Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/aU2i26EEM5VxVbuWm4L-ae2R0OU.roa
File: aU2i26EEM5VxVbuWm4L-ae2R0OU.roa (raw, json)
Hash identifier: tnF7oC2PRaos76JUzm8nYMb1J59V5BWZZ5z5j62uuyA=
Subject key identifier: 69:4D:A2:DB:A1:04:33:95:71:55:BB:96:9B:82:FE:69:ED:91:D0:E5
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018FE01D4CCBF492B0CF4A9D0B68E734873B
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/aU2i26EEM5VxVbuWm4L-ae2R0OU.roa
Signing time: Mon 03 Jun 2024 21:59:27 +0000
ROA not before: Mon 03 Jun 2024 21:59:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
121.127.48.0/21 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e0:1d:4c:cb:f4:92:b0:cf:4a:9d:0b:68:e7:34:87:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 3 21:59:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=694da2dba10433957155bb969b82fe69ed91d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cb:cf:d5:62:a9:5d:e7:d7:5b:96:08:3a:ea:
65:cb:fc:32:48:2a:e1:7b:78:ae:34:2f:d1:0b:cc:
90:69:0f:cf:90:b6:ff:45:8a:3f:5a:98:a4:85:2d:
71:ae:8d:ea:a3:8c:7d:67:ed:10:b6:ae:f6:a7:05:
bd:7a:1d:65:06:64:4e:a8:0e:e2:ae:01:8f:f4:84:
90:ef:44:24:58:32:9e:ef:64:c3:ec:16:f7:e1:1c:
fa:3f:24:2e:fb:b4:0c:5e:41:e2:33:09:be:b8:1f:
95:04:b6:db:49:4c:fb:d8:7c:61:f1:05:ea:c9:11:
2d:0e:7b:d3:dc:30:f5:35:b2:3c:9e:e1:e3:05:3b:
80:96:72:5b:2f:2d:d3:71:ae:d2:8d:e3:ed:24:bd:
7e:a5:4e:f9:b4:e5:c0:d6:6b:97:33:d0:a1:e7:ae:
a0:ed:2f:0d:ba:b1:7c:65:87:03:4c:3e:16:97:94:
f3:53:3a:44:2b:2e:5d:fc:9e:b3:4d:a1:a9:14:84:
42:a4:31:e7:7e:55:3b:db:82:36:f4:6e:1f:52:98:
9e:e1:93:57:59:0c:6b:4c:cc:21:1c:73:c2:60:ec:
2b:c3:44:f9:b7:5b:54:f8:f5:99:46:a0:62:c5:61:
32:e2:a9:a3:8f:0e:24:ef:1d:c0:17:88:cb:ad:c0:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:A2:DB:A1:04:33:95:71:55:BB:96:9B:82:FE:69:ED:91:D0:E5
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/aU2i26EEM5VxVbuWm4L-ae2R0OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.200.0/23
79.139.64.0/23
121.127.48.0/21
168.75.224.0/20
176.222.48.0/22
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:b2:2c:00:95:43:50:ca:20:0d:56:1f:1f:40:08:a8:2a:a1:
e8:3f:b6:d7:68:7f:f2:1a:52:45:c8:8b:8f:fa:bc:a6:29:a5:
3c:38:a0:51:86:89:cc:c7:57:3f:5d:3a:11:ab:72:7d:62:e3:
3d:0e:c0:c8:c3:d2:9d:43:14:b3:69:39:3f:a5:96:ff:39:77:
fb:b2:a6:dc:cb:da:11:1c:19:66:00:0e:4a:83:3b:f7:7f:25:
58:a0:dc:2f:6f:13:31:60:69:c1:62:bb:2f:21:91:00:81:45:
51:82:d3:ec:90:44:ea:5c:c2:8f:6c:08:c8:7b:dd:1e:5c:2a:
fe:02:d7:4c:30:b2:97:1a:02:1b:88:7b:ff:89:a2:f3:82:39:
ea:c4:f1:6e:89:b2:97:ee:71:12:ca:1a:a5:15:8d:2c:5e:5a:
43:20:f9:aa:db:91:15:2b:c8:37:6c:68:1a:88:b5:b9:d7:96:
b3:42:4f:d0:6f:c6:81:b5:1a:7d:a8:8c:ee:68:35:eb:75:29:
74:8d:8e:34:79:73:0e:46:a1:30:f9:75:67:4f:37:8d:32:54:
47:b9:ce:89:ce:89:12:eb:41:d1:26:16:d8:b9:45:1a:f1:f7:
d8:87:4b:09:52:ed:d1:9a:b6:4f:ee:d1:77:f6:8e:16:da:3d:
e7:09:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:54 2025 by rpki-client