Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ci29dsPY72RufGMEYUAbz5TDD2E.roa
File: ci29dsPY72RufGMEYUAbz5TDD2E.roa (raw, json)
Hash identifier: GwICBmo1F5/omoDFAegiCKxokbxS/6QvRzh6KQPQIdc=
Subject key identifier: 72:2D:BD:76:C3:D8:EF:64:6E:7C:63:04:61:40:1B:CF:94:C3:0F:61
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01932512CFBBAA70382077316F4B64A1D8F8
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ci29dsPY72RufGMEYUAbz5TDD2E.roa
Signing time: Wed 13 Nov 2024 10:30:10 +0000
ROA not before: Wed 13 Nov 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
185.101.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:12:cf:bb:aa:70:38:20:77:31:6f:4b:64:a1:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Nov 13 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=722dbd76c3d8ef646e7c630461401bcf94c30f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:60:58:3d:a5:dc:af:f7:94:8c:c9:38:d8:
62:b8:f9:7c:3c:6a:11:de:f8:3f:5f:68:aa:ce:43:
5f:a8:51:1f:64:54:c0:cd:a9:aa:57:89:af:bf:94:
f9:04:0a:30:31:78:5b:38:92:cf:d9:fd:62:39:fb:
da:3e:48:a7:39:b2:d8:f8:bc:cb:42:ac:10:37:c8:
45:97:25:a9:01:ed:50:a8:33:27:f3:58:38:c3:7a:
8f:73:c3:b5:a1:bf:25:52:b3:bf:cf:39:ff:50:5d:
e1:21:08:03:f3:9e:b0:3d:6c:0e:01:98:5a:03:68:
8b:a9:1e:7a:8a:5e:6e:c3:0e:96:06:2a:f4:70:28:
d5:7a:5b:97:a3:84:78:37:cf:93:00:1f:db:1b:21:
63:c6:1e:ee:c4:92:fc:b3:c7:7d:11:c3:82:fd:6a:
d2:ba:b4:59:76:69:c9:8c:4b:3c:db:e4:24:ee:6a:
8f:e0:31:fd:01:6c:74:0b:88:7f:1e:ff:b7:09:71:
bd:c6:db:02:ec:ea:e0:e2:a6:a3:36:1c:7f:3a:42:
eb:ed:bb:04:cb:87:57:75:65:2a:22:ed:e8:e2:80:
e7:83:7b:25:5f:b1:0b:b8:f1:48:6c:18:70:59:46:
54:f8:97:1f:7e:a4:d8:08:10:e7:03:22:1a:dd:7a:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:BD:76:C3:D8:EF:64:6E:7C:63:04:61:40:1B:CF:94:C3:0F:61
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ci29dsPY72RufGMEYUAbz5TDD2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
15:43:33:78:7a:2b:80:56:86:2f:cf:57:e8:1e:e8:e7:e4:75:
5d:23:85:c2:5f:3a:ed:fd:5d:f9:fc:65:e4:5e:34:4a:6c:df:
e4:f5:1a:0e:7e:f2:c7:54:b9:02:f2:78:ea:a0:31:4b:16:40:
ed:b7:03:bb:8e:7f:94:ca:b2:df:da:93:5c:9c:9c:43:39:b1:
45:bb:30:63:29:62:7a:e1:92:2e:95:25:3d:72:dc:f3:21:75:
ad:8d:4b:6d:37:31:2e:e4:bc:49:e1:6e:94:4c:87:6b:36:7d:
e7:80:8b:71:04:0d:5a:a4:99:1e:bb:6d:34:77:2f:39:4c:7d:
a9:36:13:e8:31:d0:76:f2:6e:c6:5f:f3:e1:3c:93:90:92:14:
f7:36:c6:b7:ee:09:5d:6a:97:92:75:57:14:18:c7:ce:2c:12:
ae:1e:bc:a4:29:83:8b:62:c0:7c:e4:1f:21:3d:1c:60:fc:3d:
1b:0f:e2:cb:44:e2:02:6e:54:d4:de:ab:70:81:7a:91:cc:0d:
80:65:86:d6:6f:3f:b5:ac:83:89:87:83:96:5a:42:f0:9f:66:
8e:06:43:7d:3a:24:72:0d:db:12:ee:9d:ad:96:95:03:09:04:
03:4f:bf:7f:3c:48:70:40:32:60:0d:8f:a7:fa:2d:42:80:fd:
27:8a:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:55 2025 by rpki-client