Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/_coXkpBP9EA8NOBWm1zr-9LsuK8.roa
File: _coXkpBP9EA8NOBWm1zr-9LsuK8.roa (raw, json)
Hash identifier: U04zn62VPKw2jHNQcD8ymCzfkqU2og7wXVzNuONbEgo=
Subject key identifier: FD:CA:17:92:90:4F:F4:40:3C:34:E0:56:9B:5C:EB:FB:D2:EC:B8:AF
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 019425FC7CB4810AFF733338E29DA12A9FB2
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/_coXkpBP9EA8NOBWm1zr-9LsuK8.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59835
IP address blocks: 77.80.128.0/17 maxlen: 17
77.80.253.0/24 maxlen: 24
77.80.254.0/24 maxlen: 24
77.80.255.0/24 maxlen: 24
185.69.168.0/24 maxlen: 24
2a05:2240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7c:b4:81:0a:ff:73:33:38:e2:9d:a1:2a:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdca1792904ff4403c34e0569b5cebfbd2ecb8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:da:09:6c:2d:56:13:61:65:c3:4c:c2:1c:
d0:66:6e:c5:68:91:bc:9a:79:8a:e8:48:8e:f8:13:
fd:c7:5b:7c:44:be:d7:fd:b6:7f:32:2e:2b:10:bc:
2e:db:ab:bb:c5:bb:7a:4d:f6:30:b2:2e:df:a5:b5:
c7:a6:3c:c0:39:52:16:44:d9:03:20:17:be:cf:77:
b0:44:23:d6:0f:17:a5:7f:8f:c5:12:1b:f8:16:20:
65:3d:a2:69:fa:2f:f9:4d:f0:ee:5c:2c:e8:9d:b7:
cf:82:14:37:3b:fb:01:18:72:06:26:c2:6a:b2:03:
99:e4:4b:e8:8a:70:e1:07:84:20:c7:cd:19:0b:1b:
b8:90:03:ee:9b:e3:79:13:26:20:21:e2:9b:84:82:
e5:52:7d:82:07:0d:7a:6b:0f:6a:06:d5:82:47:1f:
09:ae:96:5b:5c:47:94:0b:20:b5:02:7b:27:28:22:
71:43:c6:74:34:29:71:75:81:07:55:15:86:32:41:
15:99:8d:8e:3e:a9:0d:5b:f5:b5:55:01:17:b0:4a:
67:51:ca:a0:49:75:e1:cf:16:ad:48:e6:f6:ba:8d:
08:48:69:ad:52:71:eb:5b:22:86:fa:7c:09:09:21:
d5:40:b1:cd:69:3b:d4:fb:b1:06:67:9b:65:04:26:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:17:92:90:4F:F4:40:3C:34:E0:56:9B:5C:EB:FB:D2:EC:B8:AF
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/_coXkpBP9EA8NOBWm1zr-9LsuK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
185.69.168.0/24
IPv6:
2a05:2240::/32
Signature Algorithm: sha256WithRSAEncryption
4f:8a:2f:4d:96:23:08:2e:cc:68:29:1a:43:84:23:8a:5b:6d:
5d:33:59:84:e3:aa:23:9a:80:28:5f:99:03:92:91:0a:60:6d:
1b:12:0c:a6:6e:bc:be:d2:9f:59:c5:e6:da:c4:da:ec:cd:12:
49:f6:41:e3:de:55:c4:bc:b1:72:17:f6:8b:19:ff:4f:c8:60:
2c:94:d3:c3:c0:29:06:d0:da:6a:c3:9c:c7:46:cf:61:ad:a8:
53:bc:32:07:f7:fb:dd:8f:0f:ac:5f:bb:08:f0:60:d6:36:a2:
fd:ba:91:71:7c:34:5b:69:33:5c:5f:9d:82:1a:4f:84:18:1d:
0f:e0:cc:17:b0:dc:7a:66:ad:5a:be:4e:ea:19:24:82:f4:5e:
a9:f8:b6:db:74:9f:1d:ad:01:a3:0a:31:36:16:ba:bf:c1:4c:
02:5e:e6:d9:a6:d3:6e:37:9b:37:c2:d1:d7:69:de:b9:ff:82:
17:a8:46:d7:94:c1:1b:38:4a:d0:c8:0b:29:07:ad:38:33:4c:
2a:f7:a2:12:60:56:db:50:45:62:63:25:b0:77:e6:76:e9:40:
6b:63:c2:58:9d:30:16:b3:81:53:cb:2d:92:22:26:19:c9:bd:
51:b1:3a:21:c2:72:e1:17:cb:b4:1a:b9:ac:62:c2:10:43:99:
7e:4d:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:19 2025 by rpki-client