Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/sKxr-14xxHhiYWayViFALtBfGBQ.roa
File: sKxr-14xxHhiYWayViFALtBfGBQ.roa (raw, json)
Hash identifier: oZ3yXdcwSuveyBx1hxjUtSgGr+x9AaedGx7YkKCIfiQ=
Subject key identifier: B0:AC:6B:FB:5E:31:C4:78:62:61:66:B2:56:21:40:2E:D0:5F:18:14
Certificate issuer: /CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Certificate serial: 01854DF77A49049D998164BF6D9C824D5F8D
Authority key identifier: 5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/sKxr-14xxHhiYWayViFALtBfGBQ.roa
Signing time: Mon 26 Dec 2022 10:25:42 +0000
ROA not before: Mon 26 Dec 2022 10:25:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 77.87.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:f7:7a:49:04:9d:99:81:64:bf:6d:9c:82:4d:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Validity
Not Before: Dec 26 10:25:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0ac6bfb5e31c478626166b25621402ed05f1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:c2:a3:fa:f2:e9:08:ed:c4:a5:07:1d:cc:
50:1e:de:56:02:43:ab:83:85:3a:bc:2b:f1:c4:09:
31:26:8e:cf:cd:70:1f:90:4e:cd:f8:b1:87:0a:85:
6d:90:5e:ed:c7:7a:33:20:c5:58:3c:28:bc:f3:08:
9d:77:14:a7:8d:0b:86:f6:66:e4:d4:32:c6:da:79:
42:27:17:e0:4a:cd:86:83:7f:b4:c4:36:1e:e2:f5:
d0:91:21:33:57:67:1b:35:52:49:c4:75:e2:53:9c:
4a:a7:85:cd:f3:91:6f:fd:4f:e4:a9:51:23:c9:37:
e7:6e:d2:e2:61:6f:8b:54:b9:b8:d9:65:50:5c:78:
f5:21:5a:93:07:bb:5c:6a:96:9b:4e:fd:7a:5e:06:
a2:ce:7e:61:2b:8f:d9:0b:5e:3b:0f:7a:3f:2d:8b:
89:6c:89:0b:a0:ab:7e:3d:ff:ea:78:0b:ec:00:f0:
81:df:39:04:80:ab:34:c5:1b:4e:d3:be:90:cd:07:
48:d7:4d:92:48:61:e6:f6:60:c4:fc:cb:b4:cd:1f:
14:1a:db:b3:8c:ee:b0:38:f9:11:99:a4:76:1f:31:
bb:a2:f4:bb:89:95:bb:56:7b:00:26:7b:ef:c9:be:
cf:c5:1c:a6:6f:b4:36:76:af:90:ff:c7:d7:7a:12:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:6B:FB:5E:31:C4:78:62:61:66:B2:56:21:40:2E:D0:5F:18:14
X509v3 Authority Key Identifier:
keyid:5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/sKxr-14xxHhiYWayViFALtBfGBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:90:87:79:15:f5:ed:49:46:4d:c6:86:33:06:fe:dd:66:6c:
cd:9e:bb:f8:92:ec:8a:84:b1:26:64:f2:29:25:d9:9a:2e:d0:
a8:78:f9:4e:e6:ab:cd:01:60:0a:c4:02:4b:ce:1c:36:2e:cf:
3d:64:ff:7b:36:c4:59:1e:2d:78:54:ef:85:c7:88:6c:ac:63:
4c:44:f4:d7:7e:4f:39:24:ac:d4:32:92:55:f2:f4:9d:39:01:
a7:3d:63:9b:78:fc:d6:10:8b:a6:f2:fa:a5:c4:a0:d0:27:4a:
66:fe:4f:fe:15:eb:75:34:ce:71:72:9f:81:af:9d:4d:81:56:
6e:ae:2b:89:91:86:f2:60:cc:e7:37:e9:91:77:3b:cc:16:46:
fc:6d:26:3a:f0:74:1f:26:81:90:19:72:db:e1:ac:4f:78:f5:
2d:04:72:da:6d:81:71:e4:9d:7b:71:1d:7c:b5:5e:7c:07:c8:
ac:a0:94:55:bf:6f:90:d1:0c:c5:ac:31:cb:45:1d:66:0b:7c:
07:6c:8b:0b:c6:1b:f1:42:86:64:8b:de:ae:c2:e1:76:2b:81:
fd:e6:72:22:87:66:26:2b:67:7a:e3:82:1b:da:d0:e1:58:4a:
0f:e4:bb:68:52:05:a0:3c:76:76:28:ad:b9:48:71:02:50:af:
73:fd:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:39:05 2025 by rpki-client