Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/_bmkszzmkohJyoAsZLJKOQNpHDc.roa
File: _bmkszzmkohJyoAsZLJKOQNpHDc.roa (raw, json)
Hash identifier: FEKpKG6UhmR+gOG2YGjBSd0usvhQ0sxp0gGyuaji9g8=
Subject key identifier: FD:B9:A4:B3:3C:E6:92:88:49:CA:80:2C:64:B2:4A:39:03:69:1C:37
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018982895C0C42F8428BCF5EE66B65594DE2
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/_bmkszzmkohJyoAsZLJKOQNpHDc.roa
Signing time: Sun 23 Jul 2023 11:36:27 +0000
ROA not before: Sun 23 Jul 2023 11:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/24 maxlen: 24
77.75.194.0/24 maxlen: 24
77.75.195.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:89:5c:0c:42:f8:42:8b:cf:5e:e6:6b:65:59:4d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 23 11:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb9a4b33ce6928849ca802c64b24a3903691c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:52:ab:6a:a4:5b:52:4d:55:54:5c:55:0c:
c6:8b:8d:92:da:f6:f4:fc:01:97:69:ec:ba:5f:18:
4a:82:4f:49:1f:09:4c:c7:1d:2c:98:a8:22:3b:fc:
25:53:a3:8a:57:d5:35:9a:9d:9e:82:72:a8:3b:6d:
5c:4b:14:4b:ad:0c:36:1e:f7:74:05:fb:51:16:0f:
7a:3a:09:90:d2:3c:a3:fb:66:c9:74:17:bd:f8:a1:
fa:5f:0e:f7:8e:dc:de:61:66:ff:9b:70:32:9c:33:
9c:77:d4:d2:00:de:c9:4f:75:63:bb:0a:d5:c5:f7:
97:ef:e4:bd:61:51:92:52:a8:28:2e:39:bd:f8:99:
a8:0e:e9:33:fb:fb:11:46:07:da:76:39:1c:c5:5b:
83:a1:91:d5:95:79:a3:9c:76:d1:be:a2:2d:65:62:
76:2b:91:af:9b:f3:32:d2:a1:80:5a:3c:b9:c8:a3:
6c:a0:b1:62:83:fd:6b:5a:e3:fc:93:7c:15:1a:9e:
c0:7a:a1:a0:62:8f:e6:3b:22:cb:92:dc:40:8e:3c:
8b:05:e5:ca:63:fe:1e:71:05:af:b4:0c:1d:aa:11:
fc:17:70:97:49:3a:0e:a1:f9:66:be:e0:5a:db:61:
37:0e:9d:0c:4b:02:04:5d:0e:8b:72:13:b0:aa:86:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:A4:B3:3C:E6:92:88:49:CA:80:2C:64:B2:4A:39:03:69:1C:37
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/_bmkszzmkohJyoAsZLJKOQNpHDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0-77.75.197.255
Signature Algorithm: sha256WithRSAEncryption
19:27:4b:a1:8a:85:0b:21:f0:71:39:6c:87:bb:22:85:9c:0e:
b9:fb:26:9f:2e:68:04:e1:b6:24:05:10:eb:2d:98:be:96:c3:
d1:99:80:16:c9:7b:40:61:bd:c1:32:d9:43:f4:46:5a:e3:d8:
98:7c:57:19:a0:17:bb:8d:21:0e:d9:5e:2e:a6:e2:ac:ab:4b:
2a:4c:14:7c:b7:dd:be:9d:f8:7b:a1:85:61:3f:8e:eb:a5:b7:
a3:02:3b:04:0d:93:f3:a6:09:dd:d8:df:89:5b:b2:a1:58:28:
9a:63:fd:98:d3:76:58:1e:22:9b:22:dc:4c:9d:3b:a1:ba:ac:
a8:33:a0:94:b3:be:00:99:fb:c3:16:e6:20:da:b8:43:a3:7e:
ca:68:9a:10:36:ba:1b:3b:d6:da:33:1e:50:f3:14:11:13:d6:
7d:dc:8b:1f:bd:ba:6b:93:b3:91:32:e0:37:d2:bf:85:3a:73:
77:af:b8:9c:a9:32:59:5e:2e:33:d9:32:77:5f:9d:20:63:d3:
28:21:29:89:be:9d:ac:e7:fc:13:86:d9:2d:b7:77:68:3a:32:
84:e6:8e:e0:67:bb:94:15:f9:18:af:38:7c:2a:6f:c2:42:98:
1a:53:4c:18:14:c7:b4:93:63:24:e7:fe:15:b0:8d:15:3a:e5:
4b:19:5c:ad
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYmCiVwMQvhCi89e5mtlWU3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NGUzZTFiZWNmMzBiNDRhNDY5ODE1ZmQwZjhjMDY5YzU2
MmY5OTYwHhcNMjMwNzIzMTEzNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGI5YTRiMzNjZTY5Mjg4NDljYTgwMmM2NGIyNGEzOTAzNjkxYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyxSq2qkW1JNVVRcVQzGi42S2vb0
/AGXaey6XxhKgk9JHwlMxx0smKgiO/wlU6OKV9U1mp2egnKoO21cSxRLrQw2Hvd0
BftRFg96OgmQ0jyj+2bJdBe9+KH6Xw73jtzeYWb/m3AynDOcd9TSAN7JT3VjuwrV
xfeX7+S9YVGSUqgoLjm9+JmoDukz+/sRRgfadjkcxVuDoZHVlXmjnHbRvqItZWJ2
K5Gvm/My0qGAWjy5yKNsoLFig/1rWuP8k3wVGp7AeqGgYo/mOyLLktxAjjyLBeXK
Y/4ecQWvtAwdqhH8F3CXSToOoflmvuBa22E3Dp0MSwIEXQ6LchOwqobZvwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP25pLM85pKIScqALGSySjkDaRw3MB8GA1UdIwQY
MBaAFKhOPhvs8wtEpGmBX9D4wGnFYvmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYt
Y2M0ZmU2MzIzZmVjLzEvX2Jta3N6em1rb2hKeW9Bc1pMSktPUU5wSERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYtY2M0ZmU2MzIzZmVj
LzEvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZNS8AD
BAFNS8QwDQYJKoZIhvcNAQELBQADggEBABknS6GKhQsh8HE5bIe7IoWcDrn7Jp8u
aAThtiQFEOstmL6Ww9GZgBbJe0BhvcEy2UP0Rlrj2Jh8VxmgF7uNIQ7ZXi6m4qyr
SypMFHy33b6d+HuhhWE/juult6MCOwQNk/OmCd3Y34lbsqFYKJpj/ZjTdlgeIpsi
3EydO6G6rKgzoJSzvgCZ+8MW5iDauEOjfspomhA2uhs71tozHlDzFBET1n3cix+9
umuTs5Ey4DfSv4U6c3evuJypMlleLjPZMndfnSBj0yghKYm+nazn/BOG2S23d2g6
MoTmjuBnu5QV+RivOHwqb8JCmBpTTBgUx7STYyTn/hWwjRU65UsZXK0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:43 2025 by rpki-client