Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3il9k9kXDNL2w1vwi-jsWgXj7Cs.roa
File: 3il9k9kXDNL2w1vwi-jsWgXj7Cs.roa (raw, json)
Hash identifier: wYgUViS2jW9Q9QXJxvxQsQTYzFOjlOCzYoWeVuy2Ze0=
Subject key identifier: DE:29:7D:93:D9:17:0C:D2:F6:C3:5B:F0:8B:E8:EC:5A:05:E3:EC:2B
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA45850E5FD5F7E9AABA820B5B030B
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3il9k9kXDNL2w1vwi-jsWgXj7Cs.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 77.37.84.0/24 maxlen: 24
93.127.148.0/23 maxlen: 24
93.127.152.0/23 maxlen: 24
93.127.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:85:0e:5f:d5:f7:e9:aa:ba:82:0b:5b:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de297d93d9170cd2f6c35bf08be8ec5a05e3ec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:67:ef:d9:aa:de:3d:4c:c8:f9:47:41:2b:
f7:ea:1b:17:a7:5d:15:6e:fc:0b:00:a0:11:35:94:
60:3a:a8:aa:32:96:54:b3:7b:52:49:24:ca:c8:69:
21:9f:4a:43:52:31:d3:f0:63:08:c2:4b:c7:35:96:
74:98:14:c4:4b:3b:d0:34:70:38:f4:8f:56:8c:41:
a5:00:96:60:53:3a:2d:f6:63:78:9a:ac:2b:3f:bf:
44:38:d6:2d:5b:8f:11:fc:f0:c6:a5:6d:8b:ef:51:
08:c6:b9:1d:c4:13:36:a2:18:69:40:96:c5:a5:7e:
cc:e6:53:ac:cf:be:21:0e:81:39:45:df:e0:b9:f4:
a3:6e:1d:65:41:6f:44:4f:55:77:8d:bd:6c:f0:e6:
ce:1c:eb:97:1a:ad:bd:a8:70:ec:d9:ea:fb:09:71:
08:85:5c:b2:21:44:58:9d:2e:3d:b2:be:1b:51:b4:
19:95:d2:da:e3:2d:96:66:a2:e6:8e:6d:00:73:80:
85:6a:16:ad:3f:de:0b:83:ef:24:2d:95:94:9d:32:
79:82:ea:f5:af:80:06:d9:ae:23:70:cd:84:d5:2c:
ad:cf:4f:7f:a6:4a:d5:54:52:39:21:52:1f:bb:13:
1b:97:d7:34:72:5f:56:65:6c:01:e2:13:cb:0d:f9:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:7D:93:D9:17:0C:D2:F6:C3:5B:F0:8B:E8:EC:5A:05:E3:EC:2B
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/3il9k9kXDNL2w1vwi-jsWgXj7Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
93.127.148.0/23
93.127.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:42:c6:d0:8e:a2:00:7f:af:7b:c2:6d:54:c7:4d:59:b6:79:
f2:47:2e:a1:74:66:0c:c3:89:c6:8f:51:fc:5d:16:95:76:af:
b3:06:63:89:27:8a:af:ad:70:2f:69:23:20:af:dd:5d:9b:ab:
82:e9:c4:d3:0a:78:70:b7:a9:e1:09:16:a8:8d:68:49:a1:70:
7f:a8:52:2f:fd:ee:4e:a8:dc:9e:dc:68:98:ae:0d:ac:9c:ca:
7e:cb:6b:6d:37:c8:60:3b:fa:9b:66:4e:9e:d4:b7:75:a7:a5:
ef:62:e1:e6:83:55:8b:5a:28:ec:14:d2:91:03:16:b7:4f:bc:
72:3d:8f:6d:fc:a4:97:e9:3f:32:d1:35:a0:6c:88:09:96:08:
4e:97:ad:2d:f2:f9:91:b3:c6:74:55:58:93:fb:53:dd:04:98:
c1:29:4c:53:13:ab:0b:85:c4:6d:f4:c8:df:5f:07:6f:5a:ce:
bc:1e:a6:76:9d:5b:0e:b0:37:1e:55:a4:a0:1a:1f:5a:27:5f:
2a:7c:98:c7:10:d0:27:31:08:74:85:73:94:2e:cf:80:7a:ac:
14:6d:3c:33:b4:18:e1:d8:93:ab:c1:aa:35:aa:70:c8:c3:11:
cc:4e:c4:c4:9e:9b:d4:73:26:b7:29:57:40:24:7f:0d:17:34:
94:5c:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:24 2025 by rpki-client