 Feb 2025 11:54:02 +0000
ROA not before: Wed 19 Feb 2025 11:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:0e:d2:c2:fd:37:e1:72:d6:ea:4a:2f:55:b4:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 19 11:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7895b2ff262017e030dd9b7845ebe8786624f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:8a:34:ee:50:2f:c3:51:11:ef:07:93:6e:
71:84:07:f1:72:49:80:86:c1:54:86:86:b9:0d:04:
3e:d4:bd:fa:0f:4e:07:e6:c2:f4:08:07:f1:8d:87:
37:f0:64:78:8f:75:ce:4e:fa:4a:df:ec:1a:a0:f8:
8f:3a:2b:53:bb:7d:cf:23:24:81:cc:1c:14:87:0b:
8c:35:9d:c3:f0:d2:0b:47:fc:35:53:e4:42:e1:6c:
6e:57:9b:07:23:ae:e3:d0:8e:5e:13:28:cc:bf:61:
55:17:7d:8a:69:67:16:b2:a5:6c:0e:6f:44:1a:3d:
9c:15:a0:2f:53:05:44:b1:59:ab:d5:85:c8:f9:c4:
ac:c3:48:a9:1a:13:63:26:f2:50:73:e0:97:7b:5f:
e7:e7:7d:f1:f3:f8:fa:54:c9:ff:c0:ed:b7:7f:da:
4f:5d:aa:04:42:19:83:f5:72:26:1d:85:ba:87:3c:
2d:38:48:42:35:82:01:08:93:b9:6d:a8:88:12:bc:
07:d2:94:23:44:e8:e4:17:db:bf:61:fe:4d:ee:b4:
5f:23:47:e7:3c:74:09:df:12:80:17:d8:1f:64:ad:
93:79:06:2e:ce:b4:93:84:f8:f1:40:7d:d7:d6:d4:
ff:8f:c1:04:f7:0e:bc:3b:d1:ec:90:29:db:6f:be:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:5B:2F:F2:62:01:7E:03:0D:D9:B7:84:5E:BE:87:86:62:4F:75
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/x4lbL_JiAX4DDdm3hF6-h4ZiT3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
14:11:9f:23:ed:3a:9f:cb:3f:e0:f5:76:a8:9e:db:ae:ff:91:
4c:e0:a3:71:48:ad:f8:ab:75:88:83:06:20:7e:d5:16:30:71:
70:44:9a:5d:07:30:49:40:60:a4:44:49:3d:95:aa:c8:bc:a1:
e5:43:8a:1e:0e:56:73:68:c0:04:58:65:2b:44:61:6b:a7:1b:
c0:35:71:5a:b5:26:7e:28:b9:b4:37:79:40:9d:ba:73:59:31:
e9:1d:24:85:28:1e:76:29:7c:1d:48:8b:95:a7:41:db:bf:2b:
9b:a2:15:cb:30:8d:e7:6c:12:65:14:ad:86:a6:26:48:96:45:
f9:6a:ae:85:39:4f:2c:43:52:73:a0:9d:29:b0:6b:11:77:1c:
8d:5c:45:92:82:3c:28:23:9c:db:4c:0e:65:67:a8:bd:95:8f:
63:0e:76:d2:14:e0:42:d3:ae:98:85:bc:e8:4c:d4:f2:46:9c:
be:84:88:fb:10:e0:f6:3f:29:7f:ca:48:98:94:4a:68:00:2e:
f5:e3:e4:12:d7:ab:ac:29:08:a4:b8:cf:97:f2:5d:cf:49:57:
c2:6e:d4:e8:88:17:dd:c6:61:b3:2b:5c:bf:88:ab:fb:f7:36:
ca:31:d0:2c:4d:1c:46:da:21:08:04:87:d7:10:c8:51:89:54:
0a:e0:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:02 2025 by rpki-client