Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wcbxbDg6iPLuqAiBAHqIkmdck1I.roa
File: wcbxbDg6iPLuqAiBAHqIkmdck1I.roa (raw, json)
Hash identifier: f5sg5Rd6VRv0BtCoMgCPuytSGr7+8lGrxXrZ+/PMaDA=
Subject key identifier: C1:C6:F1:6C:38:3A:88:F2:EE:A8:08:81:00:7A:88:92:67:5C:93:52
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194B27653A68E2E928E1C25AF146C461A14
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wcbxbDg6iPLuqAiBAHqIkmdck1I.roa
Signing time: Wed 29 Jan 2025 14:28:06 +0000
ROA not before: Wed 29 Jan 2025 14:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48592
IP address blocks: 77.81.76.0/24 maxlen: 24
77.81.78.0/24 maxlen: 24
77.81.82.0/24 maxlen: 24
77.81.83.0/24 maxlen: 24
128.65.160.0/22 maxlen: 22
185.39.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:76:53:a6:8e:2e:92:8e:1c:25:af:14:6c:46:1a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 29 14:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c6f16c383a88f2eea80881007a8892675c9352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:ef:cd:ef:31:33:a0:e0:60:56:c5:c6:8d:
81:5c:57:a8:ba:07:4a:4a:38:8b:86:2b:97:7c:9c:
60:9a:40:6d:ef:f2:66:d3:ab:3a:fa:3f:02:d9:85:
83:5b:0e:39:71:fa:6c:fd:95:a8:9e:d4:73:52:62:
8c:cd:21:21:69:09:d4:8d:0d:2d:57:fd:4a:c7:ac:
63:41:e7:64:31:ca:45:b9:64:4e:9d:5d:a5:cb:ad:
44:26:ac:e2:8a:e6:c1:a5:40:9b:48:37:4c:72:54:
02:08:42:38:c4:36:f5:fc:34:25:16:ae:8d:7e:5a:
3a:88:02:81:62:88:15:fe:69:cd:c0:41:91:06:9c:
3e:a2:f6:48:c3:f3:23:3c:93:d4:c8:98:92:c6:3b:
75:68:c0:81:5f:ec:33:a7:31:9d:86:7c:f8:1e:18:
b4:3c:59:3e:16:33:29:ba:39:86:ce:b4:16:7e:e6:
68:7f:46:32:30:2c:e9:1a:34:51:ee:5f:b7:5c:bc:
44:e1:e9:9b:2c:79:2c:86:b1:9c:92:09:7b:8b:1c:
99:e3:e2:40:cf:e4:61:19:e8:ec:f4:ff:61:d4:5e:
d6:fd:c4:f7:0d:67:aa:cf:b3:a1:8b:66:27:01:55:
12:f6:be:b3:f5:42:df:79:e3:7a:78:43:fc:59:20:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C6:F1:6C:38:3A:88:F2:EE:A8:08:81:00:7A:88:92:67:5C:93:52
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/wcbxbDg6iPLuqAiBAHqIkmdck1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0/24
77.81.78.0/24
77.81.82.0/23
128.65.160.0/22
185.39.180.0/22
Signature Algorithm: sha256WithRSAEncryption
80:63:9c:77:7c:e8:de:48:53:cb:a4:4a:b3:99:43:63:56:c1:
15:1b:90:e3:32:0f:e1:ff:8f:ad:1e:23:f5:36:16:d7:af:23:
a4:bd:38:fc:a4:36:53:4f:40:7d:71:fd:7b:18:1a:9a:40:73:
b1:43:73:13:ee:ac:34:76:86:a7:ff:3b:91:3c:40:62:7a:d6:
3f:72:22:e7:c0:16:63:59:cf:04:94:e5:e4:ac:c2:70:60:51:
a3:dc:df:4b:5a:68:cd:d9:63:6f:4f:92:3e:c6:d9:04:4f:5b:
8a:5e:1f:b8:f0:d7:b3:b1:e9:66:12:05:39:63:95:9c:c7:13:
91:b5:06:f2:b7:62:05:c1:72:4d:b2:29:d5:73:42:36:ac:f0:
22:c2:c6:a1:0a:3c:bc:cd:d6:ab:d8:db:12:62:2f:4c:05:c0:
21:fe:fb:c2:8d:9a:f3:ff:f7:89:b1:cb:b8:81:f4:0f:c3:ba:
d6:22:91:3f:f2:6e:55:ea:62:41:ba:fc:6a:0f:73:3d:c1:8e:
ff:2c:45:78:7b:4a:61:e1:26:6d:24:2d:b7:75:e1:11:b6:79:
3f:6e:e7:c6:5b:8a:a3:57:3d:f3:34:b7:12:ca:fb:1b:76:f7:
53:99:ef:98:b6:9c:ec:95:13:27:8e:44:39:76:1a:63:45:fa:
16:46:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:38:04 2025 by rpki-client