Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/hL4j8iuigkkNTiErA56QF9MabJw.roa
File: hL4j8iuigkkNTiErA56QF9MabJw.roa (raw, json)
Hash identifier: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=
Subject key identifier: 84:BE:23:F2:2B:A2:82:49:0D:4E:21:2B:03:9E:90:17:D3:1A:6C:9C
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B89164F8A613A4871D1FF5FDDF24C
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/hL4j8iuigkkNTiErA56QF9MabJw.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207412
IP address blocks: 77.227.23.0/24 maxlen: 24
77.227.24.0/24 maxlen: 24
77.231.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:89:16:4f:8a:61:3a:48:71:d1:ff:5f:dd:f2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84be23f22ba282490d4e212b039e9017d31a6c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:91:b6:20:28:d3:2f:21:8a:56:6f:f4:aa:
6a:84:ca:62:96:b6:46:f8:c6:74:37:ac:bb:2f:e1:
c9:9e:d8:5a:41:e3:52:15:45:9d:ae:5b:04:9b:bc:
1b:bb:1e:5a:e7:50:00:16:f5:cd:d8:10:3d:c9:6d:
ee:a8:3b:74:3e:3f:e1:fd:95:4c:76:a2:e3:aa:7f:
77:51:e9:20:1d:ab:2d:1d:82:75:7a:2c:e8:f4:f7:
d9:01:53:3c:cd:03:99:f3:74:45:ed:74:05:b8:68:
6a:af:41:63:30:b6:a4:64:e9:60:1b:69:1b:03:26:
cd:96:bd:5f:ee:d4:09:1d:ba:79:e6:bc:19:e0:6c:
86:a4:cd:8c:5e:f3:ba:7c:97:02:33:31:e2:17:db:
ef:51:e6:a7:87:57:0e:ad:d4:b2:14:be:fb:6d:04:
4a:11:bf:b8:7e:ed:b3:1c:a3:d1:b0:65:9b:33:b5:
13:c2:0d:f0:9c:59:76:af:a8:b2:a1:1c:0b:77:f7:
d5:69:57:66:5e:67:c2:31:f9:58:54:bc:f5:c8:4d:
39:b3:31:1b:8c:29:73:61:5d:d7:02:a3:d7:c9:77:
d5:35:eb:ab:25:c3:9f:25:99:41:e5:5c:d5:78:60:
f0:f0:84:c6:bc:39:61:8b:6e:3c:43:b6:d2:93:6d:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:23:F2:2B:A2:82:49:0D:4E:21:2B:03:9E:90:17:D3:1A:6C:9C
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/hL4j8iuigkkNTiErA56QF9MabJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.227.23.0-77.227.24.255
77.231.176.0/24
Signature Algorithm: sha256WithRSAEncryption
00:02:69:8e:fa:45:8a:86:24:28:c9:40:12:ba:ff:7a:36:b6:
6e:3d:30:5c:8b:d7:a4:70:db:5b:53:27:d3:60:a2:bf:af:1f:
ae:2c:9e:3d:5f:9a:17:32:19:d1:04:de:a1:1e:14:3d:b6:75:
a7:1e:4f:7b:1f:18:5e:33:77:17:08:7f:ae:14:c2:88:03:d7:
58:ad:fe:17:4b:d3:a2:c1:11:c6:eb:39:2c:0c:b4:c8:eb:dd:
22:b8:c7:9f:32:6a:43:53:f5:c5:e6:9d:fc:61:fa:a2:fc:b0:
82:85:31:0c:e1:f4:34:03:c1:f2:83:a6:84:68:a8:39:30:fc:
c6:2f:56:5d:75:8b:50:d4:37:18:59:99:cc:46:a6:19:49:ed:
73:00:ea:bd:60:93:d4:13:e8:b4:b4:a5:86:48:25:1a:1a:e8:
8a:ba:8a:7a:65:4b:cd:b5:51:e4:d8:e4:e6:a7:41:9f:72:0e:
9d:e6:0e:e0:ff:11:1b:a3:30:11:ed:27:31:9c:8c:31:f4:0a:
75:0c:50:cd:b5:0b:cf:f3:b2:d3:f7:e9:fe:4d:2f:88:9a:7e:
3d:74:56:cd:1f:25:40:55:b7:a1:c6:25:4e:8f:bc:a7:a2:7d:
c3:a9:d9:c9:dd:ae:0a:19:d9:19:2d:fe:b8:a8:b9:f7:40:83:
79:e7:3b:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:49 2025 by rpki-client