Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yMSRSUOaD_I9-_w6JSkVSof-73c.roa
File: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (raw, json)
Hash identifier: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=
Subject key identifier: C8:C4:91:49:43:9A:0F:F2:3D:FB:FC:3A:25:29:15:4A:87:FE:EF:77
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244563BDCC2900C219740E15C1720709
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yMSRSUOaD_I9-_w6JSkVSof-73c.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49934
IP address blocks: 195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.77.133.0/24 maxlen: 24
195.77.134.0/23 maxlen: 23
195.77.134.0/24 maxlen: 24
195.77.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:bd:cc:29:00:c2:19:74:0e:15:c1:72:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c49149439a0ff23dfbfc3a2529154a87feef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:fd:f6:b3:db:ba:47:84:44:3c:02:db:cb:
f6:c2:3a:91:f4:9b:31:a6:05:46:84:7d:15:3e:93:
37:d5:9a:97:5c:bc:a6:d4:ad:c6:91:ba:a8:dd:c6:
39:ab:e5:ed:e0:1e:2f:c1:9f:f9:35:23:87:d3:92:
a3:e0:70:c5:cd:ab:78:73:4f:4c:98:c7:54:13:95:
27:8b:eb:6c:ac:ec:53:60:70:c8:0e:3f:27:6b:0d:
a6:54:a8:4c:e7:05:65:e2:f1:ae:fe:4e:a7:60:a3:
41:6e:8f:25:11:b6:f4:c2:b9:db:71:4e:f0:51:f3:
7e:f5:bf:bb:b7:51:a0:09:09:5c:6e:03:02:20:86:
e4:2e:b6:f6:2a:38:09:51:5e:4d:7f:19:bb:c1:04:
fd:9a:d6:70:5c:38:08:97:73:ef:91:a9:0f:e2:5a:
61:76:34:d8:cb:c6:b3:d3:76:aa:0c:94:e2:75:ff:
d2:fe:7a:99:78:68:84:c9:b4:94:c8:4e:f2:10:81:
2b:19:6b:13:9d:af:e4:e5:44:7a:f8:73:a4:0d:df:
e1:8e:81:97:7e:c5:40:13:f8:21:73:ac:40:a0:c9:
26:58:de:c9:86:06:63:ed:16:06:b1:f9:cb:8a:91:
ee:b6:76:4d:8e:33:ee:b4:d2:2c:25:71:ab:81:4e:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C4:91:49:43:9A:0F:F2:3D:FB:FC:3A:25:29:15:4A:87:FE:EF:77
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yMSRSUOaD_I9-_w6JSkVSof-73c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:3a:09:89:4c:7f:d6:8a:62:0f:cb:e5:b1:be:6c:1d:dc:46:
f2:0c:16:fa:da:1e:db:98:33:2c:73:d0:9a:16:af:7b:dc:c2:
54:27:9d:57:a2:18:de:ba:c6:2c:06:70:4a:7d:33:64:b3:03:
08:d3:6d:3e:32:31:80:75:94:6e:ed:54:19:51:31:89:0d:07:
a0:ff:0b:68:a1:f1:17:7a:2f:37:b6:15:d8:da:56:1c:ef:92:
df:6e:c3:f6:6f:14:48:f4:98:c0:73:d1:c7:0d:80:c4:4f:d6:
2f:13:41:e5:08:75:2b:39:8e:5d:72:8e:ca:57:6e:73:69:85:
bb:61:15:8d:5d:c5:19:e2:b9:40:45:fa:a8:04:c8:c6:9e:4c:
6d:30:f0:ac:eb:d3:d3:23:23:ce:5b:c6:9f:96:b4:5b:fc:35:
6d:8c:ef:7b:8e:e6:2f:54:29:51:fc:71:85:f5:81:ac:8d:04:
24:7c:65:a1:90:76:83:e4:ec:ef:5e:b6:b6:8d:ec:05:72:f5:
9e:68:57:45:dc:c7:0b:c2:79:f8:96:c7:b8:81:55:25:08:db:
95:e0:1a:18:56:93:6e:5d:27:44:ef:dc:8f:c9:e0:90:47:36:
cc:ed:4b:d4:da:87:d3:3c:55:2e:7f:67:83:0b:b2:93:77:55:
dd:8d:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:01 2025 by rpki-client