Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/tWR557dgEs8bad9HJxfUxpgmJ1k.roa
File: tWR557dgEs8bad9HJxfUxpgmJ1k.roa (raw, json)
Hash identifier: 5N0HzITLcLE/mHUy/uOk0e6tVM+Al2Zv5XTmG0sY4Ts=
Subject key identifier: B5:64:79:E7:B7:60:12:CF:1B:69:DF:47:27:17:D4:C6:98:26:27:59
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA461F5D4F55AD329B6C79686ED6CB
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/tWR557dgEs8bad9HJxfUxpgmJ1k.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31400
IP address blocks: 77.37.0.0/17 maxlen: 17
2a01:4d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:1f:5d:4f:55:ad:32:9b:6c:79:68:6e:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56479e7b76012cf1b69df472717d4c698262759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:bf:da:25:b0:eb:33:ef:c3:08:6a:fc:7d:
e5:33:df:17:e1:0d:84:37:e3:4c:94:a3:60:3f:a5:
ed:59:ba:56:b3:4b:ff:cd:df:fb:11:7c:ee:71:8a:
d0:56:4c:3d:62:b4:9d:37:2c:ac:55:c1:14:8b:5a:
54:99:b2:d1:96:d6:f1:62:70:a2:f6:b2:cf:d5:d5:
4a:13:1c:c4:ec:31:0e:6e:eb:b3:b0:f8:a4:64:46:
5f:4b:cd:f6:b5:44:c4:e3:8f:c9:22:b2:87:7a:65:
0a:cd:b8:3c:d2:b1:b5:69:30:e8:76:bc:6c:ec:c5:
17:1c:b8:40:e5:7b:f6:3d:22:5f:12:98:46:57:a5:
98:61:f9:0c:52:2d:c6:aa:0f:82:07:cc:de:f9:49:
cf:45:0f:20:c1:c6:82:d1:3e:e3:24:48:89:0d:51:
48:c8:68:32:91:0f:31:07:68:3a:2f:97:75:1f:97:
99:1e:06:99:40:65:ff:ce:71:d1:f5:49:e4:b2:37:
de:dc:9e:73:f7:6a:bb:1a:b1:c4:56:46:58:63:83:
0f:c5:17:1c:77:b3:91:b2:ce:31:47:99:05:8c:83:
51:93:59:94:3f:44:bc:a9:92:22:89:a2:50:47:77:
c9:56:47:a4:66:36:b5:7c:ca:bd:fc:06:c9:79:46:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:79:E7:B7:60:12:CF:1B:69:DF:47:27:17:D4:C6:98:26:27:59
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/tWR557dgEs8bad9HJxfUxpgmJ1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.0.0/17
IPv6:
2a01:4d0::/32
Signature Algorithm: sha256WithRSAEncryption
c7:ea:0c:35:94:24:da:e3:f7:61:c2:08:d9:f9:d2:96:33:4c:
b3:b4:c3:88:c9:5d:3c:54:31:8a:65:e9:84:f7:c6:5d:33:a0:
ba:f1:20:db:e1:05:7c:61:f4:c7:22:19:e0:32:b2:54:80:6c:
e8:0d:49:bc:a2:33:1c:45:71:88:bb:40:7a:6c:26:99:5f:ea:
82:57:64:43:3e:35:91:70:72:70:06:dc:10:09:3f:db:1f:fa:
d5:d0:4c:bf:aa:06:9f:cc:a5:d8:ab:2a:e3:23:34:ed:24:16:
9b:9d:11:56:b9:7d:de:ba:26:c9:a3:c7:24:eb:9c:a3:fe:47:
f1:82:8b:2d:97:36:e3:0d:f6:8a:13:3b:cd:45:2c:85:70:d7:
a7:50:2e:46:2c:bb:5a:c9:0f:77:20:73:ae:9d:09:52:5a:d8:
b8:26:de:b6:a2:e5:08:f4:c8:71:d3:14:79:8b:41:7c:f1:04:
ae:3d:ef:a8:68:a2:f6:f3:b9:75:65:a7:04:65:6b:12:09:a3:
c0:ce:3f:c2:ce:90:d2:95:77:4d:17:ef:f1:b6:3c:3c:05:4a:
84:26:2b:71:85:b1:82:34:5c:7d:ae:45:a5:1a:bf:ca:01:c6:
4c:30:99:d8:79:00:45:1f:c3:26:31:77:52:da:99:7a:47:81:
ff:bd:24:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+kYfXU9VrTKbbHlobtbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTAxMDM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTY0NzllN2I3NjAxMmNmMWI2OWRmNDcyNzE3ZDRjNjk4MjYyNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3m/2iWw6zPvwwhq/H3lM98X4Q2E
N+NMlKNgP6XtWbpWs0v/zd/7EXzucYrQVkw9YrSdNyysVcEUi1pUmbLRltbxYnCi
9rLP1dVKExzE7DEObuuzsPikZEZfS832tUTE44/JIrKHemUKzbg80rG1aTDodrxs
7MUXHLhA5Xv2PSJfEphGV6WYYfkMUi3Gqg+CB8ze+UnPRQ8gwcaC0T7jJEiJDVFI
yGgykQ8xB2g6L5d1H5eZHgaZQGX/znHR9Unksjfe3J5z92q7GrHEVkZYY4MPxRcc
d7ORss4xR5kFjINRk1mUP0S8qZIiiaJQR3fJVkekZja1fMq9/AbJeUZRVwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLVkeee3YBLPG2nfRycX1MaYJidZMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvdFdSNTU3ZGdFczhiYWQ5SEp4ZlV4cGdtSjFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHTSUAMA0E
AgACMAcDBQAqAQTQMA0GCSqGSIb3DQEBCwUAA4IBAQDH6gw1lCTa4/dhwgjZ+dKW
M0yztMOIyV08VDGKZemE98ZdM6C68SDb4QV8YfTHIhngMrJUgGzoDUm8ojMcRXGI
u0B6bCaZX+qCV2RDPjWRcHJwBtwQCT/bH/rV0Ey/qgafzKXYqyrjIzTtJBabnRFW
uX3euibJo8ck65yj/kfxgostlzbjDfaKEzvNRSyFcNenUC5GLLtayQ93IHOunQlS
Wti4Jt62ouUI9Mhx0xR5i0F88QSuPe+oaKL287l1ZacEZWsSCaPAzj/CzpDSlXdN
F+/xtjw8BUqEJitxhbGCNFx9rkWlGr/KAcZMMJnYeQBFH8MmMXdS2pl6R4H/vSTN
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:03 2025 by rpki-client