Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa
File: o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa (raw, json)
Hash identifier: edui4DJ8uhrPK6jmmzHthzn4amaivBJBKux5PmZSRuw=
Subject key identifier: A3:69:0B:F9:F6:1D:29:ED:6D:5D:0E:E5:E0:32:8A:CB:93:E1:FF:B1
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018AD1E0867033C8204AD404BEA44C37B69D
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa
Signing time: Tue 26 Sep 2023 14:24:27 +0000
ROA not before: Tue 26 Sep 2023 14:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:e0:86:70:33:c8:20:4a:d4:04:be:a4:4c:37:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Sep 26 14:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3690bf9f61d29ed6d5d0ee5e0328acb93e1ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:70:13:4e:1b:42:56:af:8d:8e:5b:2c:f8:
28:b8:8d:2f:07:c4:18:99:41:de:6c:17:40:cb:bd:
c9:b1:dd:6d:3a:ec:67:72:6d:98:f9:05:6c:f4:7f:
06:32:bd:1d:86:64:bc:b0:86:f7:e6:80:5f:7f:7e:
54:80:4e:09:5f:5c:25:42:ca:7a:3e:2b:1a:11:a9:
b0:33:02:3b:7d:31:6e:81:b5:01:7b:1c:a5:83:86:
64:07:5b:72:72:4e:1e:14:c2:f2:50:c8:8b:7f:f4:
5a:57:cf:94:e3:af:4f:26:63:58:6b:6e:03:78:ef:
f5:a1:ff:0c:a3:7b:a0:a6:d2:e0:c9:32:8d:3d:a9:
28:28:bf:1e:30:9a:2c:2b:37:75:dc:76:c2:8c:e0:
68:0e:8e:d5:07:b3:10:3e:6c:6c:a5:1e:ef:94:8e:
ee:67:8c:0d:cc:cc:f4:51:7f:13:de:8d:55:e1:cd:
e5:30:e7:54:94:3a:a0:42:9c:96:48:05:93:fa:ef:
0f:a6:78:b9:50:c7:0a:9c:4d:17:aa:37:ab:21:bb:
b9:77:04:3c:97:e9:c7:c0:a2:9f:70:36:dd:0d:33:
94:0e:0a:45:9f:dd:a7:f3:6d:e7:fb:fe:2e:c7:5c:
e0:0b:4d:c2:b8:a0:00:a0:65:75:f3:bc:61:ef:9a:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:0B:F9:F6:1D:29:ED:6D:5D:0E:E5:E0:32:8A:CB:93:E1:FF:B1
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.196.0/24
Signature Algorithm: sha256WithRSAEncryption
46:09:59:d5:17:f0:38:d3:df:6e:72:e1:72:1f:ac:75:72:c5:
cb:ed:f1:8b:36:66:fb:37:05:b3:05:20:a8:d7:46:55:78:16:
73:55:47:c7:b6:b8:88:f3:d8:2e:ec:fa:ee:c9:60:ba:13:61:
58:e9:1a:b6:c1:ac:a8:8e:7d:47:2b:1d:6d:54:9f:12:ab:57:
f3:50:b9:5d:c3:29:cc:44:5a:1a:26:c4:e6:44:48:ab:47:c5:
cc:a5:d1:5a:5a:38:ba:cd:8a:7f:20:18:2d:e6:46:0b:fe:02:
f9:38:5c:26:01:d1:d6:3e:c1:f6:37:2a:e2:75:6a:4c:83:30:
07:b5:98:48:28:b0:d5:fc:a6:42:91:0f:0d:7f:ea:af:7b:7f:
3e:b1:fa:96:db:d9:df:f8:85:53:4a:73:4b:3e:8e:fa:e3:91:
2e:85:aa:02:86:d5:c5:3f:7b:8f:fc:92:eb:ea:be:8b:46:a5:
a7:6a:6f:3b:7d:50:0b:1c:0d:80:c3:05:24:4a:e7:20:3b:56:
a6:dd:2e:88:92:40:1b:44:44:0a:91:12:23:22:7e:57:1e:ab:
e2:bb:a6:03:9f:16:be:f3:e0:75:99:5a:e6:92:c4:e3:d1:37:
76:e9:eb:71:58:86:25:cb:b0:a7:88:6d:94:a7:84:a1:47:c9:
5b:6d:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:57 2025 by rpki-client