Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Hl87tUhseJrx8ua_eZqEp-JXnL8.roa
File: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (raw, json)
Hash identifier: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=
Subject key identifier: 1E:5F:3B:B5:48:6C:78:9A:F1:F2:E6:BF:79:9A:84:A7:E2:57:9C:BF
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019427B5DC9E541E3F54A86EB722C291F5EF
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Hl87tUhseJrx8ua_eZqEp-JXnL8.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50126
IP address blocks: 77.232.144.0/24 maxlen: 24
77.232.145.0/24 maxlen: 24
77.232.146.0/24 maxlen: 24
77.232.147.0/24 maxlen: 24
77.232.148.0/22 maxlen: 22
77.232.152.0/24 maxlen: 24
77.232.153.0/24 maxlen: 24
77.232.154.0/24 maxlen: 24
77.232.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dc:9e:54:1e:3f:54:a8:6e:b7:22:c2:91:f5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e5f3bb5486c789af1f2e6bf799a84a7e2579cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9b:89:6e:d3:39:36:8e:6a:da:49:75:a5:
23:79:1a:d1:a3:d9:e1:87:c1:e9:45:29:9b:73:40:
ac:6c:6b:f3:36:aa:5e:6e:d6:1c:4c:1f:87:0b:0d:
a9:6c:ac:87:9e:25:df:92:57:0a:1d:e2:62:09:f4:
23:73:54:3d:6f:2c:ca:8b:55:b1:e4:9a:71:f6:9a:
b1:32:c0:fd:f0:5c:26:6e:1a:0c:4d:ef:1e:fb:46:
86:5d:94:a1:d6:2b:23:b3:c3:e3:3d:63:ad:90:ee:
7a:10:95:9b:4b:85:3e:3c:c3:98:25:1d:46:ba:a5:
d1:fc:52:27:60:b5:24:0d:96:94:94:c5:c7:03:db:
67:de:52:94:04:2d:ab:c7:83:3b:ed:06:8b:1a:ea:
d7:41:a8:8a:ab:9f:41:4f:0b:d2:c3:ff:80:78:64:
3d:30:5c:23:c5:bf:96:72:59:03:33:5c:be:a0:79:
d8:17:65:c5:66:71:b5:09:21:af:33:70:38:11:72:
68:2d:62:20:60:8e:66:53:25:86:cd:40:67:8c:8b:
c8:a2:9f:f3:ad:88:f4:eb:7a:b7:5b:b8:f4:8e:2d:
98:3f:77:00:7a:78:b0:c7:7a:4f:21:87:24:a8:15:
b0:09:9b:5d:f2:3d:7a:93:c7:78:63:13:fb:34:19:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:3B:B5:48:6C:78:9A:F1:F2:E6:BF:79:9A:84:A7:E2:57:9C:BF
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Hl87tUhseJrx8ua_eZqEp-JXnL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.144.0-77.232.155.255
Signature Algorithm: sha256WithRSAEncryption
35:37:2a:9b:ba:f3:1e:45:08:c2:4b:af:86:d4:af:e8:e1:e1:
01:d8:21:fc:48:fc:f9:8f:d3:cf:bf:8b:e4:1c:61:13:55:d8:
a9:7c:50:04:5a:b7:ec:f6:7b:5f:93:51:51:8c:45:a2:a3:3c:
78:3e:9f:ba:cb:c6:1d:0e:8f:61:da:b2:1f:02:d4:d9:75:4c:
05:9a:17:98:a7:9e:77:6c:7c:28:37:06:d8:14:01:50:51:42:
13:e4:ca:7e:db:f4:a0:64:05:9e:0a:f8:e3:ff:0c:29:df:f6:
59:a7:bf:db:80:70:a4:fe:96:0f:e6:0e:29:a6:10:ff:05:1a:
07:ee:cb:e4:f0:b4:f1:24:e0:8e:fc:8c:89:af:83:cb:e4:16:
ab:c0:8b:a5:4e:f9:42:21:5f:8a:a9:29:be:06:c2:7b:11:36:
ce:a1:9f:b8:12:62:1f:63:93:27:36:09:f0:15:c4:72:ea:d6:
08:ab:ce:5f:ac:56:cb:56:4c:3e:2d:36:44:79:7d:10:37:2d:
6f:4a:2f:de:d9:84:30:54:30:46:cf:b6:a2:4d:79:4f:11:7c:
ba:3f:77:5b:24:6e:ef:5c:77:f5:0a:46:fb:cb:9d:73:84:47:
3b:7b:e7:39:4b:3a:0c:33:8a:12:5c:56:2d:ad:41:3c:da:68:
c1:3a:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:45 2025 by rpki-client