Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/dxYsy90KXOXYJr1C_txNtkhoQyI.roa
File: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (raw, json)
Hash identifier: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=
Subject key identifier: 77:16:2C:CB:DD:0A:5C:E5:D8:26:BD:42:FE:DC:4D:B6:48:68:43:22
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019423D79D39D47026F6105F8515DB373087
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/dxYsy90KXOXYJr1C_txNtkhoQyI.roa
Signing time: Wed 01 Jan 2025 21:48:40 +0000
ROA not before: Wed 01 Jan 2025 21:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208800
IP address blocks: 77.242.240.0/21 maxlen: 21
77.242.240.0/22 maxlen: 22
77.242.240.0/23 maxlen: 23
77.242.240.0/24 maxlen: 24
77.242.241.0/24 maxlen: 24
77.242.242.0/23 maxlen: 23
77.242.242.0/24 maxlen: 24
77.242.243.0/24 maxlen: 24
77.242.244.0/22 maxlen: 22
77.242.244.0/23 maxlen: 23
77.242.244.0/24 maxlen: 24
77.242.245.0/24 maxlen: 24
77.242.246.0/23 maxlen: 23
77.242.246.0/24 maxlen: 24
77.242.247.0/24 maxlen: 24
77.242.248.0/24 maxlen: 24
77.242.249.0/24 maxlen: 24
77.242.250.0/24 maxlen: 24
77.242.251.0/24 maxlen: 24
77.242.252.0/24 maxlen: 24
77.242.253.0/24 maxlen: 24
77.242.255.0/24 maxlen: 24
91.201.4.0/22 maxlen: 22
91.201.4.0/24 maxlen: 24
91.201.5.0/24 maxlen: 24
91.201.6.0/24 maxlen: 24
91.201.7.0/24 maxlen: 24
188.116.28.0/22 maxlen: 22
188.116.28.0/24 maxlen: 24
188.116.29.0/24 maxlen: 24
188.116.30.0/24 maxlen: 24
188.116.31.0/24 maxlen: 24
2a0e:6e80::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:9d:39:d4:70:26:f6:10:5f:85:15:db:37:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jan 1 21:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77162ccbdd0a5ce5d826bd42fedc4db648684322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:03:b2:f9:b2:56:b6:cb:85:af:d5:35:d1:
18:43:42:82:20:b2:99:51:c1:08:a6:de:dd:27:70:
ca:dc:5a:33:c8:c2:79:55:81:4d:2c:0c:ae:60:b6:
d9:a9:84:19:88:e4:13:bb:76:2b:2a:ed:0b:9c:b9:
b5:95:93:6c:e6:54:5b:45:19:0b:86:43:dd:72:95:
f9:12:15:47:5a:ed:a5:41:be:ab:ca:48:91:d2:4d:
0d:e6:09:ba:b7:90:9c:d7:f0:bb:eb:a3:b0:4e:2a:
5e:80:1c:8d:e9:c2:82:21:6a:43:73:fc:31:ac:32:
60:60:cb:34:a7:3a:62:ff:fa:9f:46:83:bc:b8:b7:
c5:76:05:d4:21:27:ed:b0:e7:ad:f2:9d:78:d0:29:
5a:5c:7c:6d:11:3c:73:22:eb:4e:11:d0:15:89:4e:
9f:e8:a2:37:31:54:c8:8a:d4:cf:d5:5a:69:e8:78:
4a:85:04:22:3c:4a:de:a9:3d:18:22:66:36:98:16:
e0:0f:ac:7d:47:a1:b8:d4:34:4b:67:02:cf:db:cc:
60:9a:c4:e6:5b:4f:19:d6:43:1f:fa:59:df:0a:8e:
b0:0a:14:4e:13:d3:46:64:a3:ac:a1:38:9a:65:f2:
89:37:e1:e5:3d:9a:de:ee:55:5e:fe:10:ae:12:9d:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:16:2C:CB:DD:0A:5C:E5:D8:26:BD:42:FE:DC:4D:B6:48:68:43:22
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/dxYsy90KXOXYJr1C_txNtkhoQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.240.0-77.242.253.255
77.242.255.0/24
91.201.4.0/22
188.116.28.0/22
IPv6:
2a0e:6e80::/44
Signature Algorithm: sha256WithRSAEncryption
85:10:b3:12:87:b0:ae:07:25:c9:f2:8b:6c:57:0c:14:07:b6:
20:51:35:d5:cf:1b:2f:ca:98:74:1f:cd:99:a7:90:01:e2:3c:
a9:09:50:f6:20:71:ab:c0:e3:a5:93:0a:c7:11:38:c4:5c:0e:
4a:68:ad:57:cd:05:59:76:4d:22:65:d0:02:b4:71:eb:66:ab:
d8:6c:80:3c:cb:62:32:54:ab:00:43:cd:16:44:ca:69:96:a8:
15:c9:94:75:0f:60:61:8c:4b:20:38:11:0e:ac:2a:59:cd:ce:
a7:a4:cc:74:35:32:7a:6c:70:bf:1d:fc:d7:31:33:00:e1:e8:
56:c2:b4:66:cf:87:34:82:84:e5:d3:46:24:d8:41:4a:d3:50:
3c:4e:33:67:1f:39:6b:04:03:1f:ee:1f:bd:61:98:3e:8d:ae:
4c:01:0e:b4:f2:7e:52:ba:2f:d7:dc:ad:72:2d:fa:f0:68:4c:
21:54:7b:bc:b1:54:64:d6:14:b8:fc:9b:ff:55:e0:05:1d:c4:
b6:b2:c3:32:22:b6:d8:07:a9:7f:d8:3e:9d:aa:63:50:31:e7:
9c:83:d3:6d:c5:5c:f5:e1:44:27:f1:44:a2:09:94:a8:71:5e:
9b:1a:6c:3d:c5:aa:71:4a:e7:9b:10:7d:b3:84:c3:a5:db:b5:
d2:e9:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:54 2025 by rpki-client