Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/4qU0lYZixQn_ajK7o9tm4-h59Yc.roa
File: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (raw, json)
Hash identifier: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=
Subject key identifier: E2:A5:34:95:86:62:C5:09:FF:6A:32:BB:A3:DB:66:E3:E8:79:F5:87
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019482E0522A3075942FC0C5791A2DF739C4
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/4qU0lYZixQn_ajK7o9tm4-h59Yc.roa
Signing time: Mon 20 Jan 2025 08:42:06 +0000
ROA not before: Mon 20 Jan 2025 08:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 77.83.152.0/24 maxlen: 24
77.83.153.0/24 maxlen: 24
77.83.154.0/24 maxlen: 24
77.83.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:e0:52:2a:30:75:94:2f:c0:c5:79:1a:2d:f7:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 20 08:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a534958662c509ff6a32bba3db66e3e879f587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:ee:7d:99:3d:5e:18:9d:25:a8:43:a0:e3:
7a:91:a4:2f:64:2b:22:45:11:2f:22:d2:4b:1c:32:
fa:3e:e5:94:3d:ef:49:62:69:4a:8d:63:53:51:43:
9c:c3:31:4b:ae:25:56:9c:d1:c7:14:dd:8e:03:11:
1a:41:46:b8:9a:0c:8c:a4:2b:3b:fc:34:fc:02:85:
63:17:d7:d8:e3:dc:43:d2:84:78:ed:dd:4a:41:a1:
1b:be:ae:18:90:2e:b6:97:ae:aa:dc:51:46:f3:c8:
86:0d:2d:e3:56:11:4d:85:1e:c9:4e:82:1d:75:89:
ec:4d:4b:ee:fa:3f:c9:08:ca:1a:1d:84:dc:19:89:
e3:59:1b:9b:de:8a:49:94:80:13:db:09:c0:cb:85:
03:32:9a:13:b0:82:ba:03:d3:3d:3a:16:72:f6:97:
d6:d0:23:22:02:e5:6b:1c:89:9a:f5:49:8f:ff:5a:
4e:93:d3:95:7b:5b:34:af:48:eb:75:0c:04:5e:bd:
49:89:88:3a:b1:8a:e0:68:e6:7d:86:d2:90:f5:64:
77:a7:9c:5c:b6:24:9a:e4:d5:f1:6b:57:d9:bc:f9:
04:c9:0f:30:ce:ab:19:b1:a0:47:d6:c4:63:4a:05:
59:33:8f:92:15:97:cf:7e:5a:4c:1b:05:07:f4:42:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:34:95:86:62:C5:09:FF:6A:32:BB:A3:DB:66:E3:E8:79:F5:87
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/4qU0lYZixQn_ajK7o9tm4-h59Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
71:24:60:e8:a1:a4:3a:29:58:64:2c:ea:a1:58:d0:53:9d:76:
08:72:10:34:43:01:02:30:7d:b4:f3:88:b6:6e:bf:e1:52:a6:
69:16:bf:6c:47:b2:86:2b:77:27:73:bd:a1:d0:1e:78:5c:e1:
14:61:5a:63:1e:77:43:4a:2c:ca:64:10:da:20:ff:84:8e:db:
a5:b3:7e:5f:b6:8a:23:3b:ce:a7:8e:36:ed:69:ea:63:ae:0e:
80:34:8a:63:1e:1c:fa:85:13:56:6d:a6:1c:9e:89:e2:55:39:
bf:73:a8:e5:92:32:71:20:35:8c:b3:b3:35:28:9a:dd:89:c7:
5b:1b:1f:87:c8:43:97:82:e4:4c:40:db:2d:dd:e6:a0:15:92:
bd:ad:17:5c:ac:0e:88:47:f1:5c:02:9a:f7:d8:37:98:cc:dd:
43:18:6d:27:f0:bf:ad:5c:4c:f2:d8:9b:81:20:9b:73:16:67:
15:2c:05:a4:79:a4:05:4c:5e:bb:9e:60:b9:e0:04:50:9c:13:
bb:6f:b6:39:62:05:ef:83:6d:60:19:cb:f8:16:cd:c4:a0:c2:
da:bf:88:7b:42:c6:7f:4a:9a:b3:5c:04:88:38:13:13:cd:71:
6f:13:06:3a:6d:26:72:11:02:07:7c:b4:5b:87:a1:de:27:de:
29:b1:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:57 2025 by rpki-client