Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Yg0aBjJfSO9sM-bLQmXgrarXQGk.roa
File: Yg0aBjJfSO9sM-bLQmXgrarXQGk.roa (raw, json)
Hash identifier: DdLsTsOmYbhfnfhI8GntRl6CCWKEwRERBe5MQwqWVeg=
Subject key identifier: 62:0D:1A:06:32:5F:48:EF:6C:33:E6:CB:42:65:E0:AD:AA:D7:40:69
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 01951AC7488B1DEA7BC52ABA04494554B7F0
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Yg0aBjJfSO9sM-bLQmXgrarXQGk.roa
Signing time: Tue 18 Feb 2025 20:37:02 +0000
ROA not before: Tue 18 Feb 2025 20:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
128.65.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:c7:48:8b:1d:ea:7b:c5:2a:ba:04:49:45:54:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 18 20:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620d1a06325f48ef6c33e6cb4265e0adaad74069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:72:63:05:46:3b:56:4c:b5:29:65:f3:76:
c0:f2:ea:18:6b:4e:f7:21:44:b8:0b:c9:49:02:9a:
a5:a5:a2:57:3a:05:0d:17:98:3b:e6:b5:d6:ff:6c:
f5:2d:f8:09:28:b9:3c:ac:2c:f1:58:98:c2:c4:95:
c1:97:16:92:28:85:32:89:9d:f3:06:83:f9:6f:ca:
54:c7:2a:c0:25:54:a1:f7:f6:05:41:0e:76:c7:ec:
f5:0f:05:06:54:ce:fe:2b:ef:02:3f:50:29:74:6e:
1f:f1:62:c7:d1:0a:5b:b1:b7:01:90:01:50:d9:63:
28:e1:43:a3:bd:b2:fd:ba:8a:5e:dc:e2:a6:e0:1e:
1b:e8:4e:1b:70:2d:3d:23:ab:13:b4:67:79:39:2e:
9a:e6:0a:7d:b0:bc:77:fe:f8:08:c5:89:89:8d:84:
f1:4f:f7:55:42:c6:b0:92:e1:c1:58:f5:da:a1:8b:
e3:16:4f:fb:8d:c0:52:ce:b7:94:ca:62:2f:9a:fc:
36:8e:bd:d3:c3:58:5a:84:2b:eb:e5:9a:3f:08:bd:
95:ef:c9:91:e8:d9:39:1f:f6:29:24:bc:ad:0b:87:
a8:76:47:c9:e6:50:13:4a:4d:17:e4:6d:09:da:18:
5c:c7:13:b2:c3:e8:4f:fd:0a:40:43:92:5a:a7:da:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:1A:06:32:5F:48:EF:6C:33:E6:CB:42:65:E0:AD:AA:D7:40:69
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Yg0aBjJfSO9sM-bLQmXgrarXQGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:31:1e:83:39:8b:33:a9:7b:1b:4e:73:a7:98:65:e9:07:3a:
d8:d3:15:19:82:12:a0:7e:d3:53:00:d3:3e:29:b3:28:ba:d9:
c1:65:81:d3:3d:27:32:fd:a5:92:35:01:a0:70:0f:ae:67:b5:
f5:54:f5:49:a1:7f:3b:3e:db:e1:b0:da:01:82:c2:45:2a:bc:
1d:34:55:2f:c0:f6:1d:1f:a8:da:3c:3e:cf:22:12:1a:d9:78:
3e:32:67:c7:6c:2b:31:80:fe:71:bc:5e:56:f3:38:b5:aa:77:
77:24:12:b9:04:36:76:aa:61:14:40:dc:e5:fc:00:bd:1b:c5:
20:a9:bc:7a:a5:82:4e:c4:c5:a7:ed:0f:07:e7:de:55:d7:96:
86:02:ec:8f:9d:32:f1:1a:15:6d:0d:30:0c:12:30:29:ae:6e:
cf:d6:8f:3d:f8:eb:24:39:c9:41:ac:52:81:30:b4:89:21:6f:
18:58:6e:be:80:33:70:ac:9a:c3:06:85:32:ff:fe:1c:21:fd:
a0:b0:46:13:7b:57:28:ad:3d:73:0b:65:36:78:17:27:cf:09:
03:6b:16:d5:c1:e0:41:15:bf:bc:1e:e6:be:41:82:5d:04:96:
66:6d:f1:d4:64:bf:f8:ff:f4:25:3c:fb:17:fd:05:91:60:82:
d4:82:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:29 2025 by rpki-client