Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/AXjvsvQT0QHgjGJCOykWGFNYr-c.roa
File: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (raw, json)
Hash identifier: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=
Subject key identifier: 01:78:EF:B2:F4:13:D1:01:E0:8C:62:42:3B:29:16:18:53:58:AF:E7
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 019424B400971D45489834FB313D630C8A61
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/AXjvsvQT0QHgjGJCOykWGFNYr-c.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12384
IP address blocks: 77.235.224.0/19 maxlen: 19
185.173.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:00:97:1d:45:48:98:34:fb:31:3d:63:0c:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0178efb2f413d101e08c62423b2916185358afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:28:68:39:fd:de:22:44:ff:8f:ca:da:55:
7c:54:58:3d:3a:32:42:43:46:c7:15:51:d1:da:3c:
0b:54:4b:ca:cb:77:c7:ee:9a:d6:d2:be:49:7f:bb:
dc:e8:ce:33:60:05:d1:1e:f4:1e:8e:32:22:e6:84:
9a:78:7d:06:c0:ea:0c:ad:08:10:9e:cb:0c:ae:b8:
db:03:fc:c6:33:97:09:52:a6:d4:56:db:1d:38:a3:
b7:d1:62:fc:55:33:d4:22:9a:8a:68:11:6a:5e:6d:
33:1a:ab:d4:0e:97:bb:22:6f:66:4e:65:f2:3d:33:
a9:42:48:22:9b:d8:b5:96:91:3e:c4:ac:9a:50:75:
3c:07:32:73:8f:45:f8:82:2e:ff:03:51:1f:42:25:
76:59:8e:9a:bd:47:35:79:1d:98:34:2c:ac:6e:81:
07:53:36:54:8e:9c:59:6b:2b:d9:4d:e9:c7:fb:92:
a4:c9:d9:a7:fa:a3:d5:9b:01:f3:24:13:a2:e2:1e:
a6:7f:82:e3:bc:88:a9:59:56:74:f9:e3:89:fd:d2:
3f:15:df:db:c4:6f:d9:92:97:ce:26:c1:34:e1:45:
49:81:02:bc:29:9f:da:d5:80:d7:e5:49:6b:43:94:
e5:b9:eb:e3:51:4e:f1:f9:0f:00:71:d3:01:21:b9:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:EF:B2:F4:13:D1:01:E0:8C:62:42:3B:29:16:18:53:58:AF:E7
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/AXjvsvQT0QHgjGJCOykWGFNYr-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.224.0/19
185.173.196.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ab:f0:2c:9c:d6:a6:93:20:6c:6d:73:38:79:6b:b7:0a:00:
9e:cc:7d:af:7b:7f:a0:c0:9f:b0:db:10:3d:3b:70:30:8c:34:
00:64:f9:17:62:96:17:14:76:40:74:06:66:f0:d7:7a:17:b5:
e8:cc:16:07:db:0d:af:19:01:4e:64:73:00:52:de:c4:0e:01:
dc:01:16:23:b5:29:0c:fc:3f:fd:e1:dd:a3:5b:ef:ea:8f:57:
7d:86:2f:d6:d8:c8:86:47:9b:a8:86:42:1b:2b:14:38:5f:8f:
87:3d:36:f7:a7:4f:ef:50:81:3a:48:f5:af:19:d1:0c:3c:c2:
06:7e:e2:77:16:fc:34:1f:27:77:76:f2:1e:b1:29:a0:33:d1:
f8:4b:96:ad:26:38:64:d9:f8:d9:ef:8c:eb:45:3c:26:ff:c6:
8b:b1:27:7d:f6:44:32:04:0c:9b:17:03:b0:8b:f0:2d:6a:a4:
e2:97:a5:d9:18:61:ad:84:66:35:f8:18:80:31:54:0d:57:4d:
89:17:f5:e2:0a:28:a3:84:29:42:a9:f9:6d:0a:27:f5:f7:33:
31:23:a0:6a:bb:a7:89:6b:37:ef:d2:48:95:77:db:9c:a1:97:
de:d3:90:3a:63:81:56:c6:85:67:07:b7:f1:73:b3:24:32:ec:
e2:e2:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:47 2025 by rpki-client