Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/M13OT1H85As_Tv9wWN39JJmrGq4.roa
File: M13OT1H85As_Tv9wWN39JJmrGq4.roa (raw, json)
Hash identifier: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=
Subject key identifier: 33:5D:CE:4F:51:FC:E4:0B:3F:4E:FF:70:58:DD:FD:24:99:AB:1A:AE
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019425212CA8529E3C7AF2A6A42029D0B996
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/M13OT1H85As_Tv9wWN39JJmrGq4.roa
Signing time: Thu 02 Jan 2025 03:48:38 +0000
ROA not before: Thu 02 Jan 2025 03:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198621
IP address blocks: 77.234.47.0/24 maxlen: 24
185.51.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2c:a8:52:9e:3c:7a:f2:a6:a4:20:29:d0:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 2 03:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335dce4f51fce40b3f4eff7058ddfd2499ab1aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:40:43:39:bb:08:55:ca:3f:b2:46:71:53:
b1:29:64:9d:01:56:e8:2a:9d:8e:4c:6c:8a:48:12:
5f:fc:10:02:41:36:f5:9a:fd:de:4d:c7:88:e2:68:
fb:25:8a:fa:b2:89:b3:46:76:c5:b3:91:5c:ca:48:
0e:56:56:34:38:00:1b:06:fd:5e:a7:ac:da:a9:62:
64:1b:2e:f7:d4:c4:11:7d:20:55:98:57:70:02:b2:
a0:bc:7f:0c:d4:ac:41:ab:5c:80:39:f3:1c:49:41:
9c:45:e8:ac:56:b6:4f:5d:ab:ed:08:c3:4b:06:8c:
84:45:d4:33:b0:0c:1f:dc:d5:17:bb:12:d5:11:2a:
b1:82:6c:99:3f:aa:26:c2:71:7b:50:73:c1:8a:bc:
5e:1b:b2:1b:81:14:e5:89:e2:bf:bc:22:9e:f4:29:
e9:d7:b5:f6:2e:59:d2:ad:ce:1a:c9:14:cf:4c:14:
6a:8b:cd:c2:f1:42:2e:19:ea:48:da:a9:43:23:a5:
6f:37:42:e7:0b:68:56:c4:46:84:8d:c4:59:bb:d9:
0f:14:af:71:ee:d9:12:80:36:69:b8:0a:b6:01:19:
5f:85:11:02:79:16:1a:8a:1a:08:97:2d:5b:95:a9:
3c:ca:f0:ce:1a:d2:db:2f:66:fc:b0:cf:f3:1f:d4:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:CE:4F:51:FC:E4:0B:3F:4E:FF:70:58:DD:FD:24:99:AB:1A:AE
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/M13OT1H85As_Tv9wWN39JJmrGq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.47.0/24
185.51.231.0/24
Signature Algorithm: sha256WithRSAEncryption
61:af:73:d5:0d:3b:17:e8:cd:34:6f:6e:67:43:37:c5:08:27:
be:dc:0a:72:c0:fc:a6:a7:04:f5:ef:42:bc:e2:52:d6:9c:46:
99:d1:87:59:d6:6d:7c:6d:f0:21:53:b7:25:4f:43:c7:37:79:
91:c0:10:bf:0b:8e:68:f9:cc:68:1b:87:46:74:9c:c7:85:e9:
93:8b:f6:d5:84:3c:32:50:ae:bc:35:61:d2:5b:74:51:8b:81:
62:9a:39:e8:45:b6:c5:c1:f6:18:d1:43:51:ef:48:a8:f5:5f:
51:a2:03:a4:ab:a2:3b:22:fb:a7:84:9f:3c:14:68:8e:64:61:
b8:15:35:35:95:ad:28:39:e4:b8:b8:88:6c:69:fc:34:76:b2:
bf:43:61:44:42:4f:9b:ce:d5:fa:23:80:f1:2e:56:64:2f:f7:
d2:90:b9:f3:53:2f:04:5f:1e:93:46:59:c2:0a:ea:8a:6d:0f:
36:e7:31:d8:18:e3:c9:8b:36:50:ac:03:e7:ac:2a:01:a0:0d:
d0:c9:74:1d:31:c9:c1:6d:b9:c1:9c:06:83:c8:df:4c:8c:6b:
09:85:ae:de:aa:f4:be:5a:f6:12:a0:7c:80:10:e4:1f:78:21:
03:28:e1:e3:21:25:8e:9f:f2:9d:67:2c:22:9d:45:b3:bd:46:
d8:af:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:29:33 2025 by rpki-client