Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa
File: J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa (raw, json)
Hash identifier: h0eilDzFJc63ldeHb0QL9b1OgF0191jasEAOBuxrT4M=
Subject key identifier: 27:54:AF:FB:D0:41:5D:6F:50:0D:4D:10:A0:05:6D:7F:CD:C7:90:37
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C57F842EDF224ED228D21581CE26B
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25446
IP address blocks: 77.106.68.0/22 maxlen: 22
2001:67c:1584::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:57:f8:42:ed:f2:24:ed:22:8d:21:58:1c:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2754affbd0415d6f500d4d10a0056d7fcdc79037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:31:68:5f:8a:00:af:55:34:2b:a3:3e:34:
06:71:00:df:bc:61:5b:c8:d0:66:d8:f7:c2:60:85:
dd:30:1a:10:46:4f:2e:4b:7b:a8:4a:16:27:f2:33:
0c:69:d7:7b:61:8d:5a:07:37:b2:71:8c:81:e0:b5:
e0:e1:de:4e:cf:f6:fd:71:18:fc:81:74:86:a9:2a:
f2:ba:f1:99:c0:2e:c5:10:72:72:c8:cc:0d:ad:2a:
11:bb:1c:da:9c:df:ee:13:2d:3f:50:b3:31:79:52:
9a:94:b3:40:6b:99:6b:2f:e9:ee:03:6d:f7:fa:b2:
4d:9e:99:f2:44:e9:b1:f1:34:02:9d:92:33:36:3a:
ba:25:af:73:a2:8c:56:ea:d3:94:ae:ed:3f:8d:78:
20:21:f8:a1:b8:8e:1a:57:d8:17:fa:83:28:00:ec:
a5:76:02:74:a3:5d:56:18:9c:96:1f:96:e1:d2:ba:
82:51:40:f3:cb:b7:e8:6c:27:1b:0d:4e:bb:88:47:
31:fd:70:4a:b1:02:73:b9:46:88:34:42:ee:2c:c7:
b1:8c:8e:bc:5b:21:07:07:ad:c7:be:78:fe:40:d8:
41:4c:7c:b1:2f:b9:4a:16:97:63:71:b0:69:78:91:
2c:eb:5d:c6:50:ab:a1:e6:68:af:ac:a5:1a:a8:af:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:AF:FB:D0:41:5D:6F:50:0D:4D:10:A0:05:6D:7F:CD:C7:90:37
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.106.68.0/22
IPv6:
2001:67c:1584::/48
Signature Algorithm: sha256WithRSAEncryption
62:18:f3:fc:a8:13:e2:58:e6:3d:bf:27:22:d8:08:6d:cc:5d:
79:db:f0:7b:f1:24:e8:05:65:5b:b7:f0:1d:57:a3:56:6b:d8:
4c:01:05:6b:2c:f3:0a:c2:e9:f2:5c:8f:49:9c:ae:ac:19:1b:
eb:01:12:f4:2c:ab:ac:a9:51:38:56:ac:34:0c:81:fd:91:02:
c0:c4:e5:b0:f9:b4:34:4e:04:13:95:d5:8e:7f:b4:fd:c9:e7:
23:b9:30:69:25:d3:aa:63:85:0f:9f:c8:87:f5:f1:ed:db:4a:
a4:45:6a:4a:c5:49:44:be:be:74:f3:29:9a:1b:31:24:ab:8e:
ae:69:5d:d3:40:0d:8b:9c:96:29:95:13:d6:10:9a:9d:c2:f7:
61:b5:88:c0:fd:bc:4e:06:51:86:ea:a9:5a:b0:31:a8:9c:37:
25:59:b1:dc:6c:6d:bf:e4:b7:3a:c4:96:34:54:ac:72:56:d4:
1f:80:bc:0f:f8:0c:60:ae:07:d6:8f:e7:22:d0:46:4b:52:3c:
1e:70:22:39:1f:ba:b9:da:d7:1c:ee:d7:14:7b:97:13:62:b4:
94:98:d7:4f:01:79:92:18:ce:31:25:c4:b3:42:f0:96:92:a6:
9a:62:de:4e:59:d4:ab:77:4b:6e:22:fa:3b:16:0f:60:d2:e8:
87:8f:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:08 2025 by rpki-client