Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa
File: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (raw, json)
Hash identifier: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=
Subject key identifier: A4:AB:1B:09:65:6A:32:C4:D0:C1:68:FC:3B:32:7C:06:BB:EF:43:F6
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA061D7194AF746C26C3B85DCB89A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 77.83.48.0/23 maxlen: 23
193.9.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a0:61:d7:19:4a:f7:46:c2:6c:3b:85:dc:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ab1b09656a32c4d0c168fc3b327c06bbef43f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:09:6b:3b:dc:7b:09:a7:3c:ab:76:4c:bc:
06:ab:6b:79:f6:cb:c7:a0:dc:ea:9e:10:fb:25:d4:
76:01:07:66:d0:9d:4d:df:fe:e9:aa:c7:15:23:24:
9b:8a:6e:f2:db:33:e9:65:a3:12:42:f5:bb:c5:54:
78:c5:96:1b:cc:e3:b4:9b:3f:33:52:eb:43:74:5c:
63:e2:8a:63:d0:73:af:e1:20:81:1b:1b:e1:b3:12:
b6:2e:8b:4c:3b:12:aa:a3:60:bc:2d:77:55:15:18:
aa:fd:0d:7a:66:60:f6:1b:b7:04:41:e6:aa:8b:d5:
2f:e9:4c:59:bb:95:bb:24:58:01:67:90:45:c9:9f:
9c:de:41:0a:bf:85:cc:80:ef:8c:46:85:77:ce:af:
15:b2:7b:6e:05:d8:59:be:c2:ba:12:1a:87:c9:55:
34:84:1f:08:e6:3c:3a:02:f2:6f:cf:c7:0f:3a:6b:
a4:ee:e6:f9:37:2e:b9:c7:b4:fc:1d:f6:ab:55:93:
3c:d7:18:66:86:9f:0f:26:4c:af:93:43:a3:f0:ff:
a1:35:1c:40:48:b8:86:08:ef:31:44:e2:2b:1e:b2:
00:24:6d:90:0a:3a:94:2d:49:c2:02:c6:0b:64:cf:
a8:5b:9d:fb:e8:15:e8:bb:df:6e:4c:8d:66:4a:af:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:1B:09:65:6A:32:C4:D0:C1:68:FC:3B:32:7C:06:BB:EF:43:F6
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.48.0/23
193.9.56.0/24
Signature Algorithm: sha256WithRSAEncryption
48:75:60:8b:42:2a:41:3b:84:9a:ac:df:96:f2:8e:09:41:d6:
7d:80:c6:7b:b6:ee:cd:63:d1:87:b9:44:83:be:eb:7a:0e:a3:
d4:48:d3:68:6a:85:4a:92:56:61:a7:41:0a:f5:90:a2:ce:9a:
c7:52:9d:c8:09:a4:ad:c3:e4:c8:6f:a3:21:74:3b:de:5e:81:
71:c7:49:af:94:a4:7e:c1:d9:fe:f7:4a:8e:ff:bc:cf:80:cb:
79:2e:a6:d7:45:a3:01:03:0d:7e:7e:82:d3:34:7a:14:36:df:
a2:14:85:54:e9:88:3d:34:26:89:4b:27:a9:d4:0f:01:ec:b4:
a8:fd:e0:3b:80:a0:2a:ff:fa:01:6a:c8:05:05:51:cf:7d:75:
00:4b:91:3d:ec:91:35:79:b8:16:0b:00:53:b3:cc:72:6a:30:
66:08:80:9a:ec:89:87:57:9c:9c:42:8c:ec:ae:57:8b:dc:59:
13:ce:a1:6e:af:76:09:af:09:ad:eb:99:4b:70:a9:8f:a3:f2:
8d:16:d4:e2:02:d8:91:a3:fb:13:69:5f:2a:0c:1b:d4:62:85:
59:2c:f0:07:db:3c:75:af:e4:57:e4:ac:ee:a5:7a:96:55:fd:
60:ac:56:23:71:f4:41:ed:3f:29:2f:d5:5e:3b:98:65:8b:53:
32:7f:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:50 2025 by rpki-client