Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/Kym43N-Kud789rElwe6-Hg-POmo.roa
File: Kym43N-Kud789rElwe6-Hg-POmo.roa (raw, json)
Hash identifier: 2+Vihi11NoSNLkqGK3EchxRMsWKonblxQqrEVO6Bl8A=
Subject key identifier: 2B:29:B8:DC:DF:8A:B9:DE:FC:F6:B1:25:C1:EE:BE:1E:0F:8F:3A:6A
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 019424B267223C376CC58067EA8754151DBC
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/Kym43N-Kud789rElwe6-Hg-POmo.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/19 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
91.191.160.0/20 maxlen: 24
91.191.168.0/21 maxlen: 21
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.46.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:67:22:3c:37:6c:c5:80:67:ea:87:54:15:1d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b29b8dcdf8ab9defcf6b125c1eebe1e0f8f3a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:d1:c2:d1:66:13:20:ac:e7:c6:98:2b:27:
7a:b2:e0:31:d0:60:c9:a5:89:e7:37:47:ab:5f:4a:
e4:ad:83:cd:bb:1a:56:16:ed:5d:62:6d:95:fc:4a:
1e:20:ba:43:99:2e:d3:2d:5c:54:08:69:85:e6:67:
3a:cc:77:88:a1:da:ce:96:c2:d0:f5:55:19:24:9e:
76:05:55:94:49:4e:28:7a:f8:26:e3:6b:f4:e4:32:
ad:cc:ff:89:c6:e9:00:aa:73:09:9a:c6:4c:66:97:
03:0c:51:68:74:e1:b5:6b:5e:de:57:b5:7b:d7:a9:
e4:a0:4c:ff:ca:2b:5e:9a:79:f0:53:95:84:b1:be:
f4:0c:99:a4:1c:3e:69:a2:fb:ee:14:9d:e3:d3:56:
2a:ae:32:d4:24:62:ec:b6:a1:0e:a9:78:bd:64:31:
e2:64:d0:ee:5c:3b:ac:b0:8a:63:09:0b:66:b9:b7:
8d:e9:14:04:24:62:f3:a3:0e:41:ab:ac:c3:29:97:
ce:4f:c0:2c:70:fe:d0:5d:ba:d1:ab:0f:3c:99:5c:
23:9c:1d:64:82:ac:8c:a3:bc:ba:af:aa:aa:df:71:
0d:1e:b5:e6:86:82:9b:7a:c7:79:5f:c3:6b:ef:70:
a3:b3:6b:70:dc:f3:51:7f:78:12:33:b9:7a:74:ff:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:B8:DC:DF:8A:B9:DE:FC:F6:B1:25:C1:EE:BE:1E:0F:8F:3A:6A
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/Kym43N-Kud789rElwe6-Hg-POmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:f6:d0:4a:cf:a5:74:7e:fb:6d:73:d5:48:ae:8b:0e:3d:b2:
72:1f:14:dc:cf:4b:aa:9c:59:6b:11:02:4a:49:34:de:d1:f7:
80:6e:92:50:bb:6a:8d:07:61:8a:e5:28:18:59:c8:1e:0e:10:
c7:35:12:97:50:7d:39:ec:35:80:79:df:1e:df:a4:45:d8:5d:
69:cf:8e:34:3b:62:9b:f3:73:4c:1e:74:f7:d3:a5:e3:b7:53:
2b:70:89:40:08:f7:27:89:c3:bd:79:d3:bd:bc:4a:5e:73:b7:
98:29:c3:1c:1c:3f:e1:38:10:ec:d8:55:cc:66:64:2c:59:f0:
6a:d3:97:1d:97:dc:e7:a4:65:9e:42:b5:2d:10:dd:8e:37:e6:
a5:a3:5b:73:b9:5a:d5:a4:91:45:a3:90:38:72:16:f6:0c:de:
96:2a:41:f9:78:19:34:53:a7:4b:c9:a6:5b:e6:90:e4:64:e8:
df:30:61:85:f2:7b:bc:89:36:e7:4d:23:0c:79:a0:c3:74:ae:
ca:fe:98:93:a5:bb:71:ab:3d:56:93:78:0b:2b:57:b8:fc:bd:
2b:ad:2f:3b:08:6a:8e:0c:e5:be:ae:4f:9d:4a:9c:3a:54:25:
42:90:1a:33:72:0f:e0:2c:80:ab:3f:2a:08:a4:09:cb:a2:0c:
f5:65:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:43 2025 by rpki-client