Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/u20K50DQR1l8QXeOK7QG7eVh8Uw.roa
File: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (raw, json)
Hash identifier: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=
Subject key identifier: BB:6D:0A:E7:40:D0:47:59:7C:41:77:8E:2B:B4:06:ED:E5:61:F1:4C
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B89BE7194688C6CAA8FABFFC68A1D
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/u20K50DQR1l8QXeOK7QG7eVh8Uw.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207944
IP address blocks: 77.225.29.0/24 maxlen: 24
212.145.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:89:be:71:94:68:8c:6c:aa:8f:ab:ff:c6:8a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb6d0ae740d047597c41778e2bb406ede561f14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:e2:29:20:f3:2b:46:4f:26:e1:35:bf:28:
68:a8:c9:10:b3:25:4d:01:7f:d7:5f:2f:c0:08:5c:
de:6f:c3:86:d8:70:3b:18:4b:be:49:90:25:9f:f3:
dc:38:0a:3e:b5:56:fc:39:a5:67:a1:a1:c3:85:d9:
5f:a2:5d:c6:10:36:6d:b6:96:0c:4d:d5:6e:61:76:
8f:c4:e3:8e:6b:d8:57:49:3e:11:ed:b0:8f:da:f0:
27:33:cd:6f:dd:f1:a6:65:8f:4d:17:56:46:21:60:
86:f6:1c:b0:cf:db:10:0d:2e:77:d0:df:05:c8:ec:
b9:c0:3c:bb:38:be:22:0f:0b:59:15:bf:ad:38:a8:
e5:be:de:2e:e2:f1:3a:f8:7c:e6:c7:48:e4:32:87:
16:d5:9e:62:ab:e7:87:3f:9f:bf:17:b0:3f:c5:c6:
df:1e:65:e7:a4:bd:58:c4:f1:73:0e:ac:80:17:24:
b6:1e:e3:c6:1f:9f:5a:d1:d0:1e:f8:44:77:11:97:
96:88:95:fe:ba:b8:5f:c1:49:91:5a:30:62:bc:e2:
03:28:b9:f3:cc:56:c8:5c:9c:a0:85:9b:26:c6:31:
af:99:b3:20:13:95:06:dc:79:e0:e3:4f:19:90:2a:
8e:54:85:a1:06:0f:d5:74:cb:72:d2:95:5e:1d:2c:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6D:0A:E7:40:D0:47:59:7C:41:77:8E:2B:B4:06:ED:E5:61:F1:4C
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/u20K50DQR1l8QXeOK7QG7eVh8Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.225.29.0/24
212.145.199.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b9:e9:91:7e:df:20:30:45:7a:1f:88:ae:58:f0:d6:6e:9b:
29:13:92:84:34:e4:5f:25:de:73:90:9d:39:78:a2:72:11:4d:
54:5b:9f:05:a1:99:a4:fe:fa:02:13:0e:65:4e:f3:9a:03:90:
3e:74:6a:5b:30:ba:ca:73:9b:ba:da:49:21:fa:4c:75:e7:bb:
08:5b:20:00:5b:0c:ee:74:be:27:bb:cc:93:63:8c:10:43:2d:
2c:72:c2:43:fc:cf:82:74:c7:a0:47:1d:87:e7:9e:ac:dc:51:
97:1f:51:e0:c3:4b:fd:ac:f6:0a:a8:1f:fb:64:c3:ce:03:7e:
d6:98:b6:cd:5d:be:4b:aa:b5:bc:8f:d1:45:82:ba:ee:ff:70:
d6:58:82:a9:8d:9c:29:41:c1:1e:2c:b5:1d:49:44:15:9b:1d:
d6:9b:fd:e5:06:21:e4:4b:b3:fe:4d:60:10:c6:72:d0:90:6e:
04:71:4b:39:c9:85:83:50:d0:f6:62:af:b8:39:59:45:fb:b5:
ee:ed:e3:f7:dc:4a:08:65:dd:d2:9a:00:d3:2c:e8:79:7d:16:
26:69:23:64:bb:1a:22:62:ed:d9:85:91:0b:9d:5b:b3:9e:d4:
68:a5:07:4b:ba:d1:46:cc:4b:ee:0b:41:dd:a1:ad:d7:dc:9a:
39:98:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:03 2025 by rpki-client