Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa
File: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (raw, json)
Hash identifier: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=
Subject key identifier: E9:7D:D6:CC:94:88:D9:D5:CD:FC:9B:FB:99:CF:AB:22:40:DB:A0:5E
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0194266C021231672D3D31B4221139FA199F
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 37.77.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:02:12:31:67:2d:3d:31:b4:22:11:39:fa:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97dd6cc9488d9d5cdfc9bfb99cfab2240dba05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:16:6a:c7:ce:29:4d:a7:ed:31:5b:b1:b3:
69:18:3e:ee:ac:d2:7f:4e:ed:2b:08:ac:01:d5:ef:
5e:ea:52:a3:07:4f:ef:80:e1:a6:b9:87:93:7c:53:
fd:a7:e8:ce:76:42:56:a7:33:dc:63:d7:91:de:cb:
c6:45:7f:cd:3f:c6:e1:ea:bf:39:40:9a:da:83:2f:
ed:8c:62:94:a1:ff:29:16:e6:e6:63:e5:35:87:86:
b6:1c:5f:f4:e6:85:87:f1:38:c9:c8:65:b2:fd:87:
da:76:92:8d:d5:8e:23:ed:d8:a4:e9:5c:9a:8d:3d:
1a:58:a0:3b:e6:8b:2c:12:c1:b3:33:d7:a1:ff:9c:
7d:a5:01:bf:4f:e8:36:ad:92:c5:24:e6:6c:b1:6f:
c3:bc:2e:15:ff:65:a3:6e:47:b0:a1:49:3a:0a:f8:
6f:c6:77:76:ff:d0:62:fc:42:d1:9a:08:63:a7:81:
2d:04:d5:40:8e:5d:10:69:2f:81:d1:35:e4:08:1e:
95:d2:fe:fc:b1:c0:66:89:e9:4c:26:fd:3e:51:30:
c4:0e:2a:64:b8:85:fb:5a:95:68:bd:b8:0e:87:ed:
a0:70:18:ea:50:38:84:bb:a5:89:6e:cb:f3:dc:c6:
da:cc:76:38:bd:df:0a:12:3c:03:2c:74:1b:dc:d7:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:D6:CC:94:88:D9:D5:CD:FC:9B:FB:99:CF:AB:22:40:DB:A0:5E
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:55:94:a3:ad:8c:16:4f:15:e8:7e:87:21:1a:87:b3:f9:f5:
96:b8:73:82:46:2b:4b:89:5b:9f:6f:01:50:59:41:bc:a4:40:
3f:7c:f1:df:e1:f3:22:ff:82:ee:cb:7c:bb:58:bf:e7:c3:58:
b2:8a:02:69:ff:d1:bd:cf:47:04:a3:ac:14:cb:be:52:2c:93:
80:7f:d4:73:24:e4:fe:26:bd:f9:23:e3:27:06:c5:a4:d5:0a:
a6:8e:35:29:ea:e5:5d:e7:2f:c6:35:63:ce:24:71:56:4c:08:
b1:a2:b0:7d:5f:5f:ea:93:87:3d:82:b5:f3:cb:19:86:d4:1b:
64:3c:c8:9a:26:d2:e0:67:9d:5f:b4:f8:57:e9:42:04:fc:60:
76:c3:82:36:7c:d0:7e:10:b4:43:81:f3:94:9a:e6:f5:a0:b6:
0b:20:7a:7f:d0:e5:97:05:16:97:bf:d2:c5:49:a5:bd:09:cc:
c7:80:49:d6:9d:01:5d:38:dc:32:13:31:51:bc:e1:5d:32:13:
f9:b4:ed:45:f6:f6:c1:c3:c9:b4:ff:03:40:ca:9f:68:88:a4:
c8:23:b3:40:5c:e2:36:35:66:84:91:f4:b7:db:c8:98:3f:7d:
43:57:25:49:46:4f:27:57:e6:ad:3a:64:54:46:30:be:19:20:
4d:55:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:37 2025 by rpki-client