Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/bGl-O1VWsJiqIgDexKk7dKheHQQ.roa
File: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (raw, json)
Hash identifier: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=
Subject key identifier: 6C:69:7E:3B:55:56:B0:98:AA:22:00:DE:C4:A9:3B:74:A8:5E:1D:04
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01941FFAB28728424A9BECA4C50D8E297A34
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/bGl-O1VWsJiqIgDexKk7dKheHQQ.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199702
IP address blocks: 77.77.49.0/24 maxlen: 24
88.80.127.0/24 maxlen: 24
213.149.154.0/24 maxlen: 24
213.149.156.0/24 maxlen: 24
213.149.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b2:87:28:42:4a:9b:ec:a4:c5:0d:8e:29:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c697e3b5556b098aa2200dec4a93b74a85e1d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:f0:6e:be:71:32:8e:19:04:9d:4f:47:1c:
b0:7e:15:fb:96:ef:76:44:0d:84:8e:36:48:00:d1:
29:d9:f7:4c:d0:c4:cd:d9:47:35:db:df:fe:69:9d:
14:05:61:73:e9:ff:80:09:23:c3:5a:fe:16:a4:ef:
67:1b:be:06:24:a2:fd:a0:20:56:ab:e4:fc:37:37:
67:7c:d2:3a:f9:96:d6:e0:62:47:34:42:17:1b:f0:
b0:70:1b:41:7b:a2:d0:a5:8e:6e:61:53:f3:a7:f3:
4e:4f:5e:4f:73:40:f0:3a:37:e9:02:e4:d7:09:c5:
4e:05:83:97:49:c5:2b:e6:78:29:c7:27:b3:ff:57:
7c:5f:59:07:27:10:b0:aa:d3:2e:c3:d2:03:20:d1:
b5:f1:29:ad:e3:ff:44:5d:ed:f5:4a:b3:07:8e:29:
95:f7:a0:51:be:bf:d7:9c:d8:df:39:8c:3e:b2:e9:
33:46:27:db:eb:5c:17:4f:91:65:01:e5:e9:7b:2f:
2e:5d:0c:1f:7f:1a:28:e2:2f:2b:cb:df:b4:e3:5a:
a8:04:df:fd:07:61:e2:70:86:5c:09:54:97:c6:aa:
b6:ff:ce:4a:ad:ec:92:33:12:d9:be:aa:dd:de:d1:
96:78:88:87:f0:be:fc:a1:fd:3d:eb:4f:51:91:70:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:7E:3B:55:56:B0:98:AA:22:00:DE:C4:A9:3B:74:A8:5E:1D:04
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/bGl-O1VWsJiqIgDexKk7dKheHQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.49.0/24
88.80.127.0/24
213.149.154.0/24
213.149.156.0/23
Signature Algorithm: sha256WithRSAEncryption
05:bb:58:eb:9f:fc:ec:8e:49:d9:d7:a5:f2:e3:5b:34:2c:f2:
fe:d4:ab:c2:20:b8:0b:e5:a5:6c:56:b1:94:5f:7d:65:23:13:
0f:31:37:2b:de:54:13:24:0f:5c:8e:86:14:10:68:5e:62:55:
37:74:f3:49:c5:de:18:e3:da:57:68:8c:11:fa:12:0e:d2:02:
53:ed:f2:b2:39:05:6d:db:ab:b8:44:45:72:55:b2:ea:93:d7:
4f:0e:5d:89:d5:d8:c1:8f:d0:1a:11:20:cf:c3:7e:72:f4:50:
b6:a4:49:57:34:47:f2:d0:ba:47:dd:fc:09:ab:03:59:1b:37:
e2:cf:c5:cc:08:63:ac:10:ac:fd:40:ad:38:a8:ed:17:a4:39:
c1:21:16:64:e9:87:a8:0b:2e:04:a0:48:e2:c7:19:95:f0:51:
16:19:a2:d2:5b:56:69:b2:72:00:a6:f8:4f:35:06:87:6d:ac:
ba:17:c8:79:e6:4f:3a:02:87:66:a4:33:d2:e5:c9:be:d6:f9:
9c:8b:cb:9f:f2:8f:8b:7d:7c:7d:29:5f:bf:90:15:02:db:bd:
fe:1f:2b:37:2b:55:9f:6d:6a:0f:ca:49:c6:c9:69:60:66:1b:
7b:2b:29:7a:23:ff:56:0f:fd:04:de:c3:ca:bd:d1:53:fd:79:
b4:95:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:44:54 2025 by rpki-client