Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IbBYRABCDq04mkT62_eGeDe_O3E.roa
File: IbBYRABCDq04mkT62_eGeDe_O3E.roa (raw, json)
Hash identifier: AwVOH3pH9Wx83yPvICgMqm7PoL1vXhsm427WtZa0hPc=
Subject key identifier: 21:B0:58:44:00:42:0E:AD:38:9A:44:FA:DB:F7:86:78:37:BF:3B:71
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019378FCBFB62B6F34C67A40807743A49FC5
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IbBYRABCDq04mkT62_eGeDe_O3E.roa
Signing time: Fri 29 Nov 2024 17:34:10 +0000
ROA not before: Fri 29 Nov 2024 17:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 77.93.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:fc:bf:b6:2b:6f:34:c6:7a:40:80:77:43:a4:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 29 17:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b0584400420ead389a44fadbf7867837bf3b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:6a:97:c3:02:96:55:9f:67:7f:40:1b:f0:
8d:7d:b6:e6:9a:a9:7e:e1:9f:79:44:27:f9:06:45:
d1:83:06:64:10:b2:30:f4:01:2f:c4:df:0d:95:5f:
c6:97:12:ec:00:a4:0b:60:37:6d:1a:d9:64:7f:5d:
d7:8a:64:77:7e:f5:25:2b:ad:86:1f:23:ec:2b:0f:
3d:3f:89:16:5b:18:db:81:f9:b0:69:55:ce:e6:df:
45:06:10:c6:4b:e8:0b:10:73:f6:ce:61:53:73:c2:
eb:39:25:90:46:a9:d7:a8:a4:9c:e4:ac:3d:68:c6:
b5:4f:75:86:b4:e7:6a:6c:16:43:dd:07:f6:65:37:
29:55:7f:b0:4b:d9:98:c3:a3:07:b8:1f:62:c8:3e:
8b:16:f2:4a:f5:01:17:0b:e3:83:64:cc:14:33:47:
a8:37:03:12:9c:7b:c9:7e:66:57:97:89:03:93:75:
03:bf:39:42:46:5c:2a:e1:d2:74:8c:90:f8:e0:66:
22:7e:08:8e:8a:8c:04:55:dc:9b:80:0a:1d:a8:64:
5c:1d:5e:cd:8b:2a:dc:bd:27:d2:35:11:4c:b1:82:
75:93:78:cf:78:f9:b7:67:7e:f5:50:10:4a:be:d8:
d3:b9:48:89:fd:b0:38:49:be:04:92:f3:9f:7b:b8:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:58:44:00:42:0E:AD:38:9A:44:FA:DB:F7:86:78:37:BF:3B:71
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/IbBYRABCDq04mkT62_eGeDe_O3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a4:8f:a7:03:62:1e:e7:95:c2:dc:9d:d8:99:b5:28:84:9d:
cb:3b:84:93:f8:51:5e:4e:35:9d:d6:ad:ed:80:f2:b1:1a:8f:
0f:45:0e:d9:0d:ba:b4:a7:13:56:94:56:7d:83:d4:9c:cc:9b:
4e:2a:93:c7:d1:ac:e1:b9:d2:bc:bd:75:97:fd:1d:bc:09:46:
00:e8:14:5e:00:bb:dc:38:e0:c5:e9:81:5a:97:df:19:6f:54:
b1:d6:d3:d7:76:8f:b9:3f:a6:ad:1a:07:fa:e6:ee:c9:ba:79:
46:cd:08:6e:d1:5b:77:2d:80:c4:35:c7:ff:2f:2c:0a:d1:17:
b5:f2:89:7f:70:1b:32:78:94:a7:79:cc:02:1f:d2:01:a7:36:
7c:13:3f:48:de:0f:fb:43:b8:0f:16:0b:39:d5:64:f7:be:c7:
b2:66:b2:e6:c6:49:c1:a5:2f:e4:f1:f5:7d:ec:6e:79:78:be:
2f:f4:c7:45:7c:a4:2e:06:4f:73:f7:e8:d1:46:2a:bb:54:70:
fd:8e:1f:00:c1:ca:a0:24:a2:4f:2a:a4:c7:99:1a:16:25:8b:
3a:12:5b:91:c6:83:3e:76:86:2c:74:88:72:72:1b:07:bf:90:
a2:1f:2c:b9:7e:9b:ba:ca:7b:30:f5:55:8c:57:33:e5:f7:7d:
37:2f:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:21 2025 by rpki-client