Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3cdyRhPFClOh_JTC9MYaWzlEoGo.roa
File: 3cdyRhPFClOh_JTC9MYaWzlEoGo.roa (raw, json)
Hash identifier: vw7vbLjq4VXW4tvNpxSE6Yja2vabJeAxLODtFBrlaEg=
Subject key identifier: DD:C7:72:46:13:C5:0A:53:A1:FC:94:C2:F4:C6:1A:5B:39:44:A0:6A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747DEDA5B8C2BB66F6C58C1F4D8083C
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3cdyRhPFClOh_JTC9MYaWzlEoGo.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8795
IP address blocks: 77.85.175.0/24 maxlen: 24
77.85.196.0/24 maxlen: 24
95.43.230.0/24 maxlen: 24
212.5.130.0/24 maxlen: 24
212.5.133.0/24 maxlen: 24
212.5.145.0/24 maxlen: 24
213.16.35.0/24 maxlen: 24
213.91.170.0/24 maxlen: 24
2a01:5a8:7::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:de:da:5b:8c:2b:b6:6f:6c:58:c1:f4:d8:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc7724613c50a53a1fc94c2f4c61a5b3944a06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:54:ff:99:7f:4e:45:50:eb:98:7e:9b:63:
c7:c3:a2:fd:0e:20:50:ba:e8:2b:b1:3c:ba:36:63:
03:9e:fc:1f:0c:ac:54:67:d2:fa:62:75:e5:c7:22:
df:03:b3:24:19:a5:0d:79:aa:08:1f:eb:d9:25:40:
77:dc:e9:26:28:4a:c7:b6:83:56:b1:d5:b5:72:ca:
5e:94:de:82:0c:1c:50:28:c0:6e:64:58:f1:a2:29:
a5:9c:f4:d5:52:ce:4b:ea:8e:89:95:45:f4:58:94:
76:e4:43:6f:83:8e:a0:16:85:30:ee:3c:ea:eb:34:
63:65:ca:3f:75:be:83:7e:86:f1:57:4d:88:d1:22:
8f:c6:c2:88:e0:50:2b:7a:79:f5:3e:fa:9a:de:dd:
77:db:cb:10:40:4b:c5:d4:74:29:56:a8:85:cd:08:
b0:7d:97:cd:79:e7:f3:2f:ed:73:6c:8c:e2:93:7f:
e6:23:88:32:aa:75:85:d3:8b:82:a0:d3:61:77:1b:
16:d1:eb:3f:73:d2:7e:7e:71:46:fc:7e:27:7b:a7:
5e:18:05:3a:e7:0b:e6:d9:6b:86:5b:25:62:28:2e:
c3:3c:49:ba:8c:76:5b:3d:ed:c3:4e:c5:cf:24:5b:
9b:20:de:26:d8:39:c6:d8:35:d5:ba:f3:49:b7:d6:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:72:46:13:C5:0A:53:A1:FC:94:C2:F4:C6:1A:5B:39:44:A0:6A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3cdyRhPFClOh_JTC9MYaWzlEoGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.175.0/24
77.85.196.0/24
95.43.230.0/24
212.5.130.0/24
212.5.133.0/24
212.5.145.0/24
213.16.35.0/24
213.91.170.0/24
IPv6:
2a01:5a8:7::/56
Signature Algorithm: sha256WithRSAEncryption
73:c3:6c:da:dc:59:53:13:0f:ba:e8:a7:a0:0e:e2:71:5b:11:
32:1a:cf:44:0d:c1:db:a7:19:5f:05:b4:e3:a9:34:d9:02:c8:
73:87:6f:a0:a4:38:6f:84:e0:0f:9b:7a:4d:7f:9a:8c:a9:82:
b1:c3:15:86:c4:04:43:99:6e:7c:bd:05:aa:a5:e4:79:5f:41:
1d:55:8e:b5:7c:56:52:f4:3f:2a:df:58:bd:dc:b9:af:54:85:
25:7e:40:c3:d6:7d:60:02:ef:6a:03:69:92:03:eb:f1:e4:a7:
47:de:66:3e:3b:63:44:b1:77:56:33:18:98:47:22:93:86:af:
a0:00:40:ba:4e:1a:38:7d:d3:c0:68:48:1f:f3:73:cc:98:df:
bd:56:2b:63:8d:87:32:3c:90:ea:59:57:7b:90:43:fc:0f:c4:
89:cc:c9:ee:b2:3a:1b:d1:62:ba:84:84:23:3d:52:5a:e6:cd:
df:62:8a:41:4a:64:14:cf:53:72:1b:81:fc:02:d5:f6:44:c7:
03:88:ae:01:53:72:81:46:14:9f:4b:08:b4:45:94:d6:24:c3:
47:4b:04:ae:37:2b:fd:90:1e:35:fa:04:e8:41:e5:c4:05:70:
d7:d0:0c:60:64:95:0b:f0:76:57:22:fe:86:83:03:b5:ba:3d:
de:07:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:03 2025 by rpki-client