Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/RwRIIbsLE86bb0oQhRUjsIS4XoM.roa
File: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (raw, json)
Hash identifier: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=
Subject key identifier: 47:04:48:21:BB:0B:13:CE:9B:6F:4A:10:85:15:23:B0:84:B8:5E:83
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019426D98F5765C34A38593CF7BA0B03E110
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/RwRIIbsLE86bb0oQhRUjsIS4XoM.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15566
IP address blocks: 62.77.128.0/22 maxlen: 22
62.77.128.0/24 maxlen: 24
62.77.129.0/24 maxlen: 24
62.77.130.0/24 maxlen: 24
62.77.131.0/24 maxlen: 24
2a02:2950::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8f:57:65:c3:4a:38:59:3c:f7:ba:0b:03:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47044821bb0b13ce9b6f4a10851523b084b85e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:05:67:04:a6:17:fa:70:02:f3:b0:de:71:
a9:97:77:02:16:bc:a4:11:6a:84:1f:24:e6:1e:57:
b9:04:57:96:88:12:48:fc:c0:2e:b1:ae:b7:2a:fc:
7e:bd:c1:4a:c7:c0:ff:f3:3c:1c:11:17:36:d8:85:
37:e0:ad:96:5c:2b:9e:a1:7a:55:25:bc:fe:1d:9c:
29:93:a8:c2:56:f7:82:97:4b:d3:dd:f1:81:fa:d9:
0f:25:69:fd:e0:15:c1:76:ab:6b:bb:8d:de:46:11:
95:3c:12:45:98:71:43:e7:ca:8c:40:f5:5c:8b:11:
1f:6e:60:ce:fb:99:3b:18:75:c7:2b:18:96:99:10:
71:2f:d7:e4:e2:ba:eb:50:d7:3d:60:a9:83:5d:80:
a7:61:b8:30:1e:e3:7d:9a:ac:b1:e7:4b:41:74:e8:
aa:6d:bb:4c:cb:77:87:b7:17:67:93:7a:16:c5:31:
bf:75:92:a7:13:90:4d:27:dd:b2:28:dc:ae:23:07:
6d:b5:49:aa:6e:5e:88:a3:6d:2a:ad:54:0a:9c:e3:
95:d9:36:2c:9a:3d:5e:5a:aa:31:0a:33:5c:00:9d:
2b:62:69:41:5c:04:7c:c7:89:67:25:d5:2a:49:69:
89:14:79:f4:cb:41:71:d3:6e:96:8e:7f:6d:11:dd:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:48:21:BB:0B:13:CE:9B:6F:4A:10:85:15:23:B0:84:B8:5E:83
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/RwRIIbsLE86bb0oQhRUjsIS4XoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.128.0/22
IPv6:
2a02:2950::/32
Signature Algorithm: sha256WithRSAEncryption
9a:03:6a:9f:0c:94:13:09:0f:dc:86:ca:32:8c:8a:c1:d5:f3:
b7:ca:fc:17:d5:2c:53:8a:8d:4f:31:38:11:e3:3c:df:fa:c6:
13:06:3e:78:82:c0:fb:98:b8:8d:2b:02:04:ab:43:40:f4:bf:
73:21:58:35:2a:51:99:8b:f5:12:12:10:4a:0e:17:42:ac:64:
62:be:92:5a:b5:c5:44:fa:fe:55:f2:d0:43:d6:ae:d3:2e:3d:
52:0a:4f:16:d4:a6:2e:45:ec:bf:7c:91:a5:ba:fd:76:88:3f:
0a:3c:92:69:bd:7a:f1:10:01:03:9f:83:2e:8e:0f:b6:f2:f5:
79:0a:d5:0a:a8:c4:1e:cf:cd:d8:b3:d6:d4:fc:15:9c:6e:bf:
20:61:80:91:06:ee:61:07:16:c1:0b:8e:47:c0:00:0f:53:d0:
4b:f3:8b:9c:9e:ca:95:78:97:1a:d1:02:fd:e4:13:76:e1:fb:
66:a4:26:69:22:5f:bd:51:4a:ef:44:b7:73:ae:85:90:ad:db:
37:1b:df:41:4f:a4:2d:ea:b3:7a:d8:65:05:4e:41:7d:5a:06:
8c:14:fc:42:19:a1:d5:f0:f1:4d:f0:57:02:db:64:bd:2a:84:
22:4a:1e:34:71:96:18:b5:e7:73:27:ef:e4:ae:fc:33:95:59:
ab:c6:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net