Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa
File: Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa (raw, json)
Hash identifier: MNDf1tMg+caMWIh4pA1x8FHG09g/BDV+hXI1n2rqjLE=
Subject key identifier: 2E:3E:86:6D:11:86:47:B8:A4:5E:49:17:EF:5B:BB:90:4E:68:73:78
Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial: 019424B26C123AA3B5564269323CA5357C33
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12334
IP address blocks: 77.26.0.0/18 maxlen: 18
77.26.64.0/18 maxlen: 18
77.26.128.0/18 maxlen: 18
77.26.192.0/18 maxlen: 18
77.27.0.0/18 maxlen: 18
77.27.64.0/18 maxlen: 18
77.27.128.0/18 maxlen: 18
77.27.192.0/18 maxlen: 18
83.165.0.0/18 maxlen: 18
83.165.64.0/18 maxlen: 18
83.165.128.0/18 maxlen: 18
83.165.192.0/18 maxlen: 18
91.116.64.0/18 maxlen: 18
91.116.128.0/18 maxlen: 18
91.116.192.0/18 maxlen: 18
91.117.0.0/18 maxlen: 18
91.117.64.0/18 maxlen: 18
91.117.128.0/18 maxlen: 18
91.117.192.0/18 maxlen: 18
92.53.192.0/19 maxlen: 19
178.60.0.0/18 maxlen: 18
178.60.128.0/18 maxlen: 18
178.60.192.0/18 maxlen: 18
212.51.32.0/19 maxlen: 19
213.60.0.0/18 maxlen: 18
213.60.64.0/18 maxlen: 18
213.60.128.0/18 maxlen: 18
213.60.192.0/18 maxlen: 18
2a00:bec0::/40 maxlen: 40
2a00:bec0:c800::/40 maxlen: 40
2a00:bec0:d000::/40 maxlen: 40
2a00:bec0:d800::/40 maxlen: 40
2a00:bec0:e000::/40 maxlen: 40
2a00:bec0:e800::/40 maxlen: 40
2a00:bec0:f000::/40 maxlen: 40
2a00:bec0:f800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6c:12:3a:a3:b5:56:42:69:32:3c:a5:35:7c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3e866d118647b8a45e4917ef5bbb904e687378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:38:32:4d:85:6e:ae:5d:da:2d:f0:42:25:
8f:d1:1d:df:ac:21:3d:22:c3:f4:f9:fe:db:83:14:
fa:93:b6:de:1b:6b:85:b8:99:1a:88:14:a7:98:fc:
f0:44:03:37:75:ac:59:d5:da:af:80:7a:96:28:23:
5d:3a:90:67:69:1f:33:2f:59:78:c1:82:b1:d7:63:
57:6c:3e:1a:d9:46:73:eb:d9:7a:03:d9:7f:03:7e:
2f:6b:24:80:6f:4e:f9:44:82:43:9c:ff:59:8a:b9:
db:33:6d:04:3f:12:9d:89:ec:7b:2d:99:be:ef:13:
46:11:e2:89:a6:9c:79:60:55:80:e9:fd:7e:e1:19:
d8:46:04:3e:44:99:5b:59:48:8d:3f:c0:d5:a7:66:
d0:c5:ff:e5:67:34:15:ed:1a:c3:21:78:23:1b:01:
4c:ed:e8:9e:12:0a:76:10:17:5d:c3:4e:77:be:af:
a1:b3:57:e1:6c:50:20:7e:a2:ff:af:ce:3f:90:5c:
fe:bb:7e:0c:80:2f:34:70:33:12:c8:0c:1e:f8:3d:
f8:80:01:9f:4b:f0:a9:0a:2a:e7:45:28:7a:06:e3:
48:9b:95:aa:c8:8a:85:74:52:33:a2:d9:89:8d:2a:
75:6a:9a:6a:4f:23:dc:0c:a6:f0:79:2f:97:b6:36:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:86:6D:11:86:47:B8:A4:5E:49:17:EF:5B:BB:90:4E:68:73:78
X509v3 Authority Key Identifier:
keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.26.0.0/15
83.165.0.0/16
91.116.64.0-91.117.255.255
92.53.192.0/19
178.60.0.0/18
178.60.128.0/17
212.51.32.0/19
213.60.0.0/16
IPv6:
2a00:bec0::/40
2a00:bec0:c800::/40
2a00:bec0:d000::/40
2a00:bec0:d800::/40
2a00:bec0:e000::/40
2a00:bec0:e800::/40
2a00:bec0:f000::/40
2a00:bec0:f800::/40
Signature Algorithm: sha256WithRSAEncryption
97:a6:3d:32:c4:28:0c:58:3e:6a:d5:8b:31:c7:3f:a6:b0:93:
bb:31:a6:0e:1b:aa:d8:2c:11:11:4a:8c:1a:86:7f:21:9f:9e:
c9:63:ad:05:e4:3b:b0:2f:7f:ca:28:8b:43:df:31:21:6d:4f:
52:d8:b1:a8:04:5a:2c:24:32:28:40:e4:ab:89:ff:18:0f:75:
96:58:10:89:15:1a:de:b6:56:af:e0:e3:6f:f0:86:e2:14:19:
14:e1:0a:b8:cd:3f:85:ec:35:72:7c:5f:b3:ef:cb:f2:c0:46:
73:c4:56:cd:f1:0b:42:51:5e:15:bb:ba:12:ea:c8:fa:0f:fb:
4a:51:11:96:f3:42:14:d5:12:58:b5:bb:ff:d4:2b:8f:18:35:
4c:9f:a2:6b:aa:e9:d3:8d:59:cd:1e:4a:32:68:c3:80:72:e8:
3c:41:17:0c:e8:5f:2e:d5:91:7e:82:6e:b3:5a:33:9b:11:0f:
ab:ab:95:85:0d:5a:c6:69:65:eb:d8:ee:a7:96:63:00:db:a0:
a8:e8:f4:4a:3a:e9:56:8f:31:54:13:6c:44:76:9a:13:6e:98:
b4:3d:da:6d:d0:8c:0e:db:f7:53:7a:62:41:ac:34:dd:84:e0:
0f:61:8f:04:71:c2:1d:2a:ff:6f:1f:66:2a:2c:a3:b7:dc:71:
45:1a:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:35 2025 by rpki-client