Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/egGTR94gsD7sQAhG3KJ4vP9O6xI.roa
File: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (raw, json)
Hash identifier: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=
Subject key identifier: 7A:01:93:47:DE:20:B0:3E:EC:40:08:46:DC:A2:78:BC:FF:4E:EB:12
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 019426D95F8436115E977ED818B5E030BF81
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/egGTR94gsD7sQAhG3KJ4vP9O6xI.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50078
IP address blocks: 77.95.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:84:36:11:5e:97:7e:d8:18:b5:e0:30:bf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a019347de20b03eec400846dca278bcff4eeb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:25:8f:ec:4c:8b:ff:f3:70:c0:4e:9a:65:
02:7d:92:67:4f:d0:eb:9c:51:b8:cd:2f:5b:79:50:
1a:69:1c:30:ed:cd:c9:70:bb:90:8c:73:b0:40:e4:
d8:22:4c:42:f9:d7:ef:27:e7:2f:f9:ae:10:9d:d0:
af:1d:19:41:e0:b0:8a:27:04:73:f7:89:33:4a:9b:
49:28:92:e9:61:e8:b3:85:be:7d:47:47:e2:ad:02:
32:0f:10:0a:9d:4f:69:b7:a5:ee:5a:c8:1f:74:3a:
1e:9c:1c:4c:f8:38:51:a2:83:36:b0:a0:be:25:d7:
45:99:48:90:50:6a:04:5b:57:ca:bd:60:69:b6:31:
3a:76:b8:49:8a:cb:bc:49:c9:1b:92:dd:58:cc:f8:
26:de:5b:6f:d3:26:63:d5:32:93:98:00:0a:17:4c:
26:40:74:18:5b:12:e2:9b:f1:8b:5d:2d:bd:eb:44:
4d:99:21:45:53:14:cf:e6:7d:bd:41:41:8e:bc:63:
49:03:32:50:a0:34:45:6c:26:fa:dc:ba:6e:03:f5:
7f:99:b2:89:6a:65:7b:bd:76:b6:f3:08:cd:dd:fe:
1c:10:eb:08:62:57:ae:f9:ff:6f:69:85:00:83:e4:
de:33:2f:b8:22:0c:f4:ea:50:a4:ad:4a:32:8d:bd:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:93:47:DE:20:B0:3E:EC:40:08:46:DC:A2:78:BC:FF:4E:EB:12
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/egGTR94gsD7sQAhG3KJ4vP9O6xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d0:c4:b3:96:ff:20:5a:4e:5b:53:aa:77:29:46:62:0e:e9:
5f:e6:97:d5:91:95:43:8a:62:6d:44:d9:05:d2:fd:9c:17:d1:
48:e6:ef:f0:97:85:45:8a:72:11:d2:80:00:b4:92:b8:0b:ab:
c0:3a:12:e7:b6:eb:9c:11:86:85:7c:91:31:63:cb:ae:29:d2:
9f:6a:0d:13:a1:df:3f:b1:df:8d:e6:8e:73:1e:6d:46:25:bb:
2f:15:aa:30:b2:a9:b6:71:fc:78:e8:ca:cc:83:12:08:dd:fc:
6b:e4:2f:89:1a:75:59:61:0b:4b:06:19:74:3a:0b:88:f5:04:
bc:5c:80:64:ae:4e:05:b0:af:57:2f:90:d0:32:24:10:63:fa:
82:7a:43:52:5d:52:35:1b:c9:b2:20:e0:46:1b:d6:df:2e:e5:
c3:d0:cc:90:b5:cf:ee:c7:55:d8:70:e9:d2:e0:8e:0e:ad:d1:
12:9a:3b:4d:2b:b2:a4:bb:96:c1:02:7f:35:25:24:bc:a2:ee:
98:fc:15:30:4a:06:89:6c:f5:d9:21:6b:d6:1c:4b:21:4f:10:
69:2a:5e:26:77:53:78:48:af:b7:de:a9:77:9a:5e:6e:a3:fd:
be:61:c7:ec:bb:73:b8:33:61:4a:50:2a:b1:70:9f:9f:c5:5d:
57:de:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:47 2025 by rpki-client