Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IjfYu5YtvnD_eqZFZoLQuuRZqW0.roa
File: IjfYu5YtvnD_eqZFZoLQuuRZqW0.roa (raw, json)
Hash identifier: vXyqFCbJqLuTFFpCDPF7GbQVCgPiH/CCLqX2I7KC0w8=
Subject key identifier: 22:37:D8:BB:96:2D:BE:70:FF:7A:A6:45:66:82:D0:BA:E4:59:A9:6D
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0195CA181164299F64E9D03F41689A07D39A
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IjfYu5YtvnD_eqZFZoLQuuRZqW0.roa
Signing time: Mon 24 Mar 2025 21:38:49 +0000
ROA not before: Mon 24 Mar 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204471
IP address blocks: 77.37.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ca:18:11:64:29:9f:64:e9:d0:3f:41:68:9a:07:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 24 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2237d8bb962dbe70ff7aa6456682d0bae459a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:a8:4e:9b:ec:ab:9f:cd:54:91:1b:d3:0b:
b7:ca:ca:d5:89:e8:00:27:d4:a9:7f:07:da:a5:03:
1d:86:26:5f:ca:43:7e:4a:0c:fd:13:19:d9:2a:41:
7f:32:60:37:05:87:87:b1:62:84:a1:c5:79:c9:8f:
1c:4d:f2:c3:7b:9e:a8:cb:31:4e:b2:a2:02:d9:82:
4b:a3:d8:5b:e2:1b:1d:6d:cf:94:ad:5b:a6:30:f9:
5b:4e:2b:ca:6a:1e:82:69:00:b0:79:de:80:0e:b4:
51:08:60:c8:6b:f4:8e:3a:8b:44:f7:91:4f:0c:43:
b0:26:3c:24:e4:18:69:33:05:9e:aa:a7:fd:f2:b1:
51:03:fd:19:d8:de:6d:5c:87:46:23:8a:84:f7:57:
6f:89:36:4b:57:76:94:93:14:53:c0:c7:7e:bd:b1:
06:45:fe:a9:5a:75:59:b7:9e:c8:ac:3a:08:07:f3:
d1:a0:34:33:6d:cd:fc:c4:91:11:0d:08:1c:51:b8:
b9:f2:c6:32:09:0b:24:dc:32:2d:73:ea:65:59:c3:
94:14:63:8c:f8:48:2d:ec:57:d6:b4:26:03:45:88:
39:61:4c:44:2b:2d:21:b8:4b:1f:fc:a6:33:2a:98:
81:b2:10:34:dc:46:16:9e:9e:29:c8:20:b3:3d:37:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:D8:BB:96:2D:BE:70:FF:7A:A6:45:66:82:D0:BA:E4:59:A9:6D
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IjfYu5YtvnD_eqZFZoLQuuRZqW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.29.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9a:92:c3:20:9b:da:a1:a9:30:22:e9:e5:6a:14:f4:14:20:
13:13:cb:e2:bd:44:11:d3:16:b7:2e:ac:dd:b7:3a:6c:c5:8c:
7f:29:c9:5a:27:ec:4b:9e:7f:c0:5c:b1:df:01:db:f4:77:2a:
83:d6:95:7d:c2:cc:55:a0:56:c2:80:1b:84:5c:e0:ea:27:fc:
4b:38:c8:96:f6:38:ca:10:4f:2e:75:3e:b2:19:ce:2b:f6:8e:
44:1c:b0:7e:24:df:23:43:df:bf:fb:3f:de:c2:ad:6d:68:8a:
2d:84:37:ea:51:6f:98:ce:f7:a6:99:8e:92:54:94:22:dc:77:
e2:7a:93:b4:fd:05:97:58:09:6d:fb:68:e5:cc:cc:7c:d3:90:
08:3b:e3:a5:78:c7:7c:c0:b1:38:93:9a:dd:6e:a2:ff:44:31:
1f:89:28:16:87:0c:a3:de:98:2f:22:8d:64:d6:8d:b8:70:0a:
28:eb:e1:2d:92:70:3c:dd:0f:19:6c:ed:9e:c1:72:0c:8d:5f:
4c:a4:84:a3:4f:cc:b0:a7:f7:ad:38:82:46:07:7f:11:4f:da:
c3:8d:ca:4a:7a:6f:35:6c:6b:38:a6:8f:58:2e:85:31:0c:4b:
27:ed:ce:77:78:60:1a:a3:2d:c7:8d:03:bd:13:b3:d2:10:60:
77:7d:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:34 2025 by rpki-client