Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/64k07xHeVqfVk_gc9ks2CvFktaQ.roa
File: 64k07xHeVqfVk_gc9ks2CvFktaQ.roa (raw, json)
Hash identifier: xmm7dCARGCdAJFIRnR9S4+VZk93CY7wzcj0G0mf/7v0=
Subject key identifier: EB:89:34:EF:11:DE:56:A7:D5:93:F8:1C:F6:4B:36:0A:F1:64:B5:A4
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FF9B0DD66C3AFE6118AB2BBD5AAE
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/64k07xHeVqfVk_gc9ks2CvFktaQ.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215376
IP address blocks: 77.221.134.0/24 maxlen: 24
77.221.146.0/24 maxlen: 24
176.98.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ff:9b:0d:d6:6c:3a:fe:61:18:ab:2b:bd:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb8934ef11de56a7d593f81cf64b360af164b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:45:74:54:0e:ec:b0:1a:54:1f:52:a4:2d:
4f:a6:b5:f1:05:8a:83:99:1e:37:a1:b1:23:2d:28:
cc:8d:35:cb:72:7f:70:0a:a8:10:10:8f:33:34:1a:
b0:36:a4:21:09:b1:a6:ef:e1:64:b9:a9:6f:87:37:
65:ee:a7:43:38:5e:24:7f:de:c3:07:ff:05:45:74:
3a:65:99:84:42:00:ca:b0:44:76:82:e3:a3:05:d4:
f3:db:9d:04:6d:f2:23:d4:82:56:4d:a6:5d:b4:0c:
ea:4a:2a:a9:13:86:94:01:16:e1:f5:a5:dd:e8:97:
5a:83:c2:8a:8a:43:f5:2e:eb:d2:37:c4:d6:ec:df:
1f:e5:6a:72:38:ce:51:62:6a:4e:db:49:9b:42:f1:
c5:8e:cf:98:ec:e8:92:f7:c8:c0:c3:85:ab:c8:d6:
cb:2a:2a:a0:9b:18:ec:a1:9c:78:94:69:53:6d:b3:
9e:2a:2d:09:04:20:83:3b:00:73:73:14:e0:7d:7f:
62:3f:32:8b:4d:4b:7b:fc:61:2f:e2:d0:62:a6:eb:
2d:2a:da:76:ae:ef:8c:92:42:e4:2f:02:81:ac:04:
2b:f8:ce:90:a2:e0:08:0e:44:27:6b:fc:29:4a:5b:
3e:f5:28:20:50:60:9a:f5:33:02:62:ce:66:ba:27:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:89:34:EF:11:DE:56:A7:D5:93:F8:1C:F6:4B:36:0A:F1:64:B5:A4
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/64k07xHeVqfVk_gc9ks2CvFktaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.134.0/24
77.221.146.0/24
176.98.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2f:d0:71:4b:c1:8a:96:7e:a8:9d:9e:be:12:ca:52:62:f0:
22:15:aa:08:07:65:8c:ca:d0:26:b0:56:98:4d:ed:90:cc:ec:
43:8d:5c:14:85:58:e1:6f:93:03:8e:24:a5:dc:22:16:7c:53:
b2:44:07:9d:44:10:85:72:20:5c:50:93:79:e1:8a:0f:1a:5c:
be:75:82:ec:d8:7a:98:db:8d:df:da:44:89:c2:5e:85:e5:20:
fe:37:48:34:9a:e6:45:8e:0a:2f:5c:31:64:0f:7e:9a:4e:4c:
62:ab:f4:fc:d6:45:05:7e:7d:84:4d:b0:2a:43:90:cc:7f:b7:
9b:2e:0f:74:86:5f:57:1e:e2:53:b3:24:63:2e:dd:ca:96:07:
2e:06:96:1a:3e:8b:76:90:9b:0d:ae:a0:5c:7e:32:eb:3c:2b:
61:cc:fe:3f:9b:d9:60:ab:8b:14:4a:82:77:e5:07:ef:06:fc:
d7:10:15:e7:38:9f:72:60:56:21:76:b3:2d:50:d2:b1:6f:bb:
1b:14:7e:71:8e:84:fb:25:5f:ff:ab:62:9b:ec:b9:73:c2:c3:
6a:9b:d3:71:67:2b:1e:87:50:dd:52:82:16:3e:96:b6:0e:6b:
92:8f:9c:ca:56:ed:43:5d:56:68:68:49:4d:6a:4c:1a:2e:65:
9b:9e:51:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:42 2025 by rpki-client