Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ulVKP7JCGC0iMQQVoFCQANnsK_A.roa
File: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (raw, json)
Hash identifier: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=
Subject key identifier: BA:55:4A:3F:B2:42:18:2D:22:31:04:15:A0:50:90:00:D9:EC:2B:F0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB98938EBED2BEC186AAE44298FF2E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ulVKP7JCGC0iMQQVoFCQANnsK_A.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 77.242.145.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:98:93:8e:be:d2:be:c1:86:aa:e4:42:98:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba554a3fb242182d22310415a0509000d9ec2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:41:5d:c7:e1:91:7a:eb:28:1c:8e:47:41:
a1:06:90:6f:0c:a1:73:f0:6a:f9:b2:95:a2:3d:ab:
cc:00:b2:8f:03:29:a8:40:99:5f:8a:2d:2e:e8:91:
a5:b5:22:d5:41:2f:44:b2:38:48:2f:88:34:bd:58:
8b:71:81:5b:ee:d4:f3:ff:f8:13:c6:38:57:0f:5d:
bf:43:42:b4:cf:56:e0:32:55:52:6e:90:98:0d:4e:
ba:8c:c9:df:bc:4f:d2:b8:ff:a1:ac:ac:09:98:b7:
66:c9:ef:21:84:89:32:6e:25:ab:d3:79:e8:d1:62:
76:f2:b8:99:15:45:a5:b9:59:d0:44:47:1a:5c:18:
f2:25:50:48:9a:3a:fc:de:46:0a:48:f3:8d:3b:0c:
d5:0a:fe:4e:dc:27:b6:7c:45:45:db:a7:72:91:2d:
8b:a5:69:0a:69:3e:a0:a6:dc:e3:22:2f:56:80:f8:
d5:aa:40:50:fa:1b:61:f3:5f:fb:62:af:dd:ac:0c:
e2:54:4b:91:1f:8b:18:b5:c1:f5:b0:92:a3:37:1f:
17:18:d2:13:65:27:6d:36:f5:c5:39:16:4e:2e:10:
fd:72:13:5a:51:13:1f:01:30:93:e8:25:52:44:d0:
c2:6e:bd:ec:05:d1:20:e7:b4:ec:fa:d6:aa:e8:f7:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:4A:3F:B2:42:18:2D:22:31:04:15:A0:50:90:00:D9:EC:2B:F0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ulVKP7JCGC0iMQQVoFCQANnsK_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.145.0/24
77.242.149.0/24
77.242.157.0/24
88.209.200.0/24
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:99:8b:1d:f7:43:fa:7d:5f:ee:1b:10:b8:21:78:2b:45:9d:
fb:bc:63:42:b4:1d:be:96:a1:48:e5:21:bf:2e:e0:f3:f8:76:
6d:f9:95:e4:c9:05:71:1e:21:a5:a0:d3:e5:7b:20:7a:26:7f:
d3:5c:ec:df:0b:35:0b:6e:bb:74:88:f2:0b:17:6c:07:da:3e:
e4:77:7e:2a:22:5b:97:45:bc:d1:68:3d:0a:da:07:d2:d0:0c:
ba:2b:63:51:67:c2:ae:7e:90:f5:b8:9f:8c:15:1c:f9:d8:bd:
30:92:5e:e4:ae:e2:f9:ab:a3:d8:6a:40:e4:7e:26:fb:3e:5c:
ea:6b:45:06:db:e7:70:4a:6a:b2:2e:7e:12:fc:8a:e3:cc:86:
6d:5f:2a:2c:22:a3:9f:59:f0:41:67:8d:ce:28:96:43:0a:ad:
2e:18:63:04:d1:9b:61:37:06:18:56:e1:6b:6f:9e:63:74:86:
32:0d:ff:d7:fd:8f:1b:04:d7:ee:78:0e:c8:1f:6e:bc:18:26:
8a:f0:a3:fe:33:30:22:91:88:53:06:10:4c:35:ea:bb:57:8e:
d3:bf:82:18:27:a0:c8:b6:16:f1:de:b4:cc:74:46:d0:93:41:
44:e0:f3:4e:78:69:02:81:1f:be:6d:2c:79:c1:bf:a4:93:2f:
7b:be:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:05 2025 by rpki-client