Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G-R3icgaN5f96kgHTAZWrTyZtL4.roa
File: G-R3icgaN5f96kgHTAZWrTyZtL4.roa (raw, json)
Hash identifier: +FJ86DzaEGPWB1qHfIahCz9EZnBPRgIconSBCkmOFwA=
Subject key identifier: 1B:E4:77:89:C8:1A:37:97:FD:EA:48:07:4C:06:56:AD:3C:99:B4:BE
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018D9EC145C689D210F727C46B3B3A4AA762
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G-R3icgaN5f96kgHTAZWrTyZtL4.roa
Signing time: Mon 12 Feb 2024 19:18:02 +0000
ROA not before: Mon 12 Feb 2024 19:18:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:c1:45:c6:89:d2:10:f7:27:c4:6b:3b:3a:4a:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Feb 12 19:18:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1be47789c81a3797fdea48074c0656ad3c99b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:c4:c0:49:c6:f6:41:02:bc:a1:0e:c7:2c:
db:7f:d7:95:3b:07:67:24:f6:84:20:39:3b:17:a8:
cb:0b:4c:46:6a:aa:69:ca:5e:1b:de:ac:c2:b1:eb:
21:70:33:f5:3d:93:d0:32:7c:5a:eb:9c:5a:5a:77:
bb:82:55:01:38:cc:c5:33:9c:0d:1a:b3:11:74:6b:
6f:9e:19:cf:46:f0:b0:d7:24:fe:00:60:59:98:db:
b4:5a:7b:90:e9:d9:1e:f4:af:c0:1c:df:77:f4:fe:
36:63:24:b8:73:83:27:75:b2:35:5f:68:c5:86:fd:
bf:42:62:93:ae:48:9a:d5:c5:6b:23:d6:c3:94:93:
97:d5:ed:95:05:f5:dc:cf:f1:c4:66:b9:49:9c:3e:
e6:cd:5d:a8:16:39:9c:01:32:20:d1:f4:d1:ab:30:
c3:74:db:a3:07:45:05:c8:33:d9:9f:ee:c0:23:41:
96:3c:62:8c:cc:1c:03:34:f2:d5:93:37:bd:e9:5f:
10:71:e1:93:c0:ec:ae:47:b6:1f:01:00:8d:cf:6c:
09:ca:ca:c0:60:75:0a:21:ad:e7:06:5e:39:63:6d:
95:4f:62:21:31:79:0c:ba:c1:40:14:92:5c:20:70:
e7:86:49:09:8c:d4:8a:4f:a0:fa:77:0d:8a:1f:e4:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:77:89:C8:1A:37:97:FD:EA:48:07:4C:06:56:AD:3C:99:B4:BE
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G-R3icgaN5f96kgHTAZWrTyZtL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
176.222.48.0/22
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f8:55:2d:8d:f6:02:35:97:73:9b:b5:97:8e:ff:7e:ec:bb:
26:33:83:b8:a8:15:aa:93:fc:8f:fa:37:44:36:f0:a2:bf:88:
fe:5c:da:3d:e8:7c:1f:50:5c:1a:71:df:2a:2a:e1:1a:af:24:
8e:72:aa:09:97:3b:4f:3f:72:72:8e:bd:7f:18:12:3b:6b:ae:
1e:91:b9:7e:99:a5:94:4e:85:43:7c:56:3d:f0:9d:9d:0e:8f:
64:f0:7c:fa:cc:0c:8b:59:2a:39:35:bb:07:7f:46:e9:7d:c3:
68:ed:d7:c9:37:7d:e6:e8:0b:58:5b:6c:01:0b:41:a9:e3:f9:
f2:dd:ff:0b:15:ba:2b:78:f2:a7:ae:49:46:f6:b6:a7:74:bf:
da:23:d1:ea:c5:dd:96:5e:39:be:7b:ed:d8:0b:55:ce:cd:f8:
fc:a3:f4:ca:3c:b4:a1:d6:9a:54:01:39:d4:0c:c3:71:60:ca:
bb:65:91:08:78:f7:e5:f7:b0:a7:ef:10:aa:f2:e1:6c:f0:2e:
0f:e0:8c:de:08:ff:f0:47:6d:c6:dc:85:6b:b6:71:5e:c0:5c:
a9:d4:89:df:f3:5d:2f:92:fa:16:e2:ac:43:e0:76:50:81:7b:
f4:8a:e3:22:59:58:5b:40:f5:a8:66:6d:c7:fe:27:34:de:56:
9b:a7:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:47 2025 by rpki-client