Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/V341t6lFU17La723o82yJ0OztQk.roa
File: V341t6lFU17La723o82yJ0OztQk.roa (raw, json)
Hash identifier: 5ZnBvoWyakZy583RsB0+KziGW81oXH+bvf5OC8lpqqA=
Subject key identifier: 57:7E:35:B7:A9:45:53:5E:CB:6B:BD:B7:A3:CD:B2:27:43:B3:B5:09
Certificate issuer: /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial: 01942521DAC4E0075F09CE8269A88EBBDD25
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/V341t6lFU17La723o82yJ0OztQk.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60772
IP address blocks: 77.94.64.0/22 maxlen: 22
77.94.64.0/24 maxlen: 24
77.94.65.0/24 maxlen: 24
77.94.66.0/24 maxlen: 24
77.94.67.0/24 maxlen: 24
185.26.140.0/22 maxlen: 22
185.26.140.0/24 maxlen: 24
185.26.141.0/24 maxlen: 24
185.26.142.0/24 maxlen: 24
185.26.143.0/24 maxlen: 24
2a00:83a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:da:c4:e0:07:5f:09:ce:82:69:a8:8e:bb:dd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=577e35b7a945535ecb6bbdb7a3cdb22743b3b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:dc:16:3e:6b:db:2d:83:8b:e5:b3:c2:31:
fd:19:e2:1a:04:a1:e3:92:47:e9:cb:e1:54:12:b4:
1c:50:1d:89:40:14:5b:19:7d:d2:98:c1:d9:b8:0d:
1c:b8:51:3b:64:44:5e:80:3d:7f:0e:ac:79:2f:38:
14:74:2d:71:76:42:46:49:20:db:f8:ea:67:2f:58:
f3:53:50:86:60:1f:5a:15:da:04:3f:ae:8e:f8:d1:
30:c7:3d:b5:3c:50:2f:65:46:e5:9e:8d:c8:a1:d7:
b7:9a:50:12:51:2d:c8:16:be:38:11:44:07:2c:a9:
dd:b6:7e:70:03:c0:d3:f9:68:db:74:ff:d7:10:8f:
26:83:c8:4d:91:75:af:e4:ab:42:81:59:65:98:11:
5c:5b:97:f1:cb:32:9d:31:40:df:25:d2:f0:43:4f:
07:e9:4f:13:ee:b7:8b:80:15:8d:c1:a8:0c:99:bb:
9a:dc:61:29:a5:02:8c:c9:fc:03:bc:78:af:45:14:
ab:22:f1:81:6b:88:3c:5f:44:8b:6b:eb:8a:2f:08:
9c:04:ce:aa:d4:03:f7:43:49:83:ef:f1:33:98:57:
b2:99:a9:cc:84:25:e6:68:1b:95:cc:9a:36:64:c2:
0a:88:82:d0:8e:4a:99:0a:ac:11:a5:6c:0e:a5:5c:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:35:B7:A9:45:53:5E:CB:6B:BD:B7:A3:CD:B2:27:43:B3:B5:09
X509v3 Authority Key Identifier:
keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/V341t6lFU17La723o82yJ0OztQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.64.0/22
185.26.140.0/22
IPv6:
2a00:83a0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:5e:f3:34:53:45:5b:33:44:36:0f:36:9d:5c:2d:fe:fc:d1:
59:0b:17:42:56:b4:4b:b2:b0:db:97:31:e2:31:ca:24:12:93:
0b:11:e9:d9:86:81:69:de:1b:84:25:c5:47:3f:3d:a5:4a:d5:
a6:19:d4:57:a8:35:53:1e:96:66:86:1b:56:84:e2:1f:e8:cc:
cb:e8:c4:b8:26:db:0b:4e:56:22:15:ec:5c:1c:94:ca:ff:ee:
9b:bb:74:11:ad:36:4a:c0:1f:be:e8:30:76:7d:17:bd:28:6b:
e3:b1:c3:fc:eb:be:f9:64:d8:86:a1:a8:2e:25:b7:d9:06:d3:
8e:25:ed:aa:08:38:a8:3a:36:4c:29:5f:32:5b:fd:e6:22:b3:
b8:33:01:c4:e1:db:e4:2a:d1:82:f4:ef:df:e2:c1:0d:38:25:
f7:4d:f1:0c:9e:8a:30:eb:a3:ca:98:30:48:ea:e8:27:dc:2e:
57:26:38:c4:45:bd:0d:a4:03:e1:c7:f7:cf:ec:54:52:fd:e3:
3e:14:69:c2:c5:8f:ea:34:da:b5:4c:47:9a:93:b9:8f:12:e1:
f2:b7:b3:03:ff:84:48:4b:cd:4c:f6:52:d5:b4:e3:9a:e1:74:
7c:27:46:90:c5:b1:ea:73:90:3a:56:e0:4c:70:b2:c2:6d:a5:
3f:c1:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:54 2025 by rpki-client