Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ysUV6fsy7g-qGWKc6ABtuhp7U8A.roa
File: ysUV6fsy7g-qGWKc6ABtuhp7U8A.roa (raw, json)
Hash identifier: EZNxj/CC4nQ1eQFZYbt+q0R6zd6ZtVvLPs7qesRb/BU=
Subject key identifier: CA:C5:15:E9:FB:32:EE:0F:AA:19:62:9C:E8:00:6D:BA:1A:7B:53:C0
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449A71A1AAF5CCD5D2606C994E18D5
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ysUV6fsy7g-qGWKc6ABtuhp7U8A.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41965
IP address blocks: 77.95.184.0/24 maxlen: 24
77.95.186.0/24 maxlen: 24
77.95.187.0/24 maxlen: 24
77.95.188.0/22 maxlen: 22
91.103.56.0/21 maxlen: 21
91.103.56.0/24 maxlen: 24
91.103.57.0/24 maxlen: 24
91.103.62.0/24 maxlen: 24
91.103.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9a:71:a1:aa:f5:cc:d5:d2:60:6c:99:4e:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac515e9fb32ee0faa19629ce8006dba1a7b53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:c0:41:f0:54:26:3e:c4:65:ae:97:2f:30:
0f:b2:25:44:a2:35:59:a7:37:ab:36:b0:dc:d0:50:
41:9c:6c:2b:01:27:85:d4:cc:b6:bc:dd:22:76:29:
79:89:2a:25:c1:82:3f:2a:b1:69:76:ae:84:7d:6c:
1f:50:39:bb:ad:d2:5e:20:8d:3a:b8:85:5c:12:56:
95:8c:8f:6f:47:c3:d2:66:b6:75:30:83:09:5c:29:
d5:81:20:40:6a:3d:05:82:f3:4f:ef:4f:4d:67:e5:
b9:cd:b3:9e:49:b1:26:58:57:b2:e0:1a:0e:9f:d9:
94:33:40:3b:30:5d:d9:6f:8c:2e:af:8c:b0:45:d7:
2c:47:3a:7e:92:5e:db:ef:64:e3:f6:b6:57:b0:4c:
45:25:dd:c1:c4:7f:51:d4:fd:f9:e7:ac:df:00:68:
ab:12:fc:42:c6:65:0a:07:6f:a9:6f:22:de:42:cd:
41:1b:f2:44:a0:11:a7:6d:44:76:e5:19:ac:c2:11:
69:41:a7:2b:ba:44:06:f7:70:91:ef:45:82:5e:16:
e0:e0:ef:13:dc:11:3b:1d:25:ae:2c:51:38:37:38:
6b:03:5c:29:b8:27:f8:37:8e:52:9e:a3:ec:b8:8d:
dc:47:94:ff:ed:1d:33:9e:ab:e2:8d:aa:ab:33:0b:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:15:E9:FB:32:EE:0F:AA:19:62:9C:E8:00:6D:BA:1A:7B:53:C0
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ysUV6fsy7g-qGWKc6ABtuhp7U8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.184.0/24
77.95.186.0-77.95.191.255
91.103.56.0/21
Signature Algorithm: sha256WithRSAEncryption
04:d1:0f:e3:a4:e6:5b:92:41:b8:74:ee:a7:44:25:c7:3e:42:
04:26:23:4f:ec:e5:5a:09:bb:7e:f4:95:3a:4f:8d:8c:d4:b6:
be:cb:44:1c:c8:ab:c6:84:9e:f8:6a:03:3c:ae:e2:7f:96:0d:
18:04:82:ea:87:88:e5:b0:fa:d6:f6:17:db:b7:87:f0:d5:25:
a0:74:55:49:c7:25:f1:f8:04:16:51:82:01:2b:8d:34:d9:bb:
3b:75:b8:4c:2f:4a:f3:9d:92:43:cb:07:5f:56:8a:f8:a9:fa:
af:1f:2a:28:d7:8a:02:b7:cb:8e:b5:ad:49:5a:e0:26:5a:3d:
ee:fc:bd:26:7f:17:fe:86:43:fd:e8:f9:1d:02:c4:75:ab:37:
b0:eb:e9:e4:22:45:3b:0e:c6:1b:01:29:a1:d3:ed:80:10:d1:
41:71:fa:97:14:a3:e5:ca:ef:e7:02:12:36:8b:d7:54:b4:e1:
3b:18:2a:87:02:c1:c6:01:9e:89:38:d8:04:9f:38:d9:0b:dd:
f0:06:38:a5:7a:32:38:71:63:4f:0d:7b:03:c4:7e:9f:64:94:
1b:d4:35:70:c2:ad:49:c6:ad:27:b2:d4:de:04:d4:61:f1:d2:
a6:17:24:e9:3f:e0:78:03:23:86:9c:f6:86:a2:2e:2a:ad:59:
fb:bb:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:13 2025 by rpki-client