Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ocfuXCVMkG1iC3B_UfKU4_eAETA.roa
File: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (raw, json)
Hash identifier: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=
Subject key identifier: A1:C7:EE:5C:25:4C:90:6D:62:0B:70:7F:51:F2:94:E3:F7:80:11:30
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444F11147F9CE1294AE26AF51886B10
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ocfuXCVMkG1iC3B_UfKU4_eAETA.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 62.77.213.0/24 maxlen: 24
62.77.234.0/24 maxlen: 24
82.131.172.0/24 maxlen: 24
89.186.104.0/24 maxlen: 24
91.83.92.0/24 maxlen: 24
91.83.158.0/24 maxlen: 24
91.83.220.0/22 maxlen: 22
91.83.225.0/24 maxlen: 24
213.197.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f1:11:47:f9:ce:12:94:ae:26:af:51:88:6b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1c7ee5c254c906d620b707f51f294e3f7801130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:18:88:90:6a:75:85:c4:88:94:36:08:aa:
88:f5:18:2a:e5:0e:b0:c3:08:95:f4:95:5b:67:8c:
db:e4:a3:54:30:69:cd:e9:51:db:24:c9:d0:04:9a:
0e:c4:82:6b:fb:49:f6:d5:2d:7a:ee:b3:a3:b2:f4:
89:9f:27:d6:ac:17:f0:13:36:c9:87:80:e8:a6:97:
19:8c:c5:87:ba:4c:b5:5a:56:d6:48:55:85:7e:4a:
2d:10:5a:84:39:0a:ec:6d:af:9c:4b:10:6e:28:25:
89:54:bd:f1:58:3b:b0:5e:9d:c5:18:fe:05:e0:e9:
51:d8:63:d7:d0:98:57:c2:1d:61:2b:0e:00:c5:c4:
4a:50:fb:bd:9e:a9:e2:4c:d0:e9:1b:9b:26:27:e5:
de:b9:07:66:43:36:60:f8:7b:43:d2:ee:e1:2a:a1:
58:16:2b:91:1c:c2:84:b5:72:f1:81:68:d2:4c:5b:
62:9c:0b:10:30:98:a0:92:17:af:c0:f0:ca:cb:bc:
99:2c:42:93:8d:f4:8a:f0:bf:a0:53:e8:13:c0:ed:
9f:53:4d:07:02:88:cb:8d:13:59:43:27:2e:02:f2:
d7:01:6b:30:ab:3d:00:64:66:5c:0b:19:7e:05:e3:
0d:31:9a:71:60:ad:39:e9:84:21:d7:96:c7:5c:a8:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:EE:5C:25:4C:90:6D:62:0B:70:7F:51:F2:94:E3:F7:80:11:30
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ocfuXCVMkG1iC3B_UfKU4_eAETA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.213.0/24
62.77.234.0/24
82.131.172.0/24
89.186.104.0/24
91.83.92.0/24
91.83.158.0/24
91.83.220.0/22
91.83.225.0/24
213.197.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:2a:00:4c:48:f5:e3:8e:c9:fd:cd:58:7b:a5:1c:3f:2f:d0:
0f:d9:1c:ae:ce:2a:79:3d:92:ba:ac:2b:34:4a:f1:43:f1:2d:
bb:02:6c:91:72:27:51:32:54:4b:6f:ec:d9:67:2b:4f:f1:b4:
10:9a:69:78:e6:db:c5:b9:e9:1c:d3:40:24:0f:f4:71:cc:a4:
9b:00:41:e2:88:8d:7a:e2:ad:f0:1d:fd:28:62:d0:e7:48:6e:
7b:f7:69:97:5f:14:53:50:ea:68:39:9c:e8:b6:54:39:47:df:
40:7f:23:0c:04:61:33:b9:0a:66:3c:79:64:ff:a8:28:69:e8:
d5:e0:c4:98:fb:df:98:7b:ae:f7:74:4f:3d:c4:8b:a6:44:ce:
a7:43:08:a9:39:c4:d8:a5:3a:bb:67:64:d9:50:d5:e0:1e:05:
b1:41:12:d8:2c:bc:b5:a3:e9:e7:c1:23:99:c3:4f:68:ee:d9:
91:f1:66:67:9b:bd:62:8f:79:74:b0:62:b9:bc:fd:87:48:03:
3f:75:96:38:b0:d2:f6:9f:48:86:a0:9c:1c:e1:4b:4d:6d:b6:
44:0b:52:af:32:e5:93:b6:86:87:46:19:3e:d0:94:5a:41:af:
c9:3d:f9:d5:77:0e:a0:43:a9:51:25:c6:b8:bb:0d:b7:bf:26:
16:65:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:56 2025 by rpki-client