Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa
File: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (raw, json)
Hash identifier: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=
Subject key identifier: 0F:71:23:9C:04:14:7E:9F:F2:C0:29:D8:A5:9B:C3:4B:03:C1:E2:87
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019422FBA63E2B1F1DFA8B1D025FA1BDCD3C
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43994
IP address blocks: 77.245.96.0/20 maxlen: 20
93.185.64.0/20 maxlen: 20
95.141.128.0/20 maxlen: 20
217.196.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:3e:2b:1f:1d:fa:8b:1d:02:5f:a1:bd:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f71239c04147e9ff2c029d8a59bc34b03c1e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:62:09:63:e6:09:0a:be:7a:e7:c4:06:a6:
0f:bc:b0:c4:2d:0f:d3:c2:8c:8b:6f:23:56:a9:c7:
53:cd:7d:5b:ad:f3:6a:4f:25:b5:49:2b:f1:6d:b4:
e2:95:4f:77:34:5d:0a:76:48:f8:8b:51:47:cb:9c:
cd:db:98:76:b5:6a:48:d9:c4:9d:84:53:a9:a4:8f:
9a:4f:91:1b:d4:e1:20:10:7b:f9:de:48:d0:d2:ac:
aa:24:37:1c:77:01:29:e3:49:83:ad:d2:8f:19:aa:
02:64:38:0d:91:0a:00:52:70:3f:f3:57:16:63:ff:
6a:d8:ea:58:9d:15:54:8e:c1:e9:11:69:04:81:3b:
a2:45:5b:dd:2c:3b:ec:6c:07:4b:b1:4a:c2:20:44:
ef:9b:da:90:1c:ca:c9:38:1b:1c:9e:40:55:a2:2a:
7a:da:38:5a:f1:7c:bc:b6:d7:a3:80:8e:6d:cd:86:
8f:64:30:f7:b6:41:33:9f:8f:0b:c1:29:7b:6c:06:
4b:56:d3:ce:dd:df:7e:aa:8e:2d:04:a4:48:71:82:
01:55:9e:a6:b9:5c:e4:f9:d9:5a:8a:b0:1c:13:58:
a1:84:eb:08:e5:5a:bc:23:0b:09:ea:6e:df:54:e8:
2f:a8:76:01:ab:0d:b2:bd:9a:09:1f:3d:0a:be:47:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:23:9C:04:14:7E:9F:F2:C0:29:D8:A5:9B:C3:4B:03:C1:E2:87
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.96.0/20
93.185.64.0/20
95.141.128.0/20
217.196.16.0/20
Signature Algorithm: sha256WithRSAEncryption
77:48:1f:0d:f7:59:d7:45:c0:3e:ed:d8:bd:7a:24:22:2b:bb:
6f:8d:c1:dc:a2:1f:e2:b7:3b:35:3a:22:45:9b:5c:1b:78:8c:
c9:08:68:08:6b:e1:6d:c9:1d:05:aa:90:37:4e:ed:9c:7a:1d:
6c:fc:16:3a:7d:99:08:a1:5e:c2:29:8b:4f:c4:be:39:cf:b2:
9e:63:b4:34:c6:55:55:df:0e:44:a0:7e:19:02:4f:e2:28:b5:
7f:e1:56:a6:71:fa:7d:75:eb:d0:5a:6b:a7:64:13:13:71:00:
b0:f5:6f:0f:ad:95:9a:28:59:28:a7:8e:e6:f6:39:40:93:e2:
3b:b2:f8:e6:e6:8c:e5:1f:ed:41:dc:e2:8e:6c:97:f7:0a:2a:
06:34:d0:e2:29:ac:67:b6:dd:22:d7:95:ce:e2:e5:b6:03:b9:
5b:0d:b7:8e:b5:a2:80:80:2d:e6:02:e9:9a:85:2e:29:93:ea:
03:01:53:42:bd:7e:45:19:96:5d:70:c5:56:6f:5c:17:67:b1:
16:f3:b4:49:74:69:87:84:e7:0b:26:7a:c3:69:4b:e8:e4:80:
63:95:a6:42:42:f3:74:0b:92:47:db:0a:f9:a8:5f:49:e0:b9:
fe:23:e1:1f:0f:02:11:d9:17:c3:83:21:de:cd:da:78:dd:72:
50:4a:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:55 2025 by rpki-client