Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/e3qYhLR-km5IQlHYrXGIQxD6r18.roa
File: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (raw, json)
Hash identifier: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=
Subject key identifier: 7B:7A:98:84:B4:7E:92:6E:48:42:51:D8:AD:71:88:43:10:FA:AF:5F
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019420D63E5D8DE435410D457287231DDD96
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/e3qYhLR-km5IQlHYrXGIQxD6r18.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43341
IP address blocks: 77.83.176.0/22 maxlen: 22
2a09:8580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3e:5d:8d:e4:35:41:0d:45:72:87:23:1d:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b7a9884b47e926e484251d8ad71884310faaf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:06:34:4d:bf:0a:e4:f0:f2:cf:4c:8d:c5:
65:54:59:21:01:1c:ad:0a:03:b2:5b:ff:93:c7:88:
f3:3f:28:2a:60:1d:0e:16:05:4e:1c:a2:7e:68:4e:
c8:b8:ec:a8:63:75:6b:d6:3b:f3:91:d6:80:46:47:
92:8a:47:eb:78:d7:64:70:16:2c:00:a3:6f:2f:70:
97:4b:6b:10:02:bd:98:5f:d0:6d:12:f0:67:cb:38:
54:46:5b:47:b3:65:ab:88:da:e3:24:e4:99:0c:9d:
a8:f6:b5:89:10:bc:10:99:cb:28:a4:af:e0:17:ff:
a3:8b:bf:09:73:03:f8:9d:e7:bc:c1:08:db:8b:3a:
66:ac:a6:47:a0:f0:4d:c0:c7:a0:3c:3b:23:5c:64:
83:51:90:77:07:68:a9:f3:c1:2f:c7:90:db:ae:14:
54:b9:c8:5c:17:1d:c9:d9:94:d8:4a:4f:db:ee:8e:
fc:f1:41:ea:e1:f3:90:04:c4:49:3e:41:d7:28:28:
f2:07:e6:f0:12:48:3f:20:b1:db:36:c4:2b:2a:76:
d9:43:b8:1d:f0:3d:42:c3:6d:7d:ca:9e:0f:0b:b4:
93:ed:79:8b:b2:ca:b9:5b:de:f4:2d:68:36:2d:fb:
a0:1e:4f:07:e7:9c:11:7a:47:8f:95:e7:7a:c4:0a:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:98:84:B4:7E:92:6E:48:42:51:D8:AD:71:88:43:10:FA:AF:5F
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/e3qYhLR-km5IQlHYrXGIQxD6r18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.176.0/22
IPv6:
2a09:8580::/29
Signature Algorithm: sha256WithRSAEncryption
33:b9:0b:fd:21:47:57:84:f6:14:29:aa:3e:b8:03:a0:2f:c3:
8d:58:0a:d3:af:7e:dd:d3:ab:b3:21:6f:74:50:b4:a0:1a:f2:
51:ca:47:2d:3b:c9:da:af:d0:d7:80:77:fc:4f:5d:f6:94:cf:
db:90:f3:ee:90:2a:1c:b6:3c:02:f8:aa:bd:a4:ec:4e:a8:c1:
1f:fa:ed:d6:56:55:bd:27:7b:cb:40:9e:03:03:ac:29:0e:10:
6d:29:5d:aa:2b:30:0a:a8:0c:25:4f:00:63:39:ca:e8:94:c3:
16:c9:0e:69:b4:8e:91:27:4f:e9:28:76:cd:7b:8a:a2:dd:bf:
a5:34:27:4d:5a:39:67:3b:a6:fb:1b:12:fb:36:0a:1a:a4:6b:
72:d3:7f:24:74:cb:3a:99:f4:b2:c8:39:b9:73:b4:be:54:87:
c6:7d:fc:ea:56:53:6e:b4:e5:9f:2c:81:18:a5:50:49:98:12:
f8:a0:6c:cb:f3:a4:7a:f6:f3:97:65:61:45:8e:11:9e:cf:0f:
69:57:60:b5:71:02:7b:eb:3d:db:a4:2d:cd:68:bc:27:f1:13:
a7:89:53:12:70:43:c5:59:6e:53:7d:da:ab:8a:fd:37:d3:3e:
bb:b7:8b:2c:87:4e:20:39:be:6f:9e:c5:6a:8e:d9:75:02:c7:
49:8e:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:39 2025 by rpki-client