Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-rkdO3RS7mM1mTwHCfWVGwivLng.roa
File: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (raw, json)
Hash identifier: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=
Subject key identifier: FA:B9:1D:3B:74:52:EE:63:35:99:3C:07:09:F5:95:1B:08:AF:2E:78
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019427484234F8334C7509CF82773EE11D90
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-rkdO3RS7mM1mTwHCfWVGwivLng.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204782
IP address blocks: 77.242.228.0/24 maxlen: 24
77.242.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:42:34:f8:33:4c:75:09:cf:82:77:3e:e1:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab91d3b7452ee6335993c0709f5951b08af2e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:58:0c:66:f7:aa:96:03:b5:0f:7e:20:4a:
48:c5:72:53:8a:d3:0b:94:4d:e7:49:9d:f7:cf:c3:
07:54:95:40:af:72:b7:7a:ec:45:ac:1e:1a:46:dd:
42:28:95:8c:8e:4d:4c:ad:dd:a1:09:07:9e:22:b3:
f1:26:d2:cc:89:09:cc:29:c4:d2:34:9e:b1:b6:f8:
b6:96:30:66:36:48:78:46:80:62:ab:4d:23:c5:b2:
4e:27:4c:01:b8:a7:35:ef:4c:4f:1c:62:7a:45:50:
40:d0:fb:4d:41:07:02:58:20:74:57:66:86:06:60:
7a:57:21:a7:d8:f0:5d:68:c8:d7:6a:fc:3d:57:46:
05:33:59:06:a9:c7:92:02:42:70:f3:1d:30:8a:25:
33:22:11:fe:51:a6:b2:77:af:e3:7e:b4:37:87:0e:
28:92:c8:99:68:0c:4d:d0:5e:9a:59:9d:1f:17:34:
e5:0c:ff:42:d1:f0:12:04:e7:b4:51:8c:02:7d:b4:
db:d7:c7:a3:1b:fd:6b:d6:d6:51:44:e8:32:0e:b9:
cb:35:9d:f3:c4:a3:1d:01:79:65:97:e3:09:7c:a0:
a3:f8:e9:1f:57:1f:f7:69:98:4f:14:95:72:fd:f6:
44:2b:5f:5f:fa:37:2d:7a:f2:f4:8b:48:3e:ce:c2:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:1D:3B:74:52:EE:63:35:99:3C:07:09:F5:95:1B:08:AF:2E:78
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-rkdO3RS7mM1mTwHCfWVGwivLng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.228.0/24
77.242.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:97:d8:93:52:8a:f8:cb:c4:22:68:53:1c:4b:4c:41:b9:79:
81:f3:cd:d4:1f:26:69:9d:9e:99:b6:05:31:49:57:a0:81:b7:
e4:98:7c:31:94:68:a4:ea:4b:b5:d9:80:49:91:ed:ea:65:d2:
68:d1:00:1f:cf:53:85:03:30:ad:4f:f4:f4:37:cd:99:f0:1f:
3b:6f:d1:c7:42:ce:0b:02:6c:9b:1d:51:53:f1:7b:df:52:18:
c8:24:42:9b:32:3b:50:7b:e9:08:93:f5:32:67:0d:94:f6:33:
0c:c9:2c:eb:cf:65:f0:0a:44:61:0f:02:a1:38:a2:04:c3:f0:
0b:24:60:d0:18:c7:6a:55:80:33:eb:bb:cb:23:99:62:79:f2:
e8:35:4b:58:2f:59:8a:dc:c3:c9:1f:f5:6b:24:9b:5a:5b:db:
ca:c0:ae:4e:6a:6c:cc:50:4d:20:14:f5:b5:a4:cc:7f:52:e9:
9c:09:c0:99:5f:74:a0:46:80:b2:3f:47:7c:93:7e:22:54:00:
e1:0b:c5:7f:5f:f7:1d:b8:60:91:6e:d4:b4:be:34:3f:0d:65:
43:43:82:a0:0f:2f:79:6a:f7:37:88:13:1d:16:9a:98:fe:b9:
c8:ef:b5:e6:6e:e2:ad:38:1c:40:b7:c1:de:14:36:95:57:95:
12:dd:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:26 2025 by rpki-client