Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/23S0Wn663DpoSqrFpgC8hHJ_XR4.roa
File: 23S0Wn663DpoSqrFpgC8hHJ_XR4.roa (raw, json)
Hash identifier: BQUFjPVDe1DVIdaRsQqcW1juv5CkDgJIBT6o3To4Rss=
Subject key identifier: DB:74:B4:5A:7E:BA:DC:3A:68:4A:AA:C5:A6:00:BC:84:72:7F:5D:1E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0193BB847D36E30422031601B0149C4C6F9E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/23S0Wn663DpoSqrFpgC8hHJ_XR4.roa
Signing time: Thu 12 Dec 2024 15:37:22 +0000
ROA not before: Thu 12 Dec 2024 15:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 77.83.48.0/23 maxlen: 23
193.9.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:84:7d:36:e3:04:22:03:16:01:b0:14:9c:4c:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Dec 12 15:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db74b45a7ebadc3a684aaac5a600bc84727f5d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:4e:2d:7b:95:c3:0f:bf:62:32:c2:2b:58:
81:72:99:47:1e:83:5a:38:f9:53:15:aa:f8:c1:20:
df:ae:33:6d:6f:ee:16:7e:d7:6e:c7:0b:17:8f:7b:
90:52:43:27:22:d6:d9:76:ad:4d:57:e2:f6:a9:08:
26:ae:44:05:82:ae:04:04:6a:d5:6a:bc:1b:f4:f0:
7b:72:42:ca:e3:af:2d:cb:c1:76:46:f2:f2:12:d6:
2e:03:ad:6d:a1:fb:1a:31:87:ec:f3:44:36:37:7f:
56:9a:f5:26:3b:79:a8:e9:c2:e9:8e:14:ff:be:2f:
39:35:e0:0b:15:47:88:1a:62:a4:48:80:8f:c4:e5:
e6:83:cd:94:4c:e4:db:fa:ab:61:fd:80:87:99:94:
a3:ed:f7:43:dc:ba:81:41:ae:4b:7a:33:e7:1d:88:
2f:d1:4d:b7:f6:a4:be:51:af:5a:e0:89:be:3d:9e:
b3:ab:66:e1:81:d8:7d:54:7f:9c:c9:e5:85:80:a9:
29:1b:f7:08:04:b2:f7:3c:0d:03:2e:13:dd:25:24:
00:75:ac:cd:54:e2:77:39:87:5c:78:85:50:3c:5d:
b9:38:84:c5:30:c9:76:4f:0d:67:44:71:ad:26:2b:
65:9d:a9:56:de:19:a0:9f:07:97:35:6f:ea:30:b1:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:B4:5A:7E:BA:DC:3A:68:4A:AA:C5:A6:00:BC:84:72:7F:5D:1E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/23S0Wn663DpoSqrFpgC8hHJ_XR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.48.0/23
193.9.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:03:ae:8e:a4:1a:1a:21:26:65:eb:f3:c7:5a:18:b6:7e:7d:
81:53:20:90:b4:48:b2:45:1f:3d:47:be:2a:fa:e8:f3:4b:66:
d3:c1:d8:33:e2:38:0c:8b:72:ae:29:9e:14:52:c4:c2:43:96:
dd:27:9f:fc:81:2b:36:1f:25:91:d7:df:45:09:54:cd:64:64:
93:1e:57:c5:b0:90:9f:6f:0d:69:e2:36:88:0e:e8:38:a3:30:
73:b1:2b:80:ac:13:a0:52:7f:e2:d3:be:46:e4:75:a7:51:91:
c7:7e:2d:db:24:ca:09:97:36:e0:2c:36:13:52:97:0f:22:45:
b0:cb:3d:2d:ae:ab:59:37:a7:91:8f:ab:9c:48:60:63:cb:b2:
10:eb:e4:b1:9a:d2:d4:89:82:4a:6b:af:5c:0b:22:d8:d9:b8:
5e:70:87:5d:fb:de:a7:45:85:29:ab:7e:0f:7a:bb:6b:44:7a:
a1:85:62:6c:e1:c0:db:7b:97:bf:99:1b:5f:09:9a:5c:47:05:
75:cd:14:71:2a:b5:18:35:6c:31:37:61:9c:07:6f:d5:eb:87:
58:b3:86:3c:71:fe:cd:75:de:bc:b6:76:f1:7c:7b:ab:36:dc:
24:db:1f:9c:dc:38:72:d3:ea:ba:54:0b:ff:14:49:d8:38:39:
4d:35:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:26 2025 by rpki-client