Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-WrHf_R-iB8hqlH7RnPTmxLbBKM.roa
File: 1-WrHf_R-iB8hqlH7RnPTmxLbBKM.roa (raw, json)
Hash identifier: OgV5ZNTNXmh8HIuwU4ZP5e1PvzdWo2UKnOjc8+xGdZg=
Subject key identifier: F9:6A:C7:7F:F4:7E:88:1F:21:AA:51:FB:46:73:D3:9B:12:DB:04:A3
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCBA0A80EC5154004E425EBB0CCBEC
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-WrHf_R-iB8hqlH7RnPTmxLbBKM.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209409
IP address blocks: 77.79.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ba:0a:80:ec:51:54:00:4e:42:5e:bb:0c:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96ac77ff47e881f21aa51fb4673d39b12db04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:39:5f:4e:1e:0e:ce:de:6e:19:d3:f4:8a:
09:2f:63:90:84:8b:6c:2b:71:7f:46:c6:eb:31:bd:
f3:77:8d:b2:b7:b0:77:cc:6a:15:94:4f:e1:70:61:
77:b7:68:5a:68:1b:68:39:dc:3c:1d:d1:b4:5c:96:
d5:04:0d:4c:29:3e:76:8e:0e:16:6d:57:40:02:d2:
44:3c:1a:45:77:a6:c4:c7:24:50:bc:a7:bf:2a:50:
92:2f:a6:34:e3:9f:84:39:32:df:95:eb:53:e3:ae:
18:0e:eb:6b:9a:2e:8e:75:e8:b3:9c:73:7e:50:e6:
fe:a5:19:11:df:54:9a:89:3a:49:69:84:36:3d:11:
bf:90:fb:4f:91:3d:18:2d:c1:db:dd:ec:82:60:22:
a4:94:d5:46:a0:9f:01:d6:85:35:2e:b5:e2:bd:4b:
f7:5e:96:45:46:a9:81:69:95:6d:51:bc:35:f0:ec:
75:3c:84:da:4c:96:d6:0d:bd:77:cb:9c:b3:a6:88:
16:f1:3b:d7:0c:6e:c3:f3:20:b8:2b:4b:d1:07:3c:
55:9c:0c:dc:6f:6d:5e:8a:2a:a2:42:17:55:d7:fe:
5c:9c:8c:42:77:46:0d:b5:e5:2f:09:e5:50:d7:ab:
57:d3:06:39:cc:2e:25:5c:d8:21:17:ad:f2:cf:ca:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:C7:7F:F4:7E:88:1F:21:AA:51:FB:46:73:D3:9B:12:DB:04:A3
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-WrHf_R-iB8hqlH7RnPTmxLbBKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.200.0/24
Signature Algorithm: sha256WithRSAEncryption
34:de:db:14:9e:8c:16:47:43:01:c6:8e:64:5d:1c:5a:c4:4c:
7c:60:96:cb:58:1a:6f:a7:9e:55:28:85:13:29:eb:6d:ec:08:
89:8d:6b:f8:f1:aa:37:6f:01:40:0f:01:b0:c0:73:52:ae:8e:
4f:51:fd:c0:7f:87:a5:3f:f7:68:69:1c:af:fe:7b:ef:9a:fc:
14:2f:80:f0:9e:f0:d7:f4:12:a0:57:59:37:09:64:62:3f:b9:
f6:9d:17:85:94:bd:57:63:83:b3:c3:c3:91:70:6d:12:5a:b8:
22:e2:f2:d7:19:e2:76:0e:26:5e:1f:46:aa:11:b1:30:01:67:
b2:4e:27:20:e5:2c:31:ca:a1:f8:4e:82:72:61:e3:75:0b:16:
ba:7b:d1:c8:c1:33:e3:8a:5f:36:e9:6e:3e:27:f3:bd:34:ca:
bd:b5:86:1a:7e:c3:11:9c:64:79:76:be:5f:51:3c:43:c0:8d:
7f:a0:40:3e:67:9b:a8:9c:78:7e:ec:88:49:3f:0b:d8:99:cb:
db:8d:4a:c9:0f:fa:ea:51:45:f3:2e:86:4c:b4:f2:44:19:ce:
a3:a3:ab:91:d2:94:0b:02:6a:cd:e6:2b:c6:08:f2:3c:c6:3a:
5f:a1:fa:64:ad:a5:e2:1a:ba:db:a4:40:af:44:40:cf:e1:6e:
3d:a7:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:12 2025 by rpki-client