Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/DEczAC-31tqa04vSPbc74WRhD-o.roa
File: DEczAC-31tqa04vSPbc74WRhD-o.roa (raw, json)
Hash identifier: xxZSeT5eBBdfZhwepe6d5L9x5m1qOZ6saQ+c9HKrE5Y=
Subject key identifier: 0C:47:33:00:2F:B7:D6:DA:9A:D3:8B:D2:3D:B7:3B:E1:64:61:0F:EA
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019378FCBECC5296C9C970561D7D5826AFD5
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/DEczAC-31tqa04vSPbc74WRhD-o.roa
Signing time: Fri 29 Nov 2024 17:34:10 +0000
ROA not before: Fri 29 Nov 2024 17:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:fc:be:cc:52:96:c9:c9:70:56:1d:7d:58:26:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 29 17:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4733002fb7d6da9ad38bd23db73be164610fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:d0:a1:5d:46:a7:e9:18:4e:8a:fc:7a:08:
42:84:e1:35:e9:43:43:d3:0e:9e:d3:7c:10:3f:54:
b8:e9:1f:90:0f:46:9e:f5:91:da:b2:9e:52:d4:92:
61:06:f5:9a:22:91:a9:4c:82:75:76:b6:96:a2:9d:
54:0e:e0:ec:62:14:9e:5b:73:d8:d6:c4:94:91:9c:
56:12:cf:ec:6a:68:e3:bd:1e:6c:1d:0d:de:f9:70:
bd:96:f1:ee:f9:de:b5:18:43:33:ca:01:fb:63:3c:
b1:2a:e6:bb:31:aa:28:1c:48:df:5a:4a:95:2f:13:
c9:89:bf:39:fb:6f:55:ef:c5:1c:9e:bc:8a:ea:78:
72:e4:d2:f2:90:31:db:a9:0f:2d:0a:c6:78:eb:fe:
ed:28:96:11:88:a5:d2:11:f6:ae:9b:f3:8c:ad:bf:
61:97:33:ef:9d:37:21:40:10:24:d0:01:6f:57:b2:
b5:88:7e:3f:e9:b4:af:cf:6c:9a:e2:a1:9c:38:7f:
3d:33:30:d6:57:64:84:3e:19:1e:d7:b4:4f:11:21:
78:e2:35:de:c8:f4:74:25:09:57:26:d7:7f:99:8f:
15:31:78:b8:c4:67:cb:e3:42:64:0c:0c:2d:67:78:
4d:9f:7b:bf:5d:94:3b:0b:78:2d:5b:35:4b:19:13:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:33:00:2F:B7:D6:DA:9A:D3:8B:D2:3D:B7:3B:E1:64:61:0F:EA
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/DEczAC-31tqa04vSPbc74WRhD-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5a:7f:b8:8c:81:a7:96:08:1b:7d:c0:4b:60:f5:35:cf:65:
4c:68:88:95:55:86:d0:91:1e:73:75:77:20:7a:4a:a0:03:e8:
83:ac:99:c2:35:e9:85:a0:95:4d:23:65:3d:9e:c4:66:a6:8c:
6e:89:f6:2c:da:65:15:92:49:08:13:dc:79:f3:43:50:44:2c:
d4:37:7d:88:e0:cf:2b:b2:7a:32:74:7b:78:9b:81:1a:00:5f:
59:2f:91:a6:b0:05:93:e2:99:b4:42:37:3b:e4:ef:5c:91:86:
75:4c:76:80:0b:34:15:06:a3:84:e9:3f:2a:de:3a:c1:dd:e9:
9e:7b:22:0e:d9:1d:1c:85:fb:95:de:fe:d7:9a:74:25:c3:b0:
2a:6d:5a:d1:43:02:6b:c6:6f:36:8d:57:a4:5d:f2:19:34:a1:
a4:eb:fb:f7:10:23:c3:5d:3d:ec:47:d6:00:21:69:73:45:f3:
a6:f3:8d:1c:15:ef:82:e7:85:c5:54:e3:98:87:ed:f2:09:6b:
88:96:af:b1:5f:7a:dc:5c:73:3a:ef:43:f9:f9:ea:b7:35:21:
59:2e:85:80:8c:8d:74:e2:70:d9:b7:62:ea:f7:b2:c0:32:42:
22:5d:7f:9c:7d:99:2e:08:07:21:71:77:bf:8f:48:48:14:a8:
b3:8a:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:36 2025 by rpki-client