Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/47A9Z8NoeQ6ltTDpCFJ2wWSO198.roa
File: 47A9Z8NoeQ6ltTDpCFJ2wWSO198.roa (raw, json)
Hash identifier: EuV+plS2GxgGOzE9OGxu3Q+/TvJ4VHM++LfTm4PAWPI=
Subject key identifier: E3:B0:3D:67:C3:68:79:0E:A5:B5:30:E9:08:52:76:C1:64:8E:D7:DF
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA73A9550DCC94A0730CC205756D2
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/47A9Z8NoeQ6ltTDpCFJ2wWSO198.roa
Signing time: Thu 02 Jan 2025 07:48:22 +0000
ROA not before: Thu 02 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24748
IP address blocks: 77.79.192.0/24 maxlen: 24
193.111.36.0/24 maxlen: 24
212.91.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a7:3a:95:50:dc:c9:4a:07:30:cc:20:57:56:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b03d67c368790ea5b530e9085276c1648ed7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:d9:bf:49:c1:83:ca:cd:b2:2a:21:3e:75:
4c:dc:c7:ad:25:06:03:f3:a2:90:87:dd:4f:d2:b6:
df:ec:91:65:21:ac:d3:33:21:5f:90:66:23:ab:24:
1e:07:89:ea:ec:50:e1:02:33:36:c8:52:e4:71:a2:
9c:f1:42:bc:70:80:de:bb:2b:63:65:14:a0:22:94:
a2:55:6d:eb:9d:e7:8a:fe:b1:71:79:2a:48:fd:28:
ff:6d:eb:26:0a:2a:6b:6d:d0:02:79:09:41:a2:3a:
a1:0b:28:1c:86:c7:bf:f1:46:30:c1:f8:1f:8f:5a:
db:6a:7c:c3:e6:9b:3e:e8:40:77:01:af:2d:8d:65:
1c:df:5c:55:9b:f1:06:34:9a:5e:2e:b6:46:ef:8b:
7b:90:f7:8f:04:03:53:3b:4e:0b:a8:1c:4c:b9:a7:
fa:ce:86:6c:9b:a8:6d:19:30:15:e3:d7:bd:b0:7c:
4a:1f:ce:12:f2:92:16:29:d4:82:7a:a0:9e:d1:6d:
fa:03:a3:a2:ec:05:b8:7d:74:f8:f6:d5:20:a8:b0:
04:fc:e2:25:a7:c9:08:fb:7f:4f:6b:ef:0c:b8:6e:
c6:f4:87:9f:70:9e:07:ea:b3:8d:cd:21:b6:88:9d:
e6:28:96:51:fc:48:ab:22:29:d3:72:94:e3:cf:01:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B0:3D:67:C3:68:79:0E:A5:B5:30:E9:08:52:76:C1:64:8E:D7:DF
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/47A9Z8NoeQ6ltTDpCFJ2wWSO198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.192.0/24
193.111.36.0/24
212.91.0.0/22
Signature Algorithm: sha256WithRSAEncryption
02:37:16:b5:44:aa:3d:7c:88:d5:9d:4b:2f:7c:53:b2:38:b6:
41:f0:be:f5:f1:8e:9e:db:f2:9e:d1:8d:a6:dc:42:6d:49:f0:
7e:ae:b2:d7:66:e1:b4:96:dc:2c:ce:93:62:bf:73:b0:7f:c2:
a1:67:dd:d3:86:c4:d5:0e:e1:49:27:0d:cf:cb:e6:9b:23:08:
b5:e0:5e:f5:ea:03:2e:c2:4c:11:98:02:02:3d:0b:7b:03:08:
f8:c5:92:9d:d3:7d:c1:26:9a:f5:7b:69:9c:0a:46:07:e4:10:
6e:cc:db:aa:5f:bc:d1:e4:54:b9:18:6d:13:4f:92:02:08:54:
8b:fd:93:71:8d:db:72:4e:b2:1c:63:48:8f:fd:33:78:68:37:
28:d3:6e:64:9a:e7:89:c6:8a:f8:17:0d:55:c4:1e:a6:f9:7a:
a7:ec:79:ea:aa:cf:ee:50:d1:24:63:0d:a7:80:b5:c4:bd:25:
77:0f:a7:86:4c:5c:e0:c9:5e:7d:79:fb:c4:74:3c:e7:18:67:
9f:f0:7f:33:25:f3:83:9d:e8:f1:ec:93:ee:8b:52:f4:46:21:
6b:03:6b:6d:6a:d7:df:9d:dd:3a:f4:f9:d3:c8:1b:40:67:e5:
73:4e:d9:0d:c5:04:dc:f2:40:34:e9:38:81:e5:e6:d0:46:eb:
27:f9:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:32 2025 by rpki-client