Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Kqko-PBMnjJX2LqRDsraK3nMZ_I.roa
File: Kqko-PBMnjJX2LqRDsraK3nMZ_I.roa (raw, json)
Hash identifier: xmsMy8hw5NOfwK55R2LUttIbRVQpnlrz3MlFhvbC8rM=
Subject key identifier: 2A:A9:28:F8:F0:4C:9E:32:57:D8:BA:91:0E:CA:DA:2B:79:CC:67:F2
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193DF64C6E82D9DE257EBFBB3C45B6B2B59
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Kqko-PBMnjJX2LqRDsraK3nMZ_I.roa
Signing time: Thu 19 Dec 2024 14:49:03 +0000
ROA not before: Thu 19 Dec 2024 14:49:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 77.37.84.0/24 maxlen: 24
93.127.148.0/23 maxlen: 24
93.127.152.0/23 maxlen: 24
93.127.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:64:c6:e8:2d:9d:e2:57:eb:fb:b3:c4:5b:6b:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 19 14:49:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aa928f8f04c9e3257d8ba910ecada2b79cc67f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:51:91:52:54:4b:b9:cb:45:71:c4:5e:86:
59:26:8d:85:da:c2:3a:6e:3d:07:0d:e8:55:a9:ef:
7f:e7:22:22:16:12:1a:38:4a:91:68:a3:a1:b6:fe:
61:f8:e2:11:30:1f:47:53:da:ca:a8:14:6d:9d:4b:
91:80:54:f2:3f:85:84:fe:1e:b4:02:26:c4:1a:aa:
11:d2:aa:3b:ac:6e:a2:20:e7:26:13:0f:c9:25:ee:
62:f7:b7:58:77:81:71:ba:79:88:4c:e5:fa:b5:77:
e0:8a:dd:6b:1f:00:6d:74:9b:fc:41:00:de:52:de:
fb:92:5a:86:09:8b:ce:eb:13:3d:0a:08:e8:81:6f:
9d:8d:0d:78:f3:70:fa:28:ef:2c:85:da:11:2e:b7:
ef:36:1c:9e:1c:eb:ec:9d:f3:79:fe:cb:13:63:d3:
3e:ec:7c:82:d4:04:95:3e:43:5a:f5:dc:8b:d4:62:
4b:fe:ab:c4:ca:19:5a:71:4e:6d:5a:25:6f:f6:85:
72:ba:83:95:09:8e:8b:fc:78:d7:c0:7a:74:e9:17:
40:19:50:51:f0:9a:89:e8:41:eb:22:39:b8:01:69:
94:7d:6c:92:2d:18:1e:9b:09:b3:b4:22:32:1d:b8:
c4:8a:de:5e:b2:2b:99:95:54:16:5a:12:4b:09:15:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:28:F8:F0:4C:9E:32:57:D8:BA:91:0E:CA:DA:2B:79:CC:67:F2
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Kqko-PBMnjJX2LqRDsraK3nMZ_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
93.127.148.0/23
93.127.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:27:a3:fe:dc:3b:48:10:7b:71:ed:b9:ca:45:c4:ca:a0:a0:
d4:e2:ab:1e:3c:a8:e6:3e:13:51:07:06:56:46:4b:e9:84:45:
01:e7:fa:3a:a0:10:77:10:b7:84:d1:da:0a:2c:56:2e:b3:6d:
60:5e:f3:bd:b5:3a:a3:36:fe:aa:48:d8:d2:f3:47:2b:e4:f6:
de:fe:e2:e0:91:30:7f:a7:b5:ec:14:86:81:8e:b8:8d:83:59:
5c:63:5e:59:8d:47:32:44:b6:ef:fe:fd:3a:93:3f:84:99:cd:
03:53:3e:60:12:7b:5c:1d:3f:f7:32:b2:7e:5b:9b:e7:78:17:
8f:f4:00:78:a4:68:0a:55:73:4c:a0:34:0b:5a:55:27:0b:59:
e4:25:c0:b4:4f:1f:b9:a1:f3:3c:63:c7:b2:06:e5:0b:00:f7:
65:d6:13:26:d4:20:8c:0c:7f:b7:2e:60:ba:b3:31:f5:2f:55:
2e:7e:58:70:8d:6c:41:c3:d3:c9:ec:30:68:b6:83:ce:ca:9f:
28:2b:82:c1:8b:9b:e9:39:f9:34:a6:bf:ba:99:7f:1a:d1:28:
e6:f4:b5:a1:cf:c4:b6:b4:c5:de:0f:ba:31:8f:26:66:8b:a9:
b0:cf:9b:48:88:b1:36:2d:20:ae:f1:f5:e0:35:db:c0:c7:55:
88:0d:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:17 2025 by rpki-client