Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dJn8TAxYMHzjO5mM148KaRMK3uQ.roa
File: dJn8TAxYMHzjO5mM148KaRMK3uQ.roa (raw, json)
Hash identifier: vSVNoI65Eb1LwWsUL3EPtBfOepdrgyxF0gWTX51pnCM=
Subject key identifier: 74:99:FC:4C:0C:58:30:7C:E3:3B:99:8C:D7:8F:0A:69:13:0A:DE:E4
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27E976D9
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dJn8TAxYMHzjO5mM148KaRMK3uQ.roa
Signing time: Sat 01 Jan 2022 13:00:23 +0000
ROA not before: Sat 01 Jan 2022 13:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35632
IP address blocks: 87.100.0.0/17 maxlen: 17
77.84.0.0/16 maxlen: 16
188.141.128.0/17 maxlen: 17
2a00:7180:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669611737 (0x27e976d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7499fc4c0c58307ce33b998cd78f0a69130adee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:aa:0d:99:50:4a:71:18:30:1c:ba:11:ba:
93:3f:69:40:53:dc:2f:c0:3d:19:22:22:36:ce:17:
62:a2:b8:6e:56:f5:59:0f:43:a0:1d:53:cf:33:53:
73:09:a1:0a:5c:a5:c9:3c:0f:9e:51:03:05:11:35:
3c:a0:65:61:c6:b8:4a:b8:5c:3c:78:d6:92:6b:57:
52:74:e1:e6:3e:26:94:85:35:01:10:ff:be:b0:27:
07:42:a0:d0:a1:15:6c:d7:20:9c:c5:c2:46:92:ac:
61:64:67:1c:19:bd:27:7e:3f:4f:76:50:49:c8:5a:
39:b9:f4:9a:9f:ac:f9:fb:17:0f:52:cf:77:50:9b:
e4:d3:1d:99:7b:8f:bc:dc:b4:a5:3a:7c:a5:90:4b:
fa:df:e0:cc:25:bb:19:e7:77:5a:78:88:2e:68:93:
1a:d2:3a:51:ba:76:88:07:0b:98:f4:d9:c8:3a:ca:
9e:d4:fc:a8:00:5e:eb:d6:ea:66:e2:8f:21:8e:8f:
0c:e8:4e:97:f5:43:80:7a:9a:a9:58:d7:44:45:93:
db:d0:b2:a1:25:c3:13:0a:bf:4a:dd:5b:a9:7c:3e:
63:f8:24:4f:a4:d8:56:b5:43:20:2e:15:89:7c:36:
a8:59:b0:d9:fd:a3:43:9c:bb:fd:18:fd:70:5b:a2:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:FC:4C:0C:58:30:7C:E3:3B:99:8C:D7:8F:0A:69:13:0A:DE:E4
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dJn8TAxYMHzjO5mM148KaRMK3uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.84.0.0/16
87.100.0.0/17
188.141.128.0/17
IPv6:
2a00:7180:1::/48
Signature Algorithm: sha256WithRSAEncryption
60:95:3a:99:70:3c:88:60:4c:c8:18:bd:ed:79:8a:7a:e1:fc:
f4:3f:3a:fe:a2:f8:0d:42:e8:c0:68:21:00:0c:2e:0d:21:d3:
dd:12:bc:1a:b5:48:df:69:48:40:9d:05:8e:56:5d:ec:d6:82:
6b:e8:9f:2d:e8:e9:6e:d9:13:7a:16:a8:c4:75:48:df:d5:bf:
5d:50:eb:be:53:2c:03:91:8f:09:2e:e4:54:67:c0:50:fe:49:
e9:57:03:4d:bb:d6:c6:77:d3:62:d2:1f:a3:62:83:51:a2:7f:
c8:e2:9e:90:50:9b:1e:40:b3:26:35:42:86:f3:0a:ed:b5:a6:
4d:83:73:cc:c3:da:00:30:be:01:1b:e1:fa:44:da:51:0c:fd:
0b:59:ad:c0:c2:6a:53:45:c8:cb:e9:ad:5f:01:5a:31:af:67:
26:0a:cd:2e:7c:28:e9:bc:0d:48:42:f5:40:33:73:cc:f3:67:
45:b7:2c:bd:70:e2:54:2d:a8:48:c9:4f:59:17:29:23:b4:e3:
bf:d0:ca:d9:df:03:c4:33:70:82:9d:23:7f:d0:69:ad:40:42:
39:1f:92:75:88:78:ba:c1:29:c4:62:ac:b1:b4:83:9e:ab:01:
02:c7:cf:67:80:c1:4b:50:3c:61:11:65:8e:5c:41:f7:17:0c:
ee:3e:5d:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:35 2025 by rpki-client