Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wWo0aBlzyMmpr08GkT2ziEYMt9o.roa
File: wWo0aBlzyMmpr08GkT2ziEYMt9o.roa (raw, json)
Hash identifier: 5D4UpAVeHt4+2F6YBgHZtPi8koY71G0qlgRW+9Wnm80=
Subject key identifier: C1:6A:34:68:19:73:C8:C9:A9:AF:4F:06:91:3D:B3:88:46:0C:B7:DA
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F537849718111D3376B91CD6F577B
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wWo0aBlzyMmpr08GkT2ziEYMt9o.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 77.81.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:78:49:71:81:11:d3:37:6b:91:cd:6f:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16a34681973c8c9a9af4f06913db388460cb7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:9f:ef:07:9a:cd:3e:b0:a4:79:ad:6b:b1:
ce:b5:0d:d0:13:48:4e:8d:02:6c:4f:fa:e6:ca:ce:
06:10:07:ba:86:99:0a:ad:be:f8:77:69:03:d9:6f:
6f:32:b9:b7:67:bc:55:c0:df:36:9f:11:40:6b:8a:
33:60:25:73:f3:53:9d:5a:fb:f2:ed:db:00:7c:3c:
91:5e:fa:92:fe:14:3a:30:3a:fb:51:56:c6:b3:03:
68:92:d9:ef:10:d4:a3:aa:60:d2:cc:97:92:61:e7:
ff:7f:e7:53:f2:83:a0:2e:34:b4:d7:ab:b1:de:cc:
3f:de:f1:f4:5d:86:1a:e4:66:7c:a6:b4:93:2a:ff:
1d:2e:69:ca:01:3f:74:2e:74:94:36:68:41:c6:2b:
5c:10:3e:c7:c6:8a:20:5a:90:15:d4:74:6a:7f:c9:
6a:d9:28:95:d0:3b:7e:44:0e:7d:d7:e0:a9:e1:62:
3a:97:bc:32:3c:8c:49:0f:2a:04:de:56:d8:2f:89:
c8:c1:bb:4a:4c:91:ce:23:c7:cb:82:2b:86:51:8f:
b5:14:79:d5:c1:f3:24:42:77:76:32:0c:e5:9b:b3:
da:88:5d:a8:c8:9a:0b:98:28:8c:7d:f7:17:0b:ad:
cc:39:a8:c6:9c:74:62:d3:c9:72:98:5f:92:72:e0:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:34:68:19:73:C8:C9:A9:AF:4F:06:91:3D:B3:88:46:0C:B7:DA
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wWo0aBlzyMmpr08GkT2ziEYMt9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:85:67:03:ab:0e:79:cb:33:dc:b8:c3:90:57:eb:ec:1e:b2:
8a:43:b6:f6:8e:aa:17:06:b2:87:a4:94:0f:d2:88:62:7d:78:
ac:66:11:75:7c:18:95:86:39:c1:f8:5c:e2:e8:bc:88:91:89:
3f:99:b2:19:fe:1f:35:66:1f:5f:5b:f0:4f:db:31:15:3b:d5:
73:19:af:66:84:a3:2a:98:fb:d7:83:fb:59:4c:36:08:da:ef:
c8:d2:84:55:fb:ad:e1:b4:a6:08:60:67:f8:eb:22:8d:62:5e:
a6:a7:71:46:16:fe:ca:23:95:2d:00:25:75:1f:59:d2:d9:eb:
e8:c8:4b:0d:4b:8b:82:f0:3b:57:c5:b9:90:0f:da:a8:77:59:
72:6c:a0:b3:c4:50:fb:45:72:0a:93:d3:16:38:a2:3b:a3:ca:
e4:cf:59:ea:54:2f:63:8c:d1:be:6c:9b:2a:30:7d:18:48:37:
60:af:3a:1c:ad:5a:36:e4:66:17:53:44:fd:46:88:0e:29:9d:
de:cd:0f:bd:af:56:db:94:f1:cd:b8:19:7d:f4:0e:3b:e2:02:
11:fb:72:0b:ab:91:7e:7d:29:d7:33:8f:cb:9f:4f:1c:6a:72:
90:73:51:97:2e:8a:ec:65:3a:f5:e9:b5:66:9a:0b:35:e2:7a:
b1:f9:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:35 2025 by rpki-client