Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Pm16Xnd77Ehpq5f3W0Y13XEeqX8.roa
File: Pm16Xnd77Ehpq5f3W0Y13XEeqX8.roa (raw, json)
Hash identifier: mZZyHut87UJFfpAvmvLvqDXa3o1GZU4/mX+y8W2KpiA=
Subject key identifier: 3E:6D:7A:5E:77:7B:EC:48:69:AB:97:F7:5B:46:35:DD:71:1E:A9:7F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01878B6C467E285C4EB0F0D6E55FD1E4BED7
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Pm16Xnd77Ehpq5f3W0Y13XEeqX8.roa
Signing time: Sun 16 Apr 2023 18:55:41 +0000
ROA not before: Sun 16 Apr 2023 18:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 93.177.77.0/24 maxlen: 24
93.177.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:6c:46:7e:28:5c:4e:b0:f0:d6:e5:5f:d1:e4:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 16 18:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6d7a5e777bec4869ab97f75b4635dd711ea97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:58:93:da:4a:f2:69:d3:94:06:a0:10:0a:
5e:35:d6:e5:f3:28:6e:f8:72:a4:99:b5:de:d9:ff:
2c:a7:0b:4a:25:5a:5b:dc:6a:e0:e9:9f:84:d1:c2:
0c:4f:47:97:94:8d:80:71:b5:81:aa:73:f0:98:e7:
b1:5c:72:7a:fb:41:56:f8:9b:30:06:49:e1:ea:0e:
2b:d1:fc:a9:4a:7f:5e:80:ec:ac:b3:d8:47:ed:1f:
0a:56:df:81:94:0a:28:06:1c:bb:0e:93:27:30:0b:
2c:71:26:4b:e3:5b:93:67:9e:e4:e0:78:2d:b8:bd:
8d:6b:d3:ff:0e:70:ad:ba:00:a0:2b:2c:27:3c:05:
a4:38:7e:3e:21:8a:e4:ee:0d:ef:a8:cc:75:1b:ba:
9b:1c:d8:5c:6d:a4:5f:4f:7c:8d:a1:4f:73:83:3c:
02:1e:e0:31:0b:60:1f:c3:37:ba:2f:f0:0f:7d:41:
56:6d:89:f0:b9:3a:36:a7:c5:9a:72:6b:d4:30:87:
78:ec:43:a9:bf:d1:3b:67:06:3a:fc:d5:11:5b:3c:
5f:ef:6d:d7:06:ce:df:86:e1:d1:d9:fe:87:59:6f:
81:c4:02:1c:12:c6:19:2d:d9:a1:3e:4f:52:80:f0:
6e:be:ac:b5:84:1e:25:dc:92:5f:3f:8c:cd:a1:9a:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:7A:5E:77:7B:EC:48:69:AB:97:F7:5B:46:35:DD:71:1E:A9:7F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/Pm16Xnd77Ehpq5f3W0Y13XEeqX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:81:ad:66:fe:ae:de:31:22:1b:77:3d:8d:33:17:60:51:5f:
dc:c9:75:97:51:4b:83:21:a3:45:0c:b3:b6:ae:b4:2c:11:ef:
17:0d:e8:ea:6b:fa:0c:a6:11:50:fe:e6:1c:d6:59:a1:e0:1d:
29:e0:3d:c6:9b:6f:7d:86:ee:ef:af:8c:e8:f2:22:79:f2:82:
07:77:bb:37:98:a6:a4:84:b7:49:fe:ee:3c:12:75:b7:6b:1e:
82:5a:ec:5d:bb:e3:86:0a:9c:a6:be:7c:3a:aa:ba:25:9f:72:
eb:3b:8b:3a:3f:e0:59:27:47:e7:97:bb:f7:a7:1f:6c:e6:e8:
2e:c7:8f:cd:68:f5:c7:de:7c:ab:4b:dd:4d:23:3a:f5:0b:3e:
a9:84:be:de:00:91:64:02:c5:8e:f8:2c:12:c0:65:41:9d:ec:
02:1a:49:91:a2:d7:f1:be:96:c2:b6:bb:2a:75:8c:ca:0c:29:
73:e7:aa:3f:cf:df:be:68:56:29:b7:d9:22:72:1f:f6:f8:3c:
e1:ab:90:c3:09:3e:81:78:42:2a:e7:52:00:61:5c:77:f9:af:
a4:b5:df:79:bb:62:65:74:b8:84:c4:28:56:f6:d4:d1:b5:04:
11:bf:20:ca:5c:95:19:b1:cc:51:98:45:10:30:73:62:0d:5d:
28:03:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:53 2025 by rpki-client