Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa
File: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (raw, json)
Hash identifier: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=
Subject key identifier: A7:F5:62:97:56:4E:87:40:C1:5A:9E:C2:78:D7:4B:B2:9F:B1:FA:A8
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 0194228D880AA36661F32D7500D9E2DEF353
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24651
IP address blocks: 185.57.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:88:0a:a3:66:61:f3:2d:75:00:d9:e2:de:f3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f56297564e8740c15a9ec278d74bb29fb1faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:bd:d0:92:ce:dd:07:7b:df:ed:36:05:25:
43:f8:97:6f:e6:ee:4b:9a:80:b7:63:32:3c:1e:58:
3e:00:01:f9:47:81:aa:7b:b5:c7:65:68:c7:b2:cd:
7f:f8:98:8f:ca:d9:e7:d5:a9:ce:ca:cd:dd:6b:38:
ec:bd:38:97:6a:e2:72:2e:7f:6e:77:90:7f:41:b2:
03:c9:21:b9:53:ad:0a:5e:16:18:24:02:14:0b:68:
f3:0c:7b:01:6c:a2:f7:11:2c:38:49:c5:0a:87:36:
a2:a4:f6:e2:55:17:62:8f:e1:10:77:65:31:d8:60:
33:eb:ca:39:bc:c0:f4:6b:09:c8:70:e3:f2:1e:83:
4a:d2:75:5c:58:33:01:d5:67:e9:ce:bc:1a:a6:5e:
52:0d:6f:93:95:af:53:7e:6a:53:4c:36:c2:be:fe:
d0:c1:e9:94:22:b8:c2:77:c8:79:1a:29:42:f9:b0:
67:40:6a:c0:4e:93:65:36:2a:ae:f9:af:96:28:be:
72:58:8a:23:94:9f:81:1a:8f:6a:06:d8:78:f7:85:
77:01:8d:ff:5f:e5:22:45:e7:84:8d:e8:b7:05:ce:
2d:5c:9e:fc:93:35:b7:c6:8e:11:b7:c5:ea:7a:d2:
f3:01:6c:f1:a8:e6:52:d5:33:48:24:28:7b:85:4f:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:62:97:56:4E:87:40:C1:5A:9E:C2:78:D7:4B:B2:9F:B1:FA:A8
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.77.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e7:c5:e3:e7:7e:af:e1:8d:38:54:92:fa:67:39:e3:85:9e:
f2:aa:d3:78:a9:46:f5:a7:27:9f:8c:bd:04:69:c3:59:77:9a:
fb:bc:0a:58:81:5c:e4:99:4b:dd:6e:ed:2e:c8:32:9d:12:68:
23:51:9e:91:a4:85:cd:2a:c5:08:87:83:8f:cf:a7:46:77:f6:
3d:c6:2f:4a:6a:82:24:5d:3a:73:90:97:9b:7f:60:75:ef:89:
ce:b2:00:00:1d:f0:fe:54:e2:8f:ee:df:f9:bc:4c:3e:96:18:
24:24:19:e6:98:05:9e:0b:f1:05:8e:95:9e:cd:51:02:d8:18:
7b:ae:dc:02:fd:d7:82:6a:dd:50:09:cc:e1:ee:6b:37:8c:b8:
f1:07:0a:f5:be:56:8e:35:90:52:79:7f:39:b1:c1:c4:48:e9:
b1:fe:b2:30:02:87:b3:c1:b9:5b:6b:0a:73:09:9b:89:77:80:
cf:05:e4:64:1b:9c:95:96:99:d3:46:cf:7d:3b:e7:e2:05:72:
20:c2:26:ee:8f:a7:ea:01:47:44:8e:52:d2:c7:0a:2b:8f:78:
82:1c:98:a0:1e:85:17:b7:6f:90:1a:b7:ed:28:df:7a:d5:ac:
ec:4c:93:4e:57:c8:44:2e:79:b2:84:bb:e1:90:44:71:87:b9:
9e:3e:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:14 2025 by rpki-client