Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RT9448mqN-w3XkBU6IcgzeNbfA8.roa
File: RT9448mqN-w3XkBU6IcgzeNbfA8.roa (raw, json)
Hash identifier: EKMWUqfRX504CZVM9ZlUzyAPyQ6XY1HZs2jnsLG3mg8=
Subject key identifier: 45:3F:78:E3:C9:AA:37:EC:37:5E:40:54:E8:87:20:CD:E3:5B:7C:0F
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018A0D42A00F2D47204443D9D49D3D761539
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RT9448mqN-w3XkBU6IcgzeNbfA8.roa
Signing time: Sat 19 Aug 2023 10:06:24 +0000
ROA not before: Sat 19 Aug 2023 10:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39758
IP address blocks: 77.81.138.0/24 maxlen: 24
77.81.137.0/24 maxlen: 24
89.36.21.0/24 maxlen: 24
193.203.204.0/23 maxlen: 23
93.115.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:42:a0:0f:2d:47:20:44:43:d9:d4:9d:3d:76:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Aug 19 10:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453f78e3c9aa37ec375e4054e88720cde35b7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:f7:df:f5:bb:1a:9a:07:a6:5e:ed:c3:96:
dc:c5:5f:fc:84:c4:70:3d:67:f8:04:97:d1:ce:89:
14:9b:aa:8b:c2:39:6c:e8:46:0c:59:15:25:66:47:
4f:05:84:b6:7a:1e:c4:fd:c7:20:18:67:42:12:c9:
58:6c:ed:aa:cf:7f:01:c5:4e:5c:00:ff:e7:09:76:
d5:a0:bf:04:d5:8b:ea:11:5e:51:87:ac:3c:56:03:
3d:d0:42:67:f2:4d:18:5d:41:6f:aa:9f:e7:4c:3a:
29:eb:27:a4:d5:84:4a:7b:0a:3a:48:0e:30:96:c7:
d7:c9:0e:1c:c8:04:cc:26:13:7c:19:e8:9d:b9:c2:
03:08:56:4a:3c:40:91:cd:47:0a:c7:ca:db:87:4f:
b4:92:27:34:60:32:93:90:40:10:d8:04:56:60:2a:
68:ab:53:a3:24:e5:5a:21:2a:58:38:8c:c3:f4:29:
d2:29:d9:f3:d4:46:4c:d0:88:5a:c1:dc:77:53:e5:
9a:60:df:be:20:ad:9e:f4:09:d6:68:f6:ca:a2:1c:
b2:18:b4:48:7f:4b:6f:4c:34:b6:60:0e:cb:5e:fb:
e0:41:03:90:b7:4d:28:dd:07:27:0a:1b:37:08:0f:
bf:5d:11:ee:d3:b3:6a:44:cc:9a:d6:94:63:bc:2e:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:78:E3:C9:AA:37:EC:37:5E:40:54:E8:87:20:CD:E3:5B:7C:0F
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RT9448mqN-w3XkBU6IcgzeNbfA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.137.0-77.81.138.255
89.36.21.0/24
93.115.248.0/22
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:dd:2a:fa:9b:2c:79:ae:98:18:57:b8:49:5b:31:29:f6:a1:
2b:e1:f7:42:4e:eb:7b:2a:ef:e3:65:41:e5:06:46:c7:6b:a7:
74:fe:6a:80:c9:e1:dd:46:f0:9c:02:b6:39:c4:60:4d:b1:5a:
59:cf:63:5f:d4:7f:ff:b3:d6:9d:24:ce:6b:70:e1:9d:be:d7:
61:7f:8e:50:2b:50:91:88:58:eb:ab:f3:69:12:8f:06:58:70:
0c:d8:fd:81:66:f9:4f:20:2f:70:7f:07:93:1c:78:50:9e:64:
c7:06:db:92:ff:a2:4d:0c:64:3c:b7:30:b5:b4:90:10:66:4b:
d3:35:05:21:c6:73:b7:21:30:89:28:91:97:21:d6:57:fc:f5:
77:e2:e3:26:c1:f1:ba:51:c0:38:61:33:87:e1:fe:6f:13:c0:
2c:f4:c8:c2:a2:90:81:45:b7:c2:b2:56:d0:1c:e6:ac:3e:0d:
e2:c3:23:2c:c1:0f:86:3f:12:ec:ac:c4:9e:94:b6:4b:52:68:
0e:f3:ae:1c:d8:f4:ef:b5:75:ce:66:f6:7c:58:1b:64:59:a6:
b6:32:7a:c7:e7:63:c7:9f:00:17:08:d6:ca:29:f9:da:8e:84:
40:b3:8c:fd:1a:f1:33:7e:eb:4e:c4:6b:48:a6:36:c6:de:06:
44:58:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:05 2025 by rpki-client