Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RR2by3n0lq5XyNRXXkItY8Hr0hM.roa
File: RR2by3n0lq5XyNRXXkItY8Hr0hM.roa (raw, json)
Hash identifier: SFg3wqwSuA7S9SOVc+G8ta1X6M9IYIZFRg9lLbiQtrE=
Subject key identifier: 45:1D:9B:CB:79:F4:96:AE:57:C8:D4:57:5E:42:2D:63:C1:EB:D2:13
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4885327336309017EAB4377DCBD9
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RR2by3n0lq5XyNRXXkItY8Hr0hM.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46475
IP address blocks: 77.37.64.0/23 maxlen: 23
77.37.64.0/24 maxlen: 24
77.37.65.0/24 maxlen: 24
93.127.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:85:32:73:36:30:90:17:ea:b4:37:7d:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451d9bcb79f496ae57c8d4575e422d63c1ebd213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:29:f1:27:fb:6e:11:94:6d:58:20:82:5c:
58:71:c0:d8:a7:a7:64:3d:e1:c6:62:53:db:23:de:
3a:3f:98:fc:5b:a1:e4:54:28:d0:99:1e:df:65:19:
22:e6:9e:3d:ed:a8:e2:38:9f:11:43:bd:2a:8f:b6:
24:50:66:d1:06:51:6f:d3:89:80:4a:07:f9:b6:7f:
3d:40:bb:b3:62:00:d3:c2:da:65:71:5a:27:93:e3:
ca:6c:e2:4f:8e:ca:33:5c:24:a2:4b:20:70:da:29:
99:a8:59:5d:e8:f7:18:ed:da:2e:98:1f:6e:f2:d8:
ea:9a:67:1f:2b:a4:7a:08:03:d8:cd:ac:ae:47:8d:
eb:32:50:06:30:16:f6:3c:7c:3b:f5:72:e7:34:75:
8a:9e:b1:ba:a3:30:6a:70:6c:a9:c0:e5:76:ae:cc:
41:b2:34:52:28:ef:10:2d:98:2f:51:9a:ad:a4:71:
6f:38:9b:85:14:1d:30:e8:bc:c9:a1:64:29:b6:c3:
fa:a1:a4:32:71:d9:24:b2:53:7e:13:eb:19:a0:d1:
de:d1:b5:4d:d1:ce:29:dc:ca:34:5c:2d:d9:ab:30:
ab:e8:7f:a0:8a:6a:a2:fb:4d:44:4b:e9:e8:75:f4:
49:c9:37:85:3d:b8:cd:27:7b:b4:c8:7b:ec:33:88:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:9B:CB:79:F4:96:AE:57:C8:D4:57:5E:42:2D:63:C1:EB:D2:13
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RR2by3n0lq5XyNRXXkItY8Hr0hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.64.0/23
93.127.222.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:a1:a7:23:0e:29:a8:12:5a:19:1f:66:1c:c4:d7:f2:4f:d3:
42:ec:8f:4b:91:3a:a1:9d:af:b4:55:82:fe:a0:b3:ba:a4:67:
4d:f9:45:84:f0:31:e0:96:56:48:bc:49:41:b6:7f:9f:0a:83:
b0:ce:d3:0b:7c:e3:5d:54:f0:43:50:76:a3:fd:dc:2a:34:0e:
fc:a9:5e:e4:f8:e7:5b:0d:a8:a1:a3:e2:0b:3d:3a:f8:a6:e9:
f7:53:82:80:56:ee:dc:41:05:db:84:90:44:e5:39:5c:8f:40:
3c:03:24:f7:f1:31:61:d4:f8:b5:00:c3:5f:cd:f3:a5:16:4a:
b4:7f:63:f3:13:c5:16:b9:60:b6:d9:ee:b1:47:f6:ac:8e:05:
cb:8e:aa:6a:2b:81:c2:1a:dc:86:0c:f3:a4:ee:77:85:36:16:
5e:3a:dc:cc:b0:76:92:6e:07:ac:21:c7:47:4a:e7:c1:9d:d2:
94:ff:ac:f6:8b:21:7b:ef:74:a0:e3:f5:25:27:9d:c1:80:b2:
e5:58:b9:13:e8:35:0c:51:88:4f:72:27:55:66:e0:e6:31:b6:
7c:71:de:99:af:2d:d6:19:7e:15:ee:78:fb:7d:4e:26:8c:12:
1d:ed:cf:9a:13:5e:1d:cb:b5:93:6c:1b:23:01:db:bc:7a:34:
00:33:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:27 2025 by rpki-client