Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa
File: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (raw, json)
Hash identifier: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=
Subject key identifier: 17:B0:ED:9C:73:1E:D9:A3:DA:11:5C:20:25:D4:57:11:32:77:07:71
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0194252173B5FF2DBEE9E923500CD89F8AE0
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202243
IP address blocks: 77.74.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:73:b5:ff:2d:be:e9:e9:23:50:0c:d8:9f:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b0ed9c731ed9a3da115c2025d4571132770771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:eb:d4:e3:7a:50:7c:ec:e5:49:14:c5:5b:
41:cf:8e:9e:68:c1:23:1e:f5:97:2b:16:53:db:64:
bd:e7:a0:e4:e0:db:0f:1e:fa:07:01:07:0b:de:cd:
fe:fa:6e:4c:ac:61:01:65:44:77:ca:a5:d7:1a:c0:
b4:3b:16:48:4b:48:e6:e6:fb:d2:8b:6d:aa:24:4f:
18:4b:da:a0:28:bd:a7:0d:b8:ea:1f:98:4f:7f:d5:
f0:af:94:96:f5:a0:28:e5:6b:9e:8c:b9:b3:24:33:
e2:ca:31:c1:0b:48:c2:d0:b9:d1:86:6d:00:2a:66:
a3:79:20:34:4e:18:37:e4:e9:85:cc:2a:99:5f:00:
8f:5b:38:59:b0:41:39:04:1c:5a:2f:0c:ae:41:5b:
ae:8e:df:f9:0f:25:f7:ec:18:6a:da:4c:8d:29:4f:
dd:9c:a8:22:a9:54:cc:cf:1f:6f:2c:8b:a7:78:b5:
93:76:64:9a:e0:37:c6:e8:21:c5:e0:d9:91:f6:c0:
c9:6d:e5:91:61:ca:c6:45:67:b1:5d:ca:da:5d:79:
f3:54:d3:5f:db:91:64:1b:1e:de:a0:80:9b:6d:f2:
89:dd:f7:9a:8f:17:0c:ec:12:6f:20:6c:3c:f0:f9:
79:99:8f:9a:8b:04:28:22:b0:92:e1:11:b4:21:f2:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:ED:9C:73:1E:D9:A3:DA:11:5C:20:25:D4:57:11:32:77:07:71
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:48:2c:db:e8:1e:87:58:9a:07:5c:85:1b:b3:3a:eb:e2:7f:
b4:03:b0:cd:95:ef:b9:5d:77:e9:22:7e:a0:66:17:25:14:5a:
5f:3d:b7:9f:55:0c:59:73:41:0f:56:3a:c1:53:9f:da:48:6e:
dc:84:78:69:a9:f6:a5:2f:6d:f7:2c:19:f2:66:19:40:85:cb:
02:fa:3f:14:ae:9f:d9:3d:b4:b2:dc:45:55:73:44:87:5a:1a:
cd:81:74:25:04:37:2e:b5:c5:48:5b:fa:ce:6d:07:02:85:ec:
70:f0:1a:07:32:7d:1b:eb:35:2e:3e:bd:c7:28:e2:d4:1f:d2:
6a:50:18:1f:22:57:10:68:fc:3c:fc:5c:13:8c:63:a4:94:32:
6d:96:62:8a:70:24:a9:1b:19:ec:dd:78:1e:c3:97:b6:52:e6:
4f:58:41:d8:0e:a2:00:d8:da:a9:b2:a3:45:dc:8a:5f:fa:cc:
19:b0:96:e9:bd:af:3f:69:2f:cc:79:2e:c5:69:77:43:73:84:
67:9c:dd:0c:b8:0a:85:bc:c0:7f:5b:68:42:03:14:50:d0:99:
3a:65:29:c0:20:32:a0:7e:05:d0:4c:8f:b5:c0:f0:e0:3d:2a:
77:5f:7c:42:47:ef:ca:21:d3:9c:37:b5:f4:27:56:ea:77:4b:
fe:bd:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:00 2025 by rpki-client