Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-VMhrb9Tuw8XY5_qTM53REvjHiA.roa
File: 1-VMhrb9Tuw8XY5_qTM53REvjHiA.roa (raw, json)
Hash identifier: ydfkUCYFj7StvnvL2r6ng6qLwaPpfDcbhQtgWH6hP8I=
Subject key identifier: F9:53:21:AD:BF:53:BB:0F:17:63:9F:EA:4C:CE:77:44:4B:E3:1E:20
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4E0B314FB9C6EFE34CA366C3A286
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-VMhrb9Tuw8XY5_qTM53REvjHiA.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204471
IP address blocks: 77.37.3.0/24 maxlen: 24
77.37.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:0b:31:4f:b9:c6:ef:e3:4c:a3:66:c3:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f95321adbf53bb0f17639fea4cce77444be31e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:c1:53:b9:42:19:b5:a7:03:ee:27:7c:81:
93:75:fc:41:c3:3a:a8:14:96:89:6a:11:ce:79:31:
82:b5:35:20:9a:24:82:c7:0b:21:1b:7d:92:21:5e:
13:d6:e0:79:2f:c4:78:e1:cd:83:32:8a:e4:ee:96:
ae:0f:c6:1a:d1:21:c6:d1:70:6d:fd:9d:ff:78:56:
14:ee:03:e4:6a:6a:d1:c0:0e:95:8d:cb:78:d0:57:
53:1a:6b:59:0a:35:c9:a3:81:ea:4c:44:b8:04:5a:
83:84:f3:5b:57:ae:36:49:c4:48:9f:7b:c7:58:45:
1b:be:00:47:f2:e0:a1:c1:84:a9:96:5a:32:6f:fb:
b5:f2:71:48:0b:10:61:28:d0:b3:55:a2:d2:01:d7:
51:bc:ef:b7:f7:33:29:5d:96:fd:5c:5f:e9:4e:5a:
bc:de:54:36:02:75:4f:27:54:9a:4a:af:01:a5:53:
2b:5d:28:08:da:30:e6:52:7d:78:4d:83:a0:89:1d:
50:c2:4d:cf:9e:6f:eb:b4:8c:90:18:32:99:ae:41:
b3:3b:83:d7:6b:bf:c5:8a:1f:9a:2f:35:fe:1d:9b:
b8:39:df:3d:30:dc:68:74:64:7a:6c:6a:cd:cf:b4:
df:46:cc:1f:32:c5:16:d6:7e:05:51:83:2b:f8:e8:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:21:AD:BF:53:BB:0F:17:63:9F:EA:4C:CE:77:44:4B:E3:1E:20
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-VMhrb9Tuw8XY5_qTM53REvjHiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.3.0/24
77.37.29.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6b:b3:65:70:20:46:29:98:c6:41:af:6c:66:08:52:3a:d3:
2a:09:0b:7b:53:b4:8e:a1:74:73:26:ee:5f:5a:dd:01:58:0a:
8b:5c:71:c7:dc:ae:d0:31:09:a4:48:d9:36:6b:84:aa:03:08:
84:69:3d:3e:72:83:ef:2c:10:21:9a:a7:a4:7e:32:5d:1f:7e:
e0:56:4a:a8:b5:58:af:74:e5:9c:e5:d9:9a:f1:47:70:3e:42:
06:c6:f7:3c:bf:f7:2b:72:54:89:08:8e:e0:b8:18:26:18:4f:
e5:51:42:85:7c:ec:48:78:79:67:95:7a:06:70:c4:e8:b7:c4:
85:a8:eb:73:90:99:78:58:51:f7:dd:02:10:56:c9:d8:06:50:
74:23:a4:5d:82:04:19:69:98:44:57:ac:9d:7c:36:24:ec:40:
31:75:43:ae:79:a0:dd:2b:58:d1:3a:85:13:6c:16:fe:4c:24:
2d:54:30:2d:d6:bb:d7:b7:7f:1f:76:15:c0:9b:35:a8:fc:ab:
b5:94:cb:ed:0d:be:31:f9:8d:80:21:58:84:37:d1:f7:10:60:
4c:72:1f:0d:2a:61:15:96:60:ca:37:95:26:02:ce:cd:54:4e:
4d:a5:7c:ee:02:14:b1:16:cd:50:e9:9e:a6:76:8d:ea:f3:4a:
ad:3f:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:36 2025 by rpki-client