Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa
File: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (raw, json)
Hash identifier: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=
Subject key identifier: 88:1B:E9:76:58:88:00:AD:99:7F:CC:4D:39:3F:1C:38:05:32:21:2F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F91E0B043AB8C5A1BE4712BDCC88A
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206070
IP address blocks: 77.36.62.0/23 maxlen: 24
93.120.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:e0:b0:43:ab:8c:5a:1b:e4:71:2b:dc:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881be976588800ad997fcc4d393f1c380532212f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:89:20:48:10:24:bf:b3:b4:e5:f6:cb:66:
74:bd:0a:12:38:6c:13:b0:f7:51:c4:12:66:04:46:
0b:51:b3:39:6b:b6:a1:2f:16:a0:ce:25:a1:b2:34:
a1:78:31:39:49:73:22:c5:83:59:da:51:ea:c1:33:
47:2d:f8:8d:72:56:c8:5e:b8:d5:b4:17:18:78:d4:
4f:e5:24:ef:ba:1d:f1:e8:06:13:a9:54:3f:f7:d2:
74:2f:d3:dd:a3:8c:bc:73:25:4e:64:dd:95:f1:87:
87:9f:0e:57:ac:d8:da:65:61:c1:dc:97:84:e2:9c:
e4:d1:0e:c1:8c:08:88:80:84:e6:d7:0f:6c:c0:f0:
8c:79:09:5d:73:3c:c1:23:7d:10:d2:b6:f2:03:98:
7a:cd:e7:cd:e0:37:53:c6:bb:c4:1a:5f:bd:3f:0f:
e2:00:ae:86:ed:00:8c:b6:8b:80:42:88:97:18:8b:
90:d2:d1:26:3a:4b:81:84:43:2c:6c:fb:99:49:bc:
24:d4:ec:b9:fa:12:d7:50:a6:6d:cc:1e:9c:71:20:
e8:60:f1:0e:0e:a7:56:c0:49:dc:3c:a7:d1:0a:6e:
a8:40:bf:d3:71:31:4b:f6:3f:14:c5:cd:58:72:cf:
6c:94:3b:d4:5b:5d:19:0f:a3:7d:53:f4:67:ef:d2:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:E9:76:58:88:00:AD:99:7F:CC:4D:39:3F:1C:38:05:32:21:2F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.62.0/23
93.120.43.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:f7:a8:9a:ea:c0:41:d6:31:54:7d:8f:50:36:eb:08:57:
f5:4d:4b:80:52:fc:09:42:7f:9e:e9:49:f0:f7:57:bc:77:c0:
7c:00:f3:5e:90:1a:5c:cb:3e:03:2b:b5:43:49:09:a4:63:ae:
b6:26:b9:b3:18:b4:53:53:ac:41:58:c9:ac:b0:6e:91:f2:d1:
30:cd:69:ef:d9:0f:73:a5:b3:66:85:1d:07:c3:d7:ff:29:20:
cb:66:7d:c9:b2:6c:75:a1:b1:40:ce:12:31:9a:83:8c:b5:84:
81:51:2c:7f:c3:f1:7d:16:b3:9c:34:b0:6c:56:8f:70:8e:4a:
c5:d2:a1:ab:8b:70:91:4a:4a:f0:77:27:74:49:73:28:95:f9:
20:08:17:97:a4:f2:5a:e4:ca:31:08:4c:5f:19:ff:cc:e9:d0:
04:41:bf:aa:25:e5:e0:93:27:41:9b:f0:64:01:ab:a0:7d:e6:
d0:05:79:bc:cd:88:b4:e1:77:a1:ef:f0:29:3a:35:ef:4c:60:
f7:08:81:12:78:6d:47:52:d4:47:eb:00:d0:80:97:3a:a6:92:
de:7a:43:4a:bd:1e:9b:26:97:af:5a:7d:6b:7e:26:82:38:f5:
8a:b3:a2:5f:fa:d4:c6:e3:93:9a:d9:b5:be:b6:7f:dc:06:0f:
86:0b:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:39 2025 by rpki-client