Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/77NlXUAP6aqO-5kRD3v5m76ehoU.roa
File: 77NlXUAP6aqO-5kRD3v5m76ehoU.roa (raw, json)
Hash identifier: 7e2XIzgYVXyl88LnkyoFKtRfje9MjZPrEc0MwbIMad0=
Subject key identifier: EF:B3:65:5D:40:0F:E9:AA:8E:FB:99:11:0F:7B:F9:9B:BE:9E:86:85
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB4EC41F703772F276D8582929D4C
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/77NlXUAP6aqO-5kRD3v5m76ehoU.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201845
IP address blocks: 85.232.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b4:ec:41:f7:03:77:2f:27:6d:85:82:92:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb3655d400fe9aa8efb99110f7bf99bbe9e8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:d5:23:1b:ce:ef:a7:dd:be:73:eb:70:88:
11:b1:5c:4a:e8:84:3b:09:a9:11:0f:29:5d:76:56:
60:2c:0e:9c:11:e9:12:49:68:33:90:82:46:80:0e:
dc:67:55:22:17:ae:ee:6a:ee:9d:24:57:f3:cf:06:
92:3a:9e:b1:56:1c:d2:e6:eb:9d:63:95:ba:e4:f0:
df:59:ca:fd:9f:cd:37:4f:3f:11:50:b4:ac:97:fd:
61:48:8e:1e:8a:a1:9f:13:cc:b3:ad:cc:e0:b0:7f:
7e:03:7f:0a:69:f8:9e:aa:3e:59:eb:7e:08:b9:de:
c8:e5:36:54:54:82:c0:84:a4:e0:e9:cf:67:46:1e:
42:61:d8:c9:e6:f8:4b:60:6e:ab:ef:60:b9:82:b4:
a8:ef:67:6f:cc:a4:ce:c6:14:d3:ca:1b:38:97:d7:
1d:74:aa:b8:0e:0d:b0:60:4a:5c:ca:78:28:d2:55:
ac:a0:97:50:f2:f0:cb:6b:4c:fd:c5:44:3e:01:5e:
13:54:1b:e8:98:1c:63:e6:29:a0:45:ac:99:e4:69:
9d:10:9e:eb:d0:6f:a6:b0:78:1f:98:77:70:4c:cd:
28:a5:fe:91:7c:37:b7:5d:a4:b6:9e:d1:7f:17:e0:
b8:54:6b:a7:9f:7d:9b:6b:98:19:89:4b:bc:f0:56:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:65:5D:40:0F:E9:AA:8E:FB:99:11:0F:7B:F9:9B:BE:9E:86:85
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/77NlXUAP6aqO-5kRD3v5m76ehoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:07:73:70:2b:da:7f:6a:93:e2:f9:a1:91:84:14:1b:95:23:
70:40:5d:58:00:84:aa:16:8a:b6:7e:a4:2c:98:63:09:ff:df:
e9:fd:3a:12:7d:86:4c:75:93:cd:6b:9e:69:4d:7a:16:87:6c:
ab:6a:97:b1:28:50:c5:02:17:38:91:b4:82:61:38:b4:6d:c5:
a1:2e:49:c6:dc:46:5a:2c:bc:0b:53:dc:88:7c:aa:40:bc:1d:
1d:59:90:84:c4:ec:2d:85:55:b7:f4:ba:ba:91:54:95:4c:2c:
7c:c0:e2:9f:85:e9:ba:37:d6:37:53:61:4c:da:7e:16:3b:c5:
d4:0f:92:da:36:b3:99:d3:05:be:8c:1a:66:d1:57:96:af:87:
7d:4b:de:cb:79:dc:ce:48:5e:14:c7:d2:0f:43:ad:70:b6:64:
c4:9d:67:97:1a:50:07:47:ac:1f:70:d8:49:60:94:fa:41:c8:
17:36:45:11:87:0d:75:58:f4:11:07:c3:31:6b:c6:88:b5:f5:
b5:c9:57:4f:5c:18:b3:6e:b8:fc:06:15:44:9d:bc:9c:22:11:
3a:05:fa:f9:67:f9:b6:2b:0d:a1:b7:44:44:2c:fa:d9:3a:c3:
c9:6b:53:7f:31:04:0d:c8:0c:28:27:4b:c1:07:5e:44:67:69:
ce:08:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:40 2025 by rpki-client