Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa
File: HmAWshmXF3EpTVk1HGywAFAym4Y.roa (raw, json)
Hash identifier: 1DZgQJ7Q94BzmH4/2ZEzQg46iu5oGkGgyuCOlA/q6PQ=
Subject key identifier: 1E:60:16:B2:19:97:17:71:29:4D:59:35:1C:6C:B0:00:50:32:9B:86
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189BA8668307411C350EA067146321909B6
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa
Signing time: Thu 03 Aug 2023 08:31:57 +0000
ROA not before: Thu 03 Aug 2023 08:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:86:68:30:74:11:c3:50:ea:06:71:46:32:19:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Aug 3 08:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e6016b219971771294d59351c6cb00050329b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:31:88:c9:2d:8c:c6:c9:52:c4:72:f0:04:
03:5c:02:b7:a4:cb:21:da:87:23:15:29:5f:2d:9a:
20:a1:c2:df:2a:a6:c9:06:23:da:d5:6e:48:3c:c3:
9d:89:d5:a0:5c:79:57:5a:9d:b6:92:07:56:57:02:
4c:ee:ef:e4:d3:3d:57:30:17:ba:b6:63:37:b2:69:
d9:42:67:70:b9:e3:bd:a2:4f:47:e7:e9:51:9c:5c:
d5:1f:74:4a:4f:43:96:47:50:c7:df:3c:c1:38:d8:
8e:7b:d4:c5:18:cf:32:fa:03:7d:f9:a9:53:d5:e9:
02:ee:6d:9e:ce:75:1f:4a:a2:32:e5:8d:f5:de:dd:
ee:2f:82:f7:c7:3c:c8:90:f6:03:be:1a:00:47:5f:
72:95:58:58:9d:2e:c0:df:0b:5a:40:de:a1:ef:3b:
66:6f:27:62:fd:63:6c:63:ef:16:84:1a:fe:a0:e2:
02:26:d8:85:3b:15:61:0e:35:bb:e0:43:ca:5a:b8:
02:3e:08:f2:f0:67:8e:b6:02:b3:bb:39:05:99:94:
c4:bb:1f:7f:12:b5:ac:d0:9e:13:f8:be:db:c3:53:
31:cc:e0:45:1c:c4:74:30:49:91:72:2c:91:6b:49:
95:0d:a9:1d:aa:a9:f7:ec:c7:e6:d2:0f:17:a4:bb:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:16:B2:19:97:17:71:29:4D:59:35:1C:6C:B0:00:50:32:9B:86
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:2d:17:28:b8:6e:71:30:8a:1b:3c:95:04:58:84:7f:08:14:
eb:06:cf:cd:81:3d:e3:f5:64:34:95:31:3a:98:72:68:8a:c0:
1b:2e:81:f5:eb:a7:fa:30:36:17:51:cb:b9:78:b8:d8:aa:5f:
b7:e2:c7:e9:c0:98:79:42:b9:e1:1a:42:e6:d7:a2:93:cb:eb:
38:b4:7a:3e:20:d8:81:26:94:fc:4a:09:9d:84:ba:b6:70:b4:
a1:df:06:96:9a:5e:bf:64:e8:cd:4b:99:93:6d:77:a7:bc:6b:
70:e8:03:e4:93:3d:39:9d:46:d1:5a:53:b6:85:4e:3d:5b:59:
05:92:77:bd:39:52:57:ff:a0:4c:e6:48:e4:60:f4:70:84:a6:
d3:66:04:72:5c:ac:55:cf:8d:7c:59:54:da:b7:f5:8a:8a:97:
b6:f5:dd:8d:05:a3:97:99:7c:05:6c:d6:d3:95:0f:6b:f6:c6:
2c:b5:88:db:b0:92:2f:da:f6:4f:d9:7e:69:61:09:8a:1a:80:
c2:79:e8:2d:03:91:7f:8a:ef:0f:96:fe:aa:9f:91:d9:0f:1a:
0c:65:6b:8d:3c:14:0c:10:81:04:e1:ff:3f:3b:9b:4e:02:11:
d0:0d:7c:ee:2c:c8:b7:d5:a9:35:24:8d:9c:a4:58:59:90:0b:
b4:b0:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:04 2025 by rpki-client