Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R68bQnjPhvaUXzE-Q7H19ntgewU.roa
File: R68bQnjPhvaUXzE-Q7H19ntgewU.roa (raw, json)
Hash identifier: bv0+LqG8E8zxc939iLqCMR/zUH+KiUnUOUAbbW+24I0=
Subject key identifier: 47:AF:1B:42:78:CF:86:F6:94:5F:31:3E:43:B1:F5:F6:7B:60:7B:05
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01959FE303DEAE71C1E9FC0EDB055B703BFA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R68bQnjPhvaUXzE-Q7H19ntgewU.roa
Signing time: Sun 16 Mar 2025 16:56:49 +0000
ROA not before: Sun 16 Mar 2025 16:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.105.4.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
212.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:e3:03:de:ae:71:c1:e9:fc:0e:db:05:5b:70:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 16 16:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47af1b4278cf86f6945f313e43b1f5f67b607b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:4e:94:81:09:94:46:ae:0a:cd:5f:20:69:
ff:5f:45:f1:d5:db:b6:2b:08:67:a3:a9:bf:d7:9c:
06:b9:28:9e:7b:d8:a0:eb:be:a4:c9:07:ea:21:41:
aa:eb:f8:a5:e5:75:19:1e:7e:ad:fd:c4:56:8e:ff:
7c:35:27:43:1f:58:98:ed:2b:b6:c2:09:91:42:0f:
b2:b9:af:17:16:b6:cb:2d:af:87:c6:7f:66:94:d3:
26:cb:cb:a8:02:f8:d2:f9:f4:c1:d3:19:50:67:0f:
33:fc:05:f3:af:3b:ce:07:d4:2c:c1:62:6c:b9:46:
16:7d:dd:b0:b4:54:03:ac:da:74:77:c7:b2:15:46:
0b:87:63:bf:df:f3:96:6e:09:bb:29:48:c3:7c:ed:
e9:3d:39:b3:ff:cb:92:09:73:70:25:75:e2:be:ec:
af:8f:08:16:28:8d:0d:03:a3:ee:19:46:ba:10:aa:
29:1e:08:30:18:8a:e7:cf:e2:11:8c:36:e0:5a:80:
a1:ed:bd:4a:79:7a:80:a6:69:cb:f0:e8:6d:60:82:
74:2c:21:6d:3f:4f:70:01:e2:d6:55:b8:41:6e:05:
c2:5e:71:8f:e2:1f:b9:64:69:e8:68:6f:ea:de:f0:
ff:e1:8a:01:c7:28:96:8e:b9:ae:cb:ea:69:a6:18:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:1B:42:78:CF:86:F6:94:5F:31:3E:43:B1:F5:F6:7B:60:7B:05
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/R68bQnjPhvaUXzE-Q7H19ntgewU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.43.0/24
185.47.91.0/24
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a5:b5:89:19:41:40:40:29:7d:23:db:35:91:5d:4c:f0:3f:
8e:0c:71:20:cc:c8:3e:05:61:65:cd:cc:40:b7:2b:f5:b7:19:
3f:fc:25:56:b8:49:78:bd:16:46:b0:e2:13:a0:98:4a:a6:1b:
7a:d6:33:77:67:55:61:6b:5f:f8:65:21:9b:35:35:80:75:3f:
35:41:34:1c:fd:da:b9:dc:d5:9f:0b:e1:d5:ef:55:1a:17:29:
ca:2d:11:be:43:20:e2:f4:2f:82:b0:4f:f2:31:a7:03:40:eb:
6a:95:9f:b8:05:cf:2b:47:a9:20:1e:78:5a:81:a6:9f:71:c3:
02:46:80:35:3f:ff:57:95:7f:00:92:cb:21:55:8b:ce:60:ab:
4e:7f:7e:25:51:60:67:08:f6:82:3f:65:2a:e8:26:53:9d:e8:
44:a3:cd:80:b9:fe:1d:a9:bb:a1:b3:51:54:ad:50:a1:04:0f:
a2:55:41:6a:bc:77:ad:36:89:bc:7b:9a:05:8e:ee:05:ab:a8:
04:d7:80:a9:55:0b:a2:3b:b6:ce:84:c7:9b:de:e9:9d:3a:0c:
d1:01:6d:0f:3d:07:a9:dc:bc:8d:01:e3:31:1c:10:b4:db:c1:
4b:e3:21:f2:35:0c:ab:df:bd:66:9c:0c:ac:4c:d6:04:d2:7b:
f2:8e:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:00:00 2025 by rpki-client