Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/GllXyrQCVpAoVUeLqzuPLHA6iuM.roa
File: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (raw, json)
Hash identifier: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=
Subject key identifier: 1A:59:57:CA:B4:02:56:90:28:55:47:8B:AB:3B:8F:2C:70:3A:8A:E3
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0194266B2331FD2540845C0545D4DD36A5D1
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/GllXyrQCVpAoVUeLqzuPLHA6iuM.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215759
IP address blocks: 79.110.171.0/24 maxlen: 24
217.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:23:31:fd:25:40:84:5c:05:45:d4:dd:36:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5957cab40256902855478bab3b8f2c703a8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:be:0a:e9:df:23:95:d4:6e:00:b8:22:83:
32:59:4e:49:0f:ab:ef:a0:a2:7d:95:c1:d4:6b:ed:
48:15:8b:66:27:a9:f6:02:ad:df:4e:30:4a:75:07:
0d:91:13:8a:81:ba:77:ce:48:9f:1b:31:00:4e:b1:
c5:3b:3c:6e:08:59:ea:cc:73:6b:69:48:db:37:0a:
66:e4:e8:f3:4f:6a:27:1e:b5:97:61:ef:bd:f9:39:
7c:b8:e3:40:41:1d:4b:83:27:de:3d:1c:09:fb:ad:
14:55:36:d6:70:24:dc:31:a1:36:e8:e3:97:0b:e0:
da:db:b0:50:0d:99:25:db:fb:d5:f9:e4:05:54:93:
6c:a9:52:fd:2e:f5:fd:71:ee:50:05:57:54:26:42:
b8:97:27:eb:20:cf:90:04:3a:74:db:2c:2c:69:75:
28:44:bb:7c:02:5d:83:c3:c6:b1:2c:fa:66:bb:02:
f1:c5:37:9d:eb:3e:13:30:b6:98:e1:48:79:68:68:
94:9f:70:39:46:12:40:91:8e:51:93:82:bf:86:df:
b5:4d:0d:a4:a9:b0:77:31:d8:01:9a:71:1e:24:85:
13:ee:64:1d:0f:e2:89:5f:02:bb:7b:dd:72:03:cf:
fb:ef:66:a5:ea:b8:fc:f4:bd:7e:15:10:0d:34:51:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:57:CA:B4:02:56:90:28:55:47:8B:AB:3B:8F:2C:70:3A:8A:E3
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/GllXyrQCVpAoVUeLqzuPLHA6iuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.171.0/24
217.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
17:99:4f:82:aa:83:12:a9:d3:6f:e9:5c:de:a2:f5:02:71:9b:
fd:0d:58:c0:f0:db:82:31:a4:a0:0c:a6:d8:bd:4d:29:1f:48:
ba:2a:98:b7:72:cf:ed:96:ff:8a:21:8a:1c:54:61:6c:d9:4a:
f5:c6:12:60:68:7e:f1:51:6f:68:4b:7e:fd:92:ba:92:87:d4:
4c:d1:a8:c8:3b:4f:bb:2d:b3:71:62:3f:6a:e6:b1:1f:9f:e5:
ca:f5:81:73:4b:f2:bd:7d:89:81:87:b4:c5:5f:3e:88:00:73:
60:2a:08:9f:34:55:ff:0e:03:b9:42:e0:d2:c3:67:ae:04:3f:
45:ae:f4:29:8c:99:c6:f5:b7:bd:46:b2:1f:0e:fd:11:c3:de:
0f:d0:ce:24:c1:72:be:7a:15:a5:e0:ed:d8:72:a5:0b:98:8d:
7a:c3:b5:06:bb:8e:13:96:13:8d:c8:d1:1e:e9:dc:b1:8d:bd:
e9:46:f6:a2:56:98:90:39:64:07:82:83:57:d6:84:c8:50:66:
81:97:bd:4b:0b:ee:67:39:8d:54:aa:8f:d5:54:9f:72:98:ff:
8a:66:30:57:60:cf:07:04:dd:40:67:94:cb:87:9a:47:e6:76:
e4:49:b7:ab:cc:e9:02:e8:77:c6:e9:bf:3b:1c:b1:7c:71:e1:
ff:5a:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:29 2025 by rpki-client