Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa
File: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (raw, json)
Hash identifier: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=
Subject key identifier: 5C:6D:1F:E3:08:60:F0:34:F3:83:86:69:41:DD:1F:F9:47:66:45:76
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019421B2294187DAB7B9C2C592C9ABF46D2F
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 77.83.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:29:41:87:da:b7:b9:c2:c5:92:c9:ab:f4:6d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c6d1fe30860f034f383866941dd1ff947664576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:90:89:85:eb:9a:63:f3:14:52:94:58:34:
2b:6a:0f:76:ea:2a:ac:6c:8b:3d:5b:ba:95:16:3d:
f9:5f:f7:2d:3f:99:7b:ad:cd:a6:1c:8c:91:ae:ec:
00:5a:fc:69:b0:a7:2e:72:54:02:db:ff:2f:53:2a:
5c:70:00:9d:d2:f3:1d:a4:92:6e:b0:85:cf:7a:f0:
a1:03:f4:03:82:6a:ad:9f:33:1e:a5:20:5e:89:d8:
5a:82:ec:62:15:14:f3:2c:08:90:19:9b:3a:74:3a:
5f:1e:3c:d8:31:a8:05:3e:ba:51:1a:05:f3:52:c0:
cb:14:38:a7:10:b1:b0:74:80:74:3d:e3:c2:3d:a2:
35:12:6b:d7:45:95:d1:b4:ca:69:2e:6a:95:d1:31:
0e:b9:3a:b9:58:3e:cb:38:a0:87:d9:87:d6:f2:3b:
76:cc:2d:59:86:1f:57:38:85:5f:cf:7f:6e:8e:f9:
71:48:8f:5c:d9:ae:15:99:1e:fd:56:91:0a:72:1a:
f7:4b:ad:82:e5:62:ce:4a:9f:84:54:08:0e:13:68:
f9:6a:4a:2f:6e:60:c8:54:08:ce:43:a4:82:ec:c6:
19:54:9f:d6:fe:e9:2d:fe:73:bf:e0:66:94:f6:b4:
23:b2:bb:4b:b2:43:3d:f4:59:30:53:22:27:f5:49:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:1F:E3:08:60:F0:34:F3:83:86:69:41:DD:1F:F9:47:66:45:76
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.153.0/24
Signature Algorithm: sha256WithRSAEncryption
70:75:7d:5d:bc:b1:b9:b4:5c:df:9e:64:57:ff:12:da:48:5e:
6c:54:49:09:16:8f:66:cd:c4:c5:44:3b:97:b5:d8:2f:5a:fe:
eb:28:7e:f1:d5:7b:66:be:12:58:45:c8:87:77:56:52:a3:b6:
ff:5f:1e:72:42:a2:7b:b9:a1:39:c7:e6:e0:6f:43:66:e6:e7:
03:d0:23:77:79:a5:18:2f:b9:60:8a:08:02:d3:20:07:35:6f:
01:c5:b0:66:98:22:b6:a3:91:f1:ce:c3:b4:c1:5e:f3:c8:ca:
7b:ba:d2:3f:4e:16:f9:c0:a7:fe:bf:cf:1e:3a:a7:21:b2:e5:
5b:eb:6d:6e:98:d1:43:7b:b4:a8:06:d8:41:3e:4c:3f:6e:19:
ca:d2:5f:d7:9b:c4:68:e2:1a:ed:9b:64:ef:7e:26:07:3b:1d:
38:d3:a0:56:db:9b:69:2f:e4:07:03:86:93:6b:bd:f0:73:b8:
c0:79:b5:8d:2d:fc:7f:df:59:2f:dc:ec:64:49:66:f5:0c:f1:
8b:d6:a6:2c:4a:23:e0:60:39:6c:8d:48:9b:97:c7:5b:ad:86:
ab:d1:ce:91:32:ee:39:9b:01:a4:e8:e1:c7:72:f1:da:d5:23:
b8:2a:3f:f4:93:fa:49:ff:64:dd:68:f8:b8:2b:f5:87:4d:dd:
20:9b:db:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsilBh9q3ucLFksmr9G0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzZkMWZlMzA4NjBmMDM0ZjM4Mzg2Njk0MWRkMWZmOTQ3NjY0NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3yQiYXrmmPzFFKUWDQrag926iqs
bIs9W7qVFj35X/ctP5l7rc2mHIyRruwAWvxpsKcuclQC2/8vUypccACd0vMdpJJu
sIXPevChA/QDgmqtnzMepSBeidhaguxiFRTzLAiQGZs6dDpfHjzYMagFPrpRGgXz
UsDLFDinELGwdIB0PePCPaI1EmvXRZXRtMppLmqV0TEOuTq5WD7LOKCH2YfW8jt2
zC1Zhh9XOIVfz39ujvlxSI9c2a4VmR79VpEKchr3S62C5WLOSp+EVAgOE2j5akov
bmDIVAjOQ6SC7MYZVJ/W/ukt/nO/4GaU9rQjsrtLskM99FkwUyIn9Ul5AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxtH+MIYPA084OGaUHdH/lHZkV2MB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvWEcwZjR3aGc4RFR6ZzRacFFkMGYtVWRtUlhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVOZMA0G
CSqGSIb3DQEBCwUAA4IBAQBwdX1dvLG5tFzfnmRX/xLaSF5sVEkJFo9mzcTFRDuX
tdgvWv7rKH7x1XtmvhJYRciHd1ZSo7b/Xx5yQqJ7uaE5x+bgb0Nm5ucD0CN3eaUY
L7lgiggC0yAHNW8BxbBmmCK2o5HxzsO0wV7zyMp7utI/Thb5wKf+v88eOqchsuVb
621umNFDe7SoBthBPkw/bhnK0l/Xm8Ro4hrtm2TvfiYHOx0406BW25tpL+QHA4aT
a73wc7jAebWNLfx/31kv3OxkSWb1DPGL1qYsSiPgYDlsjUibl8dbrYar0c6RMu45
mwGk6OHHcvHa1SO4Kj/0k/pJ/2TdaPi4K/WHTd0gm9tW
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:35 2025 by rpki-client