Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OpDlrUPqoXIapDtRAu9i9mVEJ-8.roa
File: OpDlrUPqoXIapDtRAu9i9mVEJ-8.roa (raw, json)
Hash identifier: qW4+OPNWzZk9NNHs2ZF9LCpc2DRkMne3Zobmls2c0Zw=
Subject key identifier: 3A:90:E5:AD:43:EA:A1:72:1A:A4:3B:51:02:EF:62:F6:65:44:27:EF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194673F084BD14D5E451EEBC4AF41A38A3B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OpDlrUPqoXIapDtRAu9i9mVEJ-8.roa
Signing time: Tue 14 Jan 2025 23:56:11 +0000
ROA not before: Tue 14 Jan 2025 23:56:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:67:3f:08:4b:d1:4d:5e:45:1e:eb:c4:af:41:a3:8a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 14 23:56:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a90e5ad43eaa1721aa43b5102ef62f6654427ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:ab:cd:2d:81:4c:c8:7c:74:1d:1f:43:a6:
21:f0:53:d0:f7:16:b4:b0:49:0a:01:26:db:74:b3:
86:cc:f2:45:b3:12:ae:fc:3d:c9:93:cd:8a:60:46:
fc:c4:47:e5:92:e9:22:42:7b:13:67:be:db:16:2f:
e2:40:de:39:03:47:fe:67:c0:8e:f6:4d:19:1b:08:
ed:09:2d:5a:c0:0d:00:98:5c:a6:8f:b2:35:2e:7e:
96:50:18:3d:0b:d8:76:09:c1:2c:f0:c2:24:09:75:
a9:cd:f1:b2:ac:7d:c4:b2:f9:ad:84:ae:d6:1a:24:
a1:d0:e0:2f:bd:5b:5e:9a:cd:8d:05:ec:80:2b:2b:
42:d3:87:1c:18:c6:37:ab:2f:1b:d1:40:46:71:28:
37:57:5f:58:47:f6:59:ad:94:0e:43:5c:d7:4d:f2:
28:d7:10:3d:9a:fe:cb:18:0c:8f:d4:db:b5:b8:f6:
b5:60:0f:26:8f:53:86:00:b9:1c:d7:43:11:98:e5:
67:c2:38:4e:79:e8:44:ee:89:6f:97:cd:c4:67:ef:
81:56:3c:b7:18:e1:4e:f3:56:b7:f2:36:d0:bf:57:
bb:9e:a6:f5:45:a9:96:0c:8b:d2:12:fc:c7:0d:0c:
42:5a:55:03:c4:a3:e7:6d:f8:7e:2d:0b:94:29:7f:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:E5:AD:43:EA:A1:72:1A:A4:3B:51:02:EF:62:F6:65:44:27:EF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OpDlrUPqoXIapDtRAu9i9mVEJ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.206.0/23
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9e:54:e2:39:93:45:f3:6f:87:9f:ae:4c:37:a1:56:88:61:
66:dd:af:91:15:bd:52:1b:3e:06:53:da:3f:ab:19:90:cb:bd:
a2:99:c8:83:1a:93:a6:4c:38:7e:4a:f0:7a:7f:1c:d1:33:6e:
b1:a3:b7:60:e1:e8:18:74:21:c3:2b:6c:22:bd:55:00:d3:de:
a2:9f:fd:ca:4a:62:b9:76:5d:0c:a1:dc:b6:83:98:e6:b6:8a:
93:58:2a:27:8f:70:59:90:0a:98:04:80:dd:9d:e3:b1:b4:cd:
d3:65:ad:0d:e9:59:40:a7:10:64:9f:65:39:7e:39:23:00:c4:
bb:ae:50:db:db:80:c0:c6:36:4a:29:2f:b7:23:9b:69:c7:dd:
59:48:91:4e:11:66:5c:fa:72:6b:51:f0:c7:6c:51:54:8f:5e:
a3:05:f0:41:52:fe:06:98:ad:fe:a4:3a:8a:f7:46:a8:0f:5a:
47:78:c9:41:0e:da:19:7d:88:32:2a:0d:7d:ef:c7:0c:5e:7c:
46:99:d9:db:75:ba:80:08:39:b2:c1:c4:78:e8:5f:8e:41:e6:
ed:af:49:98:e1:c5:0c:99:c9:a0:6f:c8:c5:ad:9b:86:45:99:
03:22:f6:ca:e5:13:15:46:9d:b6:4d:39:ea:6e:fb:b1:1e:3d:
d6:80:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:43 2025 by rpki-client