Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ou7M0KmLE4WJDKyw4l-atUqjGyg.roa
File: Ou7M0KmLE4WJDKyw4l-atUqjGyg.roa (raw, json)
Hash identifier: VNzJge26BNZCsfzKjFks8cOkJvQXzCyErZgbdHfRgoM=
Subject key identifier: 3A:EE:CC:D0:A9:8B:13:85:89:0C:AC:B0:E2:5F:9A:B5:4A:A3:1B:28
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D8C854862500FD8AEFB74BC53894E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ou7M0KmLE4WJDKyw4l-atUqjGyg.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8001
IP address blocks: 77.67.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:85:48:62:50:0f:d8:ae:fb:74:bc:53:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aeeccd0a98b1385890cacb0e25f9ab54aa31b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:d6:e5:43:9d:36:2c:5a:20:df:20:e2:c4:
cd:cb:c4:ed:52:3c:7f:b5:55:d6:63:48:3a:ae:65:
d0:fa:dd:ac:be:9b:cb:c2:8f:f7:28:88:45:70:bc:
0b:7b:0d:79:c3:99:37:90:3b:21:84:cd:d4:da:9a:
61:87:2d:bf:ce:6d:9d:00:43:64:bd:cf:fa:02:c0:
ba:e7:34:6f:7d:d5:7e:c4:af:07:e3:67:66:80:fa:
e4:7a:53:a4:04:17:dc:f2:74:d5:a4:15:b8:fb:8d:
fd:d4:3a:60:a5:a0:fe:a7:15:85:ae:2c:46:3e:ca:
5b:2b:9b:0b:e0:11:89:c2:4e:71:98:67:17:d4:48:
1f:66:6b:c4:12:fa:9d:11:e5:cf:e1:8e:b0:97:2b:
6d:3a:66:65:eb:50:a3:6d:b2:a9:41:52:78:17:7b:
dc:f8:e9:6f:57:13:b2:0c:6f:5c:cb:42:9a:8a:24:
af:c2:53:44:8e:90:0a:06:fb:f2:48:40:88:e5:f4:
65:10:c8:45:ca:83:0f:63:ff:48:33:6b:b7:14:a6:
ac:83:b9:a1:23:e3:7e:5f:d4:2d:ca:3b:38:ee:c5:
5e:31:ed:8b:d3:70:92:85:49:67:9a:b8:38:60:64:
d9:42:86:52:7c:01:43:3a:ca:83:28:18:d2:6c:62:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:CC:D0:A9:8B:13:85:89:0C:AC:B0:E2:5F:9A:B5:4A:A3:1B:28
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ou7M0KmLE4WJDKyw4l-atUqjGyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d2:82:b5:5d:ff:3b:f8:c6:d0:97:38:cc:c3:cd:d1:30:0b:
9a:b5:d7:e1:70:86:38:d5:3a:7c:e7:58:00:cb:f8:85:c6:dd:
23:17:f7:ef:23:29:ad:38:4c:00:66:1b:fa:26:47:21:54:c2:
5a:ea:df:ca:e5:88:ed:ff:7b:03:24:3d:af:70:4f:c9:d1:69:
da:e5:bc:03:93:03:b8:36:61:af:9f:39:c3:fe:53:1c:37:de:
2c:98:58:0b:58:c9:f7:f9:a9:6f:99:4c:a6:6d:4a:2e:76:75:
77:af:32:ce:58:6e:d4:fa:f8:92:f6:11:63:df:5e:e0:4c:ee:
8e:e1:1f:39:ec:b8:4f:e1:3b:3e:e0:3a:05:a1:43:43:7d:e6:
7f:8a:ef:3a:5f:7b:4d:f0:e3:4b:8a:e0:69:96:9e:96:e5:b3:
5f:00:8e:51:d5:45:ea:8e:0a:36:e7:b9:1d:3b:2c:fd:97:e6:
ce:3a:ed:20:1b:2b:2c:2e:e0:63:4a:5a:d1:6f:98:e2:c5:67:
a1:07:d7:d4:d9:c5:21:da:1e:9a:7e:10:18:da:93:0b:cd:9e:
53:4d:e4:f0:08:b1:bc:36:35:fb:8e:05:ad:ab:47:08:e3:6f:
a0:3f:98:86:60:72:ee:0f:2d:92:bf:69:ad:da:35:53:ca:10:
78:78:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:47 2025 by rpki-client