Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/gg4kjQH-MRQrS-FzBjsif1edZso.roa
File: gg4kjQH-MRQrS-FzBjsif1edZso.roa (raw, json)
Hash identifier: K0w6We/nHbxDdN4hPxZ1hRud5nyEBhVgL5F/G8Gxd1w=
Subject key identifier: 82:0E:24:8D:01:FE:31:14:2B:4B:E1:73:06:3B:22:7F:57:9D:66:CA
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019421B1BA76CEA43F3EBF13880C06CDBC79
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/gg4kjQH-MRQrS-FzBjsif1edZso.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 86.106.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ba:76:ce:a4:3f:3e:bf:13:88:0c:06:cd:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820e248d01fe31142b4be173063b227f579d66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:88:9e:3e:cd:60:95:6d:f6:f7:10:11:86:
d5:15:a0:54:52:73:77:ef:52:78:6b:b6:9a:cb:b8:
5e:4e:f8:2e:40:08:61:ba:1d:69:8d:e8:90:72:74:
27:cc:76:69:a0:05:eb:b7:78:09:b8:d4:51:cb:94:
43:32:d4:07:54:f9:1d:9f:f5:ea:28:fb:e7:81:2b:
4e:fc:7a:2a:76:5e:20:76:f1:8b:38:b1:65:66:f0:
69:e3:24:90:8e:04:43:2d:d4:27:78:b3:8a:ee:35:
fb:1c:37:e3:0e:e7:59:1e:fe:d1:34:47:34:9c:05:
31:54:24:e7:7c:b3:37:74:ec:c9:1e:a6:48:06:87:
14:22:2f:1a:a7:13:30:2c:f2:a3:35:b4:d3:d5:e5:
cd:f5:a1:84:31:78:e8:84:d7:4d:39:29:08:3d:a0:
6a:04:ee:f2:12:89:96:8c:3e:c2:3f:5f:13:28:2c:
c8:6d:57:75:8a:10:56:eb:4e:1c:7e:01:b9:f7:a9:
1f:f6:c6:37:2a:0f:91:1e:b1:f4:7d:76:13:3a:68:
89:a4:4d:28:d3:66:36:15:a2:5e:ab:5e:56:ef:a9:
cc:e1:fc:da:4e:c8:8d:7a:11:33:79:28:be:ee:da:
b5:e9:3d:9e:d1:11:f4:85:42:2a:89:3c:c1:c2:4a:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:24:8D:01:FE:31:14:2B:4B:E1:73:06:3B:22:7F:57:9D:66:CA
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/gg4kjQH-MRQrS-FzBjsif1edZso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:37:78:e1:d9:41:46:4a:a1:15:86:5f:d9:f0:91:01:96:9d:
9c:49:bb:a0:4e:b7:8d:02:6d:3d:da:c1:6b:8d:0d:77:da:fc:
cc:c1:92:e7:da:91:ba:30:56:25:ad:0e:f8:ed:c8:64:03:e4:
5e:1b:1d:f2:3a:77:06:d7:82:9a:7a:51:dd:f0:2f:c9:09:13:
61:fd:a0:df:ec:77:ed:09:ec:65:93:3a:0c:85:6d:ee:56:c3:
e9:49:36:85:60:c3:98:1c:da:ad:58:1e:b3:21:5b:95:d9:39:
09:c7:c5:c9:55:ae:0f:56:be:70:8e:87:8a:47:e2:bf:26:39:
fc:2c:54:87:69:7b:73:ef:f7:2d:84:e2:d3:32:51:21:97:00:
31:e8:8e:2b:25:dc:65:b2:b7:96:9c:cf:d2:38:d7:f0:dd:a1:
1a:1b:26:86:2d:3c:a2:b3:b3:c2:6c:92:8e:ba:6a:88:cf:44:
cf:79:44:ea:ce:7d:b7:ad:2a:53:b1:0a:37:a7:64:7d:d4:cf:
f9:21:af:78:25:75:b2:c7:1d:dc:d5:04:81:85:74:91:6a:f0:
da:2a:7b:78:b7:de:30:38:23:93:24:86:aa:fa:f6:da:33:bb:
f6:46:c9:d5:3e:8b:12:36:2a:03:dc:8b:19:7a:b8:9f:5b:18:
18:14:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client