Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1-5RL4_0gw9ccUahbcXYFnb6spv8.roa
File: 1-5RL4_0gw9ccUahbcXYFnb6spv8.roa (raw, json)
Hash identifier: BDdn8W4SXShjG8ZLaonhz3RpqdBlU4gCdFQ5lEwJn30=
Subject key identifier: FB:94:4B:E3:FD:20:C3:D7:1C:51:A8:5B:71:76:05:9D:BE:AC:A6:FF
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ABBC47429F029BD3D8CA6EAD1E5F62FF
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1-5RL4_0gw9ccUahbcXYFnb6spv8.roa
Signing time: Mon 09 Dec 2024 14:04:23 +0000
ROA not before: Mon 09 Dec 2024 14:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48592
IP address blocks: 77.81.76.0/24 maxlen: 24
77.81.78.0/24 maxlen: 24
77.81.82.0/24 maxlen: 24
77.81.83.0/24 maxlen: 24
128.65.160.0/22 maxlen: 22
185.39.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:bc:47:42:9f:02:9b:d3:d8:ca:6e:ad:1e:5f:62:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 9 14:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb944be3fd20c3d71c51a85b7176059dbeaca6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:85:5c:86:0c:68:40:05:f9:7d:e8:2b:42:
04:bc:28:b8:68:40:b4:2f:4f:b9:25:bc:a7:ab:ef:
ed:64:3e:1c:8e:5c:6f:2d:37:c2:5f:08:78:4d:dc:
12:d6:4c:ad:bf:63:0c:76:58:03:de:8a:18:89:14:
fc:c9:4a:4f:90:bd:db:54:4e:23:ee:0e:3a:23:74:
47:37:10:15:7d:86:bb:cb:32:5c:d2:04:ea:2f:77:
97:be:86:db:cc:3c:aa:0c:27:35:e4:18:be:50:0b:
7d:71:29:4e:c2:77:8a:e0:ad:7d:33:8c:b5:bc:d6:
0f:30:55:af:ca:40:0b:76:f5:02:02:e4:f8:67:ef:
ac:88:d9:78:fc:47:89:7e:33:20:06:90:7e:f7:75:
57:a3:ba:24:e5:82:7d:2b:4b:66:7a:be:d9:84:3d:
a5:c1:ae:28:70:49:04:b5:21:00:ac:ec:8e:dd:0e:
10:1d:a6:98:85:d4:d6:0a:0e:46:28:b5:18:cf:e0:
f5:b4:45:98:91:d5:6a:4c:77:8b:43:54:e6:10:a6:
65:02:86:b2:7e:d9:46:b8:4e:89:f2:2d:62:ed:85:
95:9e:a9:a0:cf:4b:c0:e5:b4:ad:33:2c:95:a2:6d:
c3:8f:5a:04:45:e0:e9:0b:a6:a8:e4:61:d3:16:37:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:4B:E3:FD:20:C3:D7:1C:51:A8:5B:71:76:05:9D:BE:AC:A6:FF
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1-5RL4_0gw9ccUahbcXYFnb6spv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0/24
77.81.78.0/24
77.81.82.0/23
128.65.160.0/22
185.39.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:49:28:de:ab:ae:36:f5:0d:7e:dc:5a:eb:54:14:52:a9:79:
0e:1f:6f:91:2b:96:37:ce:30:97:97:d8:7d:c8:1a:d9:c7:a9:
3a:3c:2f:de:31:bd:21:90:81:8c:57:d3:d1:09:46:41:c5:e4:
c3:aa:b6:14:26:12:31:1b:fc:c9:35:2c:d5:d4:d8:4b:11:41:
39:25:00:17:50:a1:e6:a0:5c:07:67:e2:bd:be:06:b3:6b:78:
21:30:23:e7:6f:c1:5e:09:8c:96:8d:f7:c3:96:63:71:97:0e:
2c:ee:ed:ec:aa:ec:46:43:0d:aa:b5:0d:ba:e7:fc:04:7a:b7:
e0:68:f1:51:6f:d0:47:0a:70:60:39:ef:1f:8a:9c:d6:44:6f:
79:f1:bf:c1:f5:eb:db:36:2c:a2:4b:13:98:95:87:ca:d0:80:
02:ae:75:82:b6:31:70:a0:e2:1f:f5:00:a7:8a:1b:18:de:3c:
5f:48:b6:09:e6:0c:ad:8b:f6:22:d8:68:cc:01:df:fd:cc:ef:
db:48:63:f3:a7:00:cd:b9:dc:3e:d1:b5:c1:f4:05:72:5f:60:
6e:c1:02:9d:74:f7:0c:cf:a3:4e:98:71:66:54:85:51:8d:3e:
a3:ff:8a:7d:ee:74:c7:b9:e5:41:b4:61:b5:e3:15:ed:6d:c7:
9a:76:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:19:32 2025 by rpki-client