Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa
File: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (raw, json)
Hash identifier: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=
Subject key identifier: B8:18:82:8F:3B:2B:E3:15:36:E6:8D:90:F6:E1:08:F2:90:2F:1A:2D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55CB05EC0BB1860521C14C2A8B5E1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208798
IP address blocks: 77.105.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:b0:5e:c0:bb:18:60:52:1c:14:c2:a8:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b818828f3b2be31536e68d90f6e108f2902f1a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:58:a7:8a:6f:c2:1e:85:31:ea:19:5f:1a:
dd:87:26:fd:06:c7:52:0b:cf:eb:1d:12:f1:31:62:
b4:de:d1:9b:20:d3:db:04:b6:4e:6e:a2:28:be:1f:
8c:96:08:9c:29:01:c4:2e:3a:ab:8c:94:08:31:59:
72:4c:1a:60:50:25:c9:9d:9f:5a:f7:c4:04:5a:d7:
45:45:4e:b5:c1:56:2b:e8:89:7b:01:9d:a6:ea:af:
83:f9:c9:e2:78:53:52:22:ab:6f:9a:ac:a7:b6:c3:
2f:85:03:ab:27:bd:97:8c:2f:a8:0f:69:37:3a:e6:
50:4d:ed:1e:80:69:14:30:51:ac:c0:19:47:a1:d0:
c3:b9:00:91:89:c0:2a:6c:45:33:3b:75:13:e4:66:
86:a4:a7:7e:92:50:7d:27:83:1b:9f:21:b6:72:90:
b5:ae:02:e7:ae:12:99:cd:a1:30:d2:85:e6:75:fa:
82:6b:0e:39:73:8c:4c:77:47:08:32:35:39:68:bc:
2d:6b:08:9f:70:f1:55:c5:90:23:fd:3e:a5:25:32:
df:60:7c:72:da:b0:a0:71:f7:5c:30:41:fe:4f:e9:
0a:c7:d6:d8:ab:89:93:ef:22:f2:45:31:e6:0f:88:
97:73:36:58:5a:2a:8e:02:d7:6d:9a:3e:8d:fa:64:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:82:8F:3B:2B:E3:15:36:E6:8D:90:F6:E1:08:F2:90:2F:1A:2D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
80:94:c1:53:ff:27:79:b6:28:2c:69:fc:a2:19:7e:4b:6f:53:
4b:1e:2f:f3:ee:84:6f:f3:8e:9e:36:20:6d:ba:5f:ca:80:ac:
a1:e0:7b:51:3a:97:5f:df:57:26:63:2a:6f:5c:ef:2a:97:8c:
2b:77:65:95:a6:44:df:96:c2:10:37:e7:ba:aa:04:de:cd:79:
f3:f1:79:f2:aa:30:f5:ee:b2:46:7c:74:c4:5b:0f:94:dd:7d:
17:02:83:97:a0:19:11:8e:87:17:05:56:fa:db:ad:93:eb:b9:
4a:27:0b:5c:61:21:11:95:0a:9c:40:a2:97:0e:8d:48:bf:89:
01:4e:0e:ce:63:98:53:83:6a:4d:37:8b:37:e5:b6:d6:32:d9:
69:04:82:6b:f7:80:d3:df:4f:15:38:25:e5:d4:a1:f9:34:4c:
97:3b:06:d3:38:c0:d8:45:1c:5c:e4:be:af:09:42:88:9d:81:
93:1e:49:d1:20:aa:33:23:6a:52:14:38:71:e6:df:d5:8b:f4:
7f:7c:e8:6c:20:6a:b7:91:14:10:4c:cb:a6:d1:bf:55:85:d1:
81:1d:c5:43:e2:5b:23:4c:73:c7:57:c7:53:48:11:47:95:c2:
7d:68:8c:d8:37:b4:06:42:7c:a3:8f:b5:12:71:85:b0:0e:00:
89:9b:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:01 2025 by rpki-client