Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/dAWbLYjlxeHgLMS9PsNwDxkTh8s.roa
File: dAWbLYjlxeHgLMS9PsNwDxkTh8s.roa (raw, json)
Hash identifier: aBTVckQXarfEAW0yoejjOMXPGaKZ6cjUHg4pKwXO1L0=
Subject key identifier: 74:05:9B:2D:88:E5:C5:E1:E0:2C:C4:BD:3E:C3:70:0F:19:13:87:CB
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 018CC8012909A5A1CCCF36C0859527E9CD39
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/dAWbLYjlxeHgLMS9PsNwDxkTh8s.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202588
IP address blocks: 37.77.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:29:09:a5:a1:cc:cf:36:c0:85:95:27:e9:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74059b2d88e5c5e1e02cc4bd3ec3700f191387cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:f2:80:e0:43:b9:2e:c7:4a:16:c2:14:af:
5a:fe:e7:a3:06:14:53:05:93:0a:94:af:bd:c3:44:
02:c0:63:af:f5:a3:03:41:bc:7b:d6:28:00:73:93:
65:ef:a8:35:bb:f6:f1:7c:32:90:6b:c8:6a:86:cb:
63:3c:69:d4:c9:19:a4:44:a7:f8:18:0b:2a:6d:83:
c6:12:dd:84:b2:2c:14:29:ac:7b:93:52:b4:ee:e2:
b5:ea:72:1b:79:13:a0:87:fe:90:56:cd:d7:bf:4a:
f1:58:b6:b8:e3:33:a1:ba:7a:8b:76:32:24:b6:bf:
7c:2e:45:53:6a:73:01:9c:22:1c:24:63:13:f3:6d:
9d:d4:71:39:ee:4d:63:8f:80:47:52:f1:2e:9c:90:
79:42:ce:4b:99:39:bc:de:07:66:18:9e:44:65:97:
93:d7:e2:1f:01:ea:6a:30:f7:0a:99:4c:d5:c1:68:
22:5b:9a:1e:7d:6c:10:d4:02:c9:52:27:e6:94:5e:
5e:b2:b4:13:43:2e:8a:a9:f1:90:a3:df:3e:7f:0b:
20:1d:2d:4a:c2:c6:de:83:44:50:7e:fd:e1:3e:ba:
14:34:80:36:da:4b:02:59:42:0c:0c:4d:9c:a1:7b:
de:6e:ca:86:f8:59:83:f6:29:7e:00:2e:27:de:66:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:9B:2D:88:E5:C5:E1:E0:2C:C4:BD:3E:C3:70:0F:19:13:87:CB
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/dAWbLYjlxeHgLMS9PsNwDxkTh8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.11.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c6:cb:78:35:04:78:02:20:1f:9f:43:8e:07:15:c2:a6:b1:
5d:f6:df:49:df:46:dd:8e:4d:38:d7:a7:17:f4:7b:20:63:ae:
c7:56:15:bf:2d:73:98:92:10:4f:fe:e0:35:d1:83:28:c2:65:
40:35:bc:a1:30:18:6e:88:e0:1b:8c:0c:85:c0:72:56:0e:9c:
3c:51:a2:71:21:6b:57:5d:34:de:ed:30:8b:28:51:d4:4c:92:
9a:3e:68:a7:2e:9d:59:95:3b:1b:c6:a8:34:e6:82:c9:09:91:
d2:9a:56:ca:dd:aa:a3:cd:cc:3b:f1:7e:73:98:ac:ea:c2:bd:
da:f8:cd:fc:35:e4:bd:4e:1b:a8:b3:56:f7:d5:25:39:92:70:
db:f8:25:24:ba:8c:37:e3:09:2e:4b:7c:8b:48:8d:40:dd:56:
2a:2c:f6:00:27:88:5b:65:82:f0:0f:c4:5d:a1:9e:c5:9b:e5:
b8:5c:25:7b:76:82:fc:ad:3c:95:ec:fa:ad:7d:c8:62:34:6a:
ec:6f:ec:31:59:0e:6a:5d:73:58:76:d1:54:54:be:8c:0b:21:
91:dc:88:af:be:e1:06:bc:a3:07:b6:f3:7b:27:77:0c:07:34:
b8:ec:a0:b0:f4:59:8e:24:a5:de:39:cf:ab:89:1d:2d:1a:8e:
81:8a:3d:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASkJpaHMzzbAhZUn6c05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODU4OTRhODRiYWEwZWNhMGU2ZWY0NGE5OTJmYzJiYTAw
ZjUyNzcwHhcNMjQwMTAyMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDA1OWIyZDg4ZTVjNWUxZTAyY2M0YmQzZWMzNzAwZjE5MTM4N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7HygOBDuS7HShbCFK9a/uejBhRT
BZMKlK+9w0QCwGOv9aMDQbx71igAc5Nl76g1u/bxfDKQa8hqhstjPGnUyRmkRKf4
GAsqbYPGEt2EsiwUKax7k1K07uK16nIbeROgh/6QVs3Xv0rxWLa44zOhunqLdjIk
tr98LkVTanMBnCIcJGMT822d1HE57k1jj4BHUvEunJB5Qs5LmTm83gdmGJ5EZZeT
1+IfAepqMPcKmUzVwWgiW5oefWwQ1ALJUifmlF5esrQTQy6KqfGQo98+fwsgHS1K
wsbeg0RQfv3hProUNIA22ksCWUIMDE2coXvebsqG+FmD9il+AC4n3mZ/IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQFmy2I5cXh4CzEvT7DcA8ZE4fLMB8GA1UdIwQY
MBaAFGuFiUqEuqDsoObvRKmS/CugD1J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRXSlNvUzZvT3lnNXU5RXFaTDhLNkFQVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mNWMwMjAtZTFkNy00ZmU5LTgzYzAt
YTNiZTYzYjg1NzJmLzEvZEFXYkxZamx4ZUhnTE1TOVBzTndEeGtUaDhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mNWMwMjAtZTFkNy00ZmU5LTgzYzAtYTNiZTYzYjg1NzJm
LzEvYTRXSlNvUzZvT3lnNXU5RXFaTDhLNkFQVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU0LMA0G
CSqGSIb3DQEBCwUAA4IBAQAmxst4NQR4AiAfn0OOBxXCprFd9t9J30bdjk0416cX
9HsgY67HVhW/LXOYkhBP/uA10YMowmVANbyhMBhuiOAbjAyFwHJWDpw8UaJxIWtX
XTTe7TCLKFHUTJKaPminLp1ZlTsbxqg05oLJCZHSmlbK3aqjzcw78X5zmKzqwr3a
+M38NeS9Thuos1b31SU5knDb+CUkuow34wkuS3yLSI1A3VYqLPYAJ4hbZYLwD8Rd
oZ7Fm+W4XCV7doL8rTyV7PqtfchiNGrsb+wxWQ5qXXNYdtFUVL6MCyGR3IivvuEG
vKMHtvN7J3cMBzS47KCw9FmOJKXeOc+riR0tGo6Bij20
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:21 2025 by rpki-client