Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/6kMRVDnionlAub1gckO_HkRUbqI.roa
File: 6kMRVDnionlAub1gckO_HkRUbqI.roa (raw, json)
Hash identifier: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=
Subject key identifier: EA:43:11:54:39:E2:A2:79:40:B9:BD:60:72:43:BF:1E:44:54:6E:A2
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B8A6BA0D3B74B30EB2AD42A90BD4D
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/6kMRVDnionlAub1gckO_HkRUbqI.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209791
IP address blocks: 77.224.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8a:6b:a0:d3:b7:4b:30:eb:2a:d4:2a:90:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea43115439e2a27940b9bd607243bf1e44546ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:8d:03:85:25:10:c8:30:e3:b0:c9:3e:a5:
1d:c2:92:4a:f3:ed:75:c1:50:f5:85:08:1e:73:7d:
83:07:38:47:2a:d2:c9:13:05:f8:89:07:69:8e:96:
85:db:19:7f:7e:78:f8:eb:34:bf:e3:7c:27:ec:47:
d1:57:7e:6c:06:76:bf:b7:08:2a:f7:8a:aa:5f:b4:
8c:d1:38:f4:9a:f5:da:56:58:d5:66:7e:3d:6f:aa:
0d:03:34:d7:6b:a9:1c:4a:e5:47:a6:4c:7e:05:70:
dc:83:41:e5:be:eb:06:3c:ec:fe:23:1c:fc:38:af:
4c:06:fe:32:62:1a:64:f1:a2:3c:b1:4f:8f:87:b3:
8d:ef:f5:38:6a:a1:0f:cf:eb:0c:8d:61:4c:fe:c6:
de:75:6d:ce:f1:5e:b1:45:6e:4b:d1:fd:0b:8a:0c:
d6:8d:14:b6:8b:2f:bf:0e:73:6d:0e:50:39:77:84:
99:f0:06:39:ac:0d:2c:71:46:7e:e3:df:a3:7f:66:
1b:d6:63:20:10:6c:ea:a8:09:cb:b3:e0:92:54:94:
f1:a2:72:64:70:e0:13:b0:c6:63:41:60:c2:6d:28:
95:52:de:37:0b:32:b2:de:2f:aa:04:97:28:c4:97:
c5:22:05:f7:94:2c:4c:d1:07:31:18:30:b2:34:ef:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:11:54:39:E2:A2:79:40:B9:BD:60:72:43:BF:1E:44:54:6E:A2
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/6kMRVDnionlAub1gckO_HkRUbqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.224.16.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:b1:b0:e2:cc:80:c6:4f:4d:4a:c9:df:41:e7:3d:89:5d:
83:2d:66:75:b6:dc:9d:66:ff:43:2c:6d:fa:55:44:ec:bc:f7:
22:2e:e3:63:9a:ec:3d:fa:09:b0:eb:0c:ed:c9:8e:8d:72:ba:
d9:2c:a7:76:4c:70:ee:dc:c7:a8:45:5e:1e:7d:68:b8:2a:33:
34:fb:7e:d0:6c:8f:55:87:47:09:02:6f:6a:d5:62:9f:f8:c2:
8b:53:4e:e3:e9:48:e1:c1:10:81:2d:b9:89:fa:66:4d:f8:5f:
74:8f:57:b6:7d:ed:33:a3:55:0e:a2:0c:85:9f:8f:66:eb:32:
ec:19:f5:06:9d:80:f9:d1:98:49:d5:12:df:bc:a8:84:82:d1:
ef:21:07:43:3a:f9:0c:e6:9c:46:2b:32:c9:87:40:e5:d7:e5:
33:71:79:74:2a:6a:93:2f:a4:70:86:fa:12:1b:c3:8b:91:17:
38:c6:8b:88:51:c1:f4:e7:bd:66:ee:e1:92:e8:09:cc:ef:36:
43:7d:8c:0e:44:6f:3e:6a:c9:ae:1d:34:08:ee:0f:af:73:56:
2a:7e:fc:95:a4:43:1c:a8:03:67:ab:97:76:f0:21:e7:47:f4:
00:9c:a7:bf:9f:69:21:83:03:8f:45:48:0f:75:8b:ce:f8:12:
eb:5c:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:25 2025 by rpki-client