Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/dfU_zBDIp9SB0Bhu11NxSa9z5wA.roa
File: dfU_zBDIp9SB0Bhu11NxSa9z5wA.roa (raw, json)
Hash identifier: EnpXXH2z6qOXUw5YXM2Hbdqfer1ZvQY1tdLEk7zWodc=
Subject key identifier: 75:F5:3F:CC:10:C8:A7:D4:81:D0:18:6E:D7:53:71:49:AF:73:E7:00
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019326684DACC2D1182591E5918B3A69CD87
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/dfU_zBDIp9SB0Bhu11NxSa9z5wA.roa
Signing time: Wed 13 Nov 2024 16:43:09 +0000
ROA not before: Wed 13 Nov 2024 16:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
89.42.40.0/24 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:68:4d:ac:c2:d1:18:25:91:e5:91:8b:3a:69:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 13 16:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75f53fcc10c8a7d481d0186ed7537149af73e700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:ad:38:9c:1d:97:95:a8:75:87:0f:da:dd:
7a:92:9b:76:7b:f7:af:33:51:54:e7:00:12:9c:ff:
5a:0d:c0:73:d3:88:f7:d6:d5:76:05:03:ea:1c:52:
58:21:4d:f2:32:79:06:d1:ef:e3:5d:93:c3:1a:21:
1b:54:1a:a0:fd:54:a0:db:74:5c:55:40:bb:f4:67:
f2:5f:63:78:3d:17:1a:86:84:38:3d:a2:c6:6a:e1:
c7:bf:fc:b9:58:b6:e5:b6:b8:a6:31:38:18:6c:3f:
b5:80:60:55:96:9c:3e:c0:23:63:d3:85:7f:62:dd:
4b:d0:55:c5:c7:70:44:50:68:ca:e9:c6:b9:13:4c:
82:05:c2:c2:1e:2f:f1:98:dc:e3:c7:02:17:8f:36:
83:0a:5b:5a:1d:f0:53:74:ce:7d:a2:4f:fb:de:0a:
bb:0a:bf:06:7c:49:e1:08:1a:d0:ce:3d:cd:ac:c1:
30:86:d6:00:07:60:46:ef:8e:39:e5:71:20:2b:82:
28:99:99:bb:f5:34:29:3b:32:c5:52:92:ed:a2:31:
59:8e:05:dc:51:81:2d:a8:c9:1f:99:3c:be:25:3e:
08:ee:58:0a:a3:f3:4c:b5:58:a9:8e:1d:c6:f3:13:
9b:d8:8a:f3:8c:30:e7:e6:2d:e0:f7:4d:3d:2d:f5:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:3F:CC:10:C8:A7:D4:81:D0:18:6E:D7:53:71:49:AF:73:E7:00
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/dfU_zBDIp9SB0Bhu11NxSa9z5wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
89.42.40.0/24
94.26.110.0/23
94.101.103.0/24
176.222.48.0/22
178.216.184.0/21
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:9c:14:b3:2e:b8:66:29:ef:14:8b:06:72:42:ab:4d:4f:1a:
2b:cf:a9:5a:c5:c8:fe:d9:2f:51:d1:8d:dc:6d:72:02:d0:85:
5c:49:63:a6:5f:2b:83:e8:56:26:d2:ac:f0:1f:04:58:c0:f2:
af:7a:77:f5:e6:c1:76:5a:28:3e:b4:07:e0:08:ea:25:50:b4:
5c:ef:de:95:9a:17:74:56:3c:65:71:c2:57:91:a4:02:e9:6e:
1b:c3:81:8c:be:6e:dd:54:19:fa:d9:d8:18:16:31:7d:d8:82:
32:97:5b:a8:94:48:dc:8a:d6:5a:13:7b:f9:1c:96:49:08:f8:
37:92:dd:17:e0:c8:d7:c0:c3:07:dc:89:70:0d:4f:ad:cb:92:
2c:16:0b:a2:b9:7c:bf:dc:b5:e8:4d:55:18:bf:6a:39:97:82:
c4:46:be:b0:ba:1b:02:61:ec:75:0c:13:dc:e6:92:01:66:18:
9e:e8:89:76:6c:d1:68:cc:29:3c:f3:18:ce:db:54:99:60:ba:
01:6e:c6:25:6f:5e:2a:25:0c:ea:82:2a:a7:1d:8d:5d:b3:0d:
fc:41:f5:76:d4:2b:96:a5:f1:15:df:3a:a4:09:19:36:74:2d:
18:3b:42:84:d3:16:16:79:6c:3f:4d:01:02:34:be:70:66:40:
02:c5:a6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client