Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_j5kcGNmP9KapmqZVVh0mF3rhqI.roa
File: _j5kcGNmP9KapmqZVVh0mF3rhqI.roa (raw, json)
Hash identifier: n8e7s8mvXdB+EkuKj7xnP+2vtJoqxIXNO1h35rpuxXI=
Subject key identifier: FE:3E:64:70:63:66:3F:D2:9A:A6:6A:99:55:58:74:98:5D:EB:86:A2
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB95551E3687256AA7F8831562FD0
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_j5kcGNmP9KapmqZVVh0mF3rhqI.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207206
IP address blocks: 77.79.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b9:55:51:e3:68:72:56:aa:7f:88:31:56:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3e647063663fd29aa66a99555874985deb86a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:5d:d8:fc:96:b6:dc:24:a6:7c:57:e5:ec:
69:1c:bf:c2:b9:ab:b1:e6:27:27:d2:f8:00:98:c6:
cc:e2:89:22:66:aa:a6:9c:20:5d:c3:d5:d4:ac:2b:
fb:76:5d:48:46:66:93:fb:56:d1:59:c5:c1:c0:94:
10:31:a3:cd:b9:81:17:02:db:b6:70:a7:4f:ab:ea:
55:33:37:ae:40:56:a2:ac:83:56:8e:71:a3:ae:3d:
65:de:2a:e6:44:cc:78:64:f6:8e:0c:b7:f1:fc:01:
80:67:79:ae:1d:bf:a3:a7:f8:0e:a8:bf:c8:9e:3c:
52:c3:86:49:cd:b7:fd:09:90:6f:f2:b4:c0:41:15:
7e:aa:92:0f:94:94:f4:51:95:e0:89:bc:89:14:c1:
e7:9f:1c:7b:12:b3:ff:26:b3:d1:04:5c:22:e9:a3:
ed:57:ff:04:21:d0:51:50:6a:1e:61:73:5d:4b:a6:
30:25:14:5d:07:05:70:53:c8:28:ed:53:8e:0b:dd:
ad:6c:91:52:e9:65:28:20:f2:da:8f:f9:d7:78:75:
68:90:4c:23:d4:b2:15:6f:04:94:97:d4:09:45:55:
f2:d3:62:14:05:1f:22:28:77:a1:3d:2f:8f:43:92:
a1:c0:8e:f6:38:81:34:03:c8:35:82:97:ad:d4:8c:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:64:70:63:66:3F:D2:9A:A6:6A:99:55:58:74:98:5D:EB:86:A2
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_j5kcGNmP9KapmqZVVh0mF3rhqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1a:68:c7:5c:2f:3f:52:02:e5:99:ec:f5:82:5c:03:c3:58:
9d:43:dc:89:8e:49:7e:7b:5e:5e:10:c4:0e:27:e8:a2:32:5a:
95:7c:f9:e8:62:42:f1:a3:3f:22:36:2a:c5:2d:62:ca:94:33:
44:64:87:75:54:2c:48:3b:9d:e6:53:18:40:d7:a2:71:3b:71:
e7:72:06:b4:ea:db:50:a8:71:3e:c1:b4:e2:ac:04:b8:a9:d8:
3f:b8:9e:52:b5:87:72:15:1d:b4:ef:0e:e1:e4:46:cf:d1:59:
8a:a0:eb:e7:5b:13:a5:68:ef:1f:53:d2:cd:62:07:2b:d9:d7:
a1:4b:bd:7b:5d:49:df:9f:0b:01:2a:43:2d:6d:23:e0:84:24:
05:14:75:bd:12:55:6e:34:42:96:ad:02:a5:c6:a6:10:45:36:
5c:9a:bc:1f:ab:77:60:9a:6d:4a:fa:2d:15:1c:e1:27:c0:30:
4d:0a:d3:dd:82:82:50:6e:f4:eb:56:b6:4b:1b:3c:8c:a2:ee:
42:e5:6d:11:5e:0b:d7:6b:d3:3d:2f:ad:b8:dc:ff:30:4d:a9:
86:27:6d:8d:34:98:57:1d:c1:9b:2c:12:55:5a:50:46:56:42:
81:fb:08:15:bd:c8:d4:93:fd:0b:32:d6:15:db:67:6f:3f:fc:
ff:ce:79:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/LlVUeNoclaqf4gxVi/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTNlNjQ3MDYzNjYzZmQyOWFhNjZhOTk1NTU4NzQ5ODVkZWI4NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVdd2PyWttwkpnxX5expHL/Cuaux
5icn0vgAmMbM4okiZqqmnCBdw9XUrCv7dl1IRmaT+1bRWcXBwJQQMaPNuYEXAtu2
cKdPq+pVMzeuQFairINWjnGjrj1l3irmRMx4ZPaODLfx/AGAZ3muHb+jp/gOqL/I
njxSw4ZJzbf9CZBv8rTAQRV+qpIPlJT0UZXgibyJFMHnnxx7ErP/JrPRBFwi6aPt
V/8EIdBRUGoeYXNdS6YwJRRdBwVwU8go7VOOC92tbJFS6WUoIPLaj/nXeHVokEwj
1LIVbwSUl9QJRVXy02IUBR8iKHehPS+PQ5KhwI72OIE0A8g1gpet1IyWrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4+ZHBjZj/SmqZqmVVYdJhd64aiMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvX2o1a2NHTm1QOUthcG1xWlZWaDBtRjNyaHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU/zMA0G
CSqGSIb3DQEBCwUAA4IBAQCbGmjHXC8/UgLlmez1glwDw1idQ9yJjkl+e15eEMQO
J+iiMlqVfPnoYkLxoz8iNirFLWLKlDNEZId1VCxIO53mUxhA16JxO3Hncga06ttQ
qHE+wbTirAS4qdg/uJ5StYdyFR207w7h5EbP0VmKoOvnWxOlaO8fU9LNYgcr2deh
S717XUnfnwsBKkMtbSPghCQFFHW9ElVuNEKWrQKlxqYQRTZcmrwfq3dgmm1K+i0V
HOEnwDBNCtPdgoJQbvTrVrZLGzyMou5C5W0RXgvXa9M9L6243P8wTamGJ22NNJhX
HcGbLBJVWlBGVkKB+wgVvcjUk/0LMtYV22dvP/z/znnW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:14 2025 by rpki-client