Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/P6mssWX-V0cqAzHy81OLWoJ95tA.roa
File: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (raw, json)
Hash identifier: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=
Subject key identifier: 3F:A9:AC:B1:65:FE:57:47:2A:03:31:F2:F3:53:8B:5A:82:7D:E6:D0
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01958F7340CB01612378FBD5782BD4982D3C
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/P6mssWX-V0cqAzHy81OLWoJ95tA.roa
Signing time: Thu 13 Mar 2025 12:20:49 +0000
ROA not before: Thu 13 Mar 2025 12:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 77.93.89.0/24 maxlen: 24
2a14:7dc0:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:73:40:cb:01:61:23:78:fb:d5:78:2b:d4:98:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Mar 13 12:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa9acb165fe57472a0331f2f3538b5a827de6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:94:4a:df:51:a0:c0:02:27:ab:a3:be:53:
0d:e8:f1:51:fd:25:24:89:99:4a:5b:4e:b0:c8:8f:
ad:69:6e:19:58:e5:b5:b4:12:bf:88:c2:41:91:a5:
5d:fa:ec:7d:50:6e:5d:a3:b1:a6:89:9d:bc:30:26:
60:e4:be:69:53:4e:31:6d:21:59:aa:1c:00:b6:b4:
0e:8a:8c:f0:ef:42:b3:2b:f2:91:ba:08:f9:6e:33:
02:31:0d:2a:3f:7b:2b:a7:e0:6f:08:39:f7:f9:fb:
3f:e9:6e:21:15:bc:95:df:fd:d5:52:a0:f0:2a:ad:
69:10:45:4f:e4:47:8c:5f:f9:df:f6:d0:3a:47:66:
ed:68:ca:6e:ff:8e:a7:ab:3f:41:e9:76:c7:cd:ca:
b6:43:b3:98:c3:23:b8:bd:18:83:ef:66:f9:fb:26:
66:57:94:5c:9d:3b:8b:66:a0:a1:8f:a4:15:9c:86:
21:6f:aa:f8:eb:bf:42:ff:30:ea:dc:58:52:ac:4d:
be:07:be:72:3a:8e:1a:ee:98:26:ae:9a:ca:30:4d:
06:88:22:6a:70:c9:cb:69:f4:6c:f4:94:6c:b4:c8:
38:b7:e5:72:43:4b:dc:00:6e:c9:31:e0:86:e1:4e:
e1:84:4f:25:93:1e:8a:47:9f:60:a7:1c:db:72:ab:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:AC:B1:65:FE:57:47:2A:03:31:F2:F3:53:8B:5A:82:7D:E6:D0
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/P6mssWX-V0cqAzHy81OLWoJ95tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.89.0/24
IPv6:
2a14:7dc0:200::/40
Signature Algorithm: sha256WithRSAEncryption
27:7f:4f:f9:83:b4:76:a7:11:a2:67:9a:f1:c3:d0:ab:44:25:
41:7c:61:51:a8:ab:80:1f:f9:fd:45:d6:24:bf:9b:70:28:f4:
c3:e1:93:cd:85:3f:84:29:16:5d:fc:72:3f:94:a1:19:40:c0:
c9:21:53:96:5e:55:ed:4b:03:72:89:a7:23:7f:92:dc:2c:b0:
bc:24:2e:0b:2c:1c:a2:9e:6c:e4:94:e3:cd:ba:3e:b3:61:6a:
2f:d2:e9:01:6d:27:6c:81:1f:4e:f0:75:ad:4b:85:a9:2f:26:
66:8b:2a:66:2b:98:27:16:a0:f1:b9:bd:c5:bc:b8:96:15:30:
c0:be:cf:c3:f1:ec:27:c3:47:9e:5f:3a:39:c0:ed:6f:00:58:
6a:aa:90:85:b8:f4:4c:2e:ab:32:47:7e:7c:6e:b6:4d:bf:a9:
5a:f6:e2:a2:1c:66:ca:da:fe:ba:dc:3c:1a:15:35:4e:c4:a7:
d3:03:f5:ea:1b:80:cb:0d:1b:53:60:d4:6b:e8:f4:95:2c:c8:
41:9f:d0:33:00:d3:55:9f:8b:a0:65:c6:da:33:9f:94:d3:90:
66:fa:cc:5c:b0:9a:37:07:1b:97:5e:48:fe:ae:7b:b1:f6:6c:
ff:38:9c:77:2b:8f:4a:f9:43:f9:a3:f2:f9:89:f4:49:b4:0e:
4a:99:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:30 2025 by rpki-client