Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/BPmOKccK3wxsyXop4Fdn5FojVoQ.roa
File: BPmOKccK3wxsyXop4Fdn5FojVoQ.roa (raw, json)
Hash identifier: c0AjkjhURWDz0MoTRfs5io6YXuUePztpcaDJ7boNtz0=
Subject key identifier: 04:F9:8E:29:C7:0A:DF:0C:6C:C9:7A:29:E0:57:67:E4:5A:23:56:84
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0194EFDDD679AEF99123840DF5214FFF55BA
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/BPmOKccK3wxsyXop4Fdn5FojVoQ.roa
Signing time: Mon 10 Feb 2025 12:38:00 +0000
ROA not before: Mon 10 Feb 2025 12:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:dd:d6:79:ae:f9:91:23:84:0d:f5:21:4f:ff:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Feb 10 12:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04f98e29c70adf0c6cc97a29e05767e45a235684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:40:1b:4a:00:b2:49:ad:a7:c3:e9:f5:eb:
77:0d:b4:d6:37:9f:79:0a:70:71:4b:3f:f9:62:8f:
e8:9e:45:8c:d3:9f:76:71:fe:b5:9a:7f:94:8a:fc:
ce:5a:ff:8c:81:0f:7a:dd:5c:49:bf:bf:47:64:a6:
9b:c4:dd:7c:4c:02:ba:37:b3:77:08:88:32:4e:d7:
e1:7b:7a:1e:d1:a9:23:a7:8b:42:de:81:e5:a6:4d:
72:63:8b:62:bd:f0:81:b9:f1:ed:cc:b8:23:33:a5:
e7:da:45:3c:ff:f6:66:cb:57:ad:06:23:a9:84:ef:
8f:61:27:a1:b0:25:4e:e8:75:eb:ff:28:6a:6e:1d:
f1:bb:74:93:e7:39:37:80:e0:b2:dd:94:89:ed:69:
a5:c6:39:cc:80:7e:d9:55:06:8f:09:bd:8e:46:d3:
00:48:45:59:ba:25:d4:80:bb:d6:6d:55:b8:c2:28:
9a:73:e6:d5:b5:3a:25:b9:f6:39:23:9e:32:52:b4:
58:09:0f:ee:60:b4:9a:cc:05:a8:e9:f7:11:70:7e:
55:6b:07:56:60:de:cf:b7:8e:eb:13:15:3d:0a:d0:
29:4f:cc:ad:e3:37:ba:41:ca:68:25:0d:40:10:bd:
82:d9:19:21:42:50:aa:fe:07:a4:66:0e:2b:fc:bc:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:8E:29:C7:0A:DF:0C:6C:C9:7A:29:E0:57:67:E4:5A:23:56:84
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/BPmOKccK3wxsyXop4Fdn5FojVoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.130.255
77.105.134.0/24
77.105.144.0/24
185.225.203.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6b:69:a5:4f:10:8d:32:ad:8f:50:f7:9d:d4:2a:cc:38:00:
92:33:92:a1:71:ae:36:37:ef:48:04:89:5f:af:e6:26:2c:ae:
70:74:b9:3b:c9:f1:56:75:80:ae:33:4e:52:d0:4a:73:e8:9a:
d5:e6:7a:cb:cd:23:00:fb:3a:40:40:ba:83:a7:93:98:fd:e3:
07:ee:d6:3d:c9:e9:34:9a:2a:5c:f0:26:8b:a8:0e:2b:d6:eb:
98:57:1a:5d:0e:77:34:cb:ed:6f:7b:78:19:78:12:c3:e9:cf:
f7:0d:0d:54:f6:5d:42:d7:4a:e0:b4:79:c1:68:54:73:25:bd:
dc:e3:6c:5d:0f:4d:b3:c7:7b:02:f2:45:f0:02:69:d9:88:14:
d7:3c:d0:6b:f0:3c:ef:eb:19:cc:e8:18:9c:12:50:2d:b5:83:
f9:8b:07:5f:e9:0c:3a:2b:75:fa:62:82:d6:e1:b3:e8:9c:8e:
c7:d3:03:5a:55:82:01:b4:9c:af:5f:2e:43:8d:64:ba:ad:ac:
99:05:de:ab:a9:53:07:5c:7a:06:d2:1a:e3:12:5d:7e:8e:e3:
fa:b0:ce:02:50:61:9b:a6:15:2a:0e:8f:3d:06:18:23:d0:76:
45:85:a4:c7:03:bd:f2:f2:2f:0d:15:aa:b7:92:9d:6e:d4:52:
8f:20:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:17:47 2025 by rpki-client