Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa
File: 1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa (raw, json)
Hash identifier: NmB1wSq7b0ndUhgjm1rnnnwLFhH3O28HPyZCF7fvGcY=
Subject key identifier: F8:AF:E1:F9:B5:12:8E:9B:AA:F0:06:44:90:D4:73:BB:A2:3B:48:84
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194236A180EFD4BE97699E344F89F979993
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214381
IP address blocks: 37.77.18.0/24 maxlen: 24
37.77.19.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.25.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:18:0e:fd:4b:e9:76:99:e3:44:f8:9f:97:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8afe1f9b5128e9baaf0064490d473bba23b4884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:d4:39:c5:0e:e1:b6:e0:e6:80:4e:21:c0:
44:ba:f7:58:94:15:49:c7:b6:7d:29:ae:26:08:b0:
bd:40:5f:b1:4d:b3:ba:78:b3:3e:65:9b:d2:bb:e9:
ab:c4:25:02:55:ba:e2:3d:e6:2d:d7:40:b6:53:21:
70:e1:c2:5e:0e:26:27:7d:d8:b0:a0:be:cb:ef:6d:
a1:92:b0:7d:75:97:0c:31:62:94:b7:12:43:19:09:
af:af:17:6c:8f:a3:94:59:43:cf:86:34:f0:48:96:
f0:97:ff:48:27:6e:4b:5c:de:16:ce:ef:0c:b4:10:
15:a0:e6:4f:e5:54:2d:44:5b:83:5f:ba:49:94:a2:
58:d2:3e:fe:44:5d:df:61:ee:1c:f2:81:4f:ce:53:
bc:f1:9a:ce:74:71:05:a2:2b:06:f2:08:71:0d:3b:
e9:3b:15:be:51:ee:36:07:c2:ac:6e:61:8c:13:0d:
77:14:a8:2e:34:d6:57:76:37:95:94:5b:60:f7:da:
8d:d7:3a:c3:a8:da:44:c8:76:28:5f:99:96:44:a6:
11:06:50:80:eb:75:f0:9b:eb:80:84:80:08:f0:93:
a3:b0:56:f7:41:d9:bf:e1:6a:0c:a5:9c:44:60:e0:
27:7a:56:c8:2f:d8:4f:d6:ed:98:67:c3:d3:64:11:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:E1:F9:B5:12:8E:9B:AA:F0:06:44:90:D4:73:BB:A2:3B:48:84
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.18.0-37.77.27.255
37.77.30.0/23
Signature Algorithm: sha256WithRSAEncryption
83:70:4c:cc:0d:70:ec:2a:78:27:d2:dc:98:68:f3:75:15:e9:
2a:23:e4:d9:b3:03:ba:bf:3a:3e:7e:41:3e:c3:b6:92:55:9c:
ca:c0:13:e8:d2:17:7f:a9:ab:4b:0a:37:2a:95:41:67:33:49:
a5:cb:c3:a4:12:2e:86:d8:fe:4d:68:b3:39:d4:5a:fa:e1:cb:
10:21:48:16:26:58:dd:cf:69:f2:70:f0:06:de:f2:a4:e2:ca:
e8:df:b2:c0:03:76:5d:43:f3:a7:9c:58:b1:d4:3b:d4:1b:c9:
3b:98:a5:00:64:a1:06:a6:66:3c:ac:16:62:52:b6:ff:f9:49:
88:16:cd:aa:29:67:fe:36:d7:62:61:8d:82:0d:62:6d:a5:29:
49:ab:7d:06:1b:b4:28:7d:7b:b5:6a:d0:80:77:aa:07:08:36:
e5:74:90:3b:8b:4b:13:b9:79:5f:47:d1:11:f7:28:9e:7e:6e:
7e:ec:7c:58:29:09:d4:26:f8:fd:e7:fb:3b:1e:74:12:fc:83:
a7:42:91:a8:d4:71:be:ef:3c:17:4a:11:0d:20:da:64:a6:37:
a7:52:49:fb:5d:51:77:44:38:70:0e:21:13:8f:ee:65:61:13:
56:f1:63:d6:25:64:0d:66:03:29:0d:8c:df:65:6d:ab:13:49:
56:1e:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:05 2025 by rpki-client