Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/84TrX0qs1Y4yZ95W-q51Grc9rH0.roa
File: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (raw, json)
Hash identifier: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=
Subject key identifier: F3:84:EB:5F:4A:AC:D5:8E:32:67:DE:56:FA:AE:75:1A:B7:3D:AC:7D
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F54B0E3EB2773FD6B351F61976E9
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/84TrX0qs1Y4yZ95W-q51Grc9rH0.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56340
IP address blocks: 77.91.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:4b:0e:3e:b2:77:3f:d6:b3:51:f6:19:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f384eb5f4aacd58e3267de56faae751ab73dac7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:59:80:29:d2:00:e0:70:20:6b:2f:bf:23:
ef:4d:58:c0:42:4d:40:f6:0a:85:46:9d:b4:4f:99:
4e:bf:f2:69:30:4c:1c:74:48:21:fa:b0:62:dd:d1:
3c:2a:35:20:a5:3e:3a:86:25:a8:a5:c1:74:79:37:
c2:43:cc:31:51:f5:e3:a2:4c:f0:b1:02:3e:97:18:
ca:0f:46:ff:87:6d:32:f5:36:38:51:af:5a:14:e1:
de:5c:af:ae:d2:08:6d:3b:2c:87:42:44:d5:0e:72:
74:80:e7:d3:af:04:52:ed:1e:34:df:99:0d:b0:ea:
b5:ba:71:d0:d7:8f:f8:05:2c:08:96:5f:3f:a4:95:
b4:84:99:ec:b3:ed:16:52:cf:fd:18:d3:4b:f6:e8:
f4:8f:5d:a8:ce:ba:ea:09:1c:99:f8:ce:e6:4d:2a:
f5:73:33:df:3c:7e:d4:ae:14:e7:8a:1d:a9:07:5c:
8b:22:0d:92:ac:60:24:07:64:67:08:dd:3c:24:63:
e0:15:9f:a0:fc:bd:ab:59:13:78:d8:80:cc:d8:89:
56:4b:4e:7d:e3:57:1e:09:31:e5:68:e3:f6:31:85:
5f:8d:b3:d7:8b:a4:5d:99:cb:64:bf:dd:df:1d:dc:
83:1b:e4:b6:fc:02:ff:78:22:7a:ec:44:69:0d:6f:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:EB:5F:4A:AC:D5:8E:32:67:DE:56:FA:AE:75:1A:B7:3D:AC:7D
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/84TrX0qs1Y4yZ95W-q51Grc9rH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.104.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:75:dc:e3:b6:f6:82:21:9d:b7:81:a6:6f:a9:e1:34:23:e1:
b9:ed:bb:a0:ff:1c:ed:11:31:a1:f0:47:69:e5:0b:cb:e9:fb:
27:ed:e9:97:04:c9:e7:e1:6f:cb:7a:b8:ca:ef:93:48:0a:78:
41:00:31:6e:e7:79:7d:16:48:52:d7:40:d8:63:7f:7f:00:2c:
31:38:41:e5:ab:ac:27:22:e0:9d:39:d2:80:00:05:27:c5:1e:
f9:f7:45:10:a0:45:2d:45:c9:4c:94:8b:20:9e:83:0b:a3:79:
a4:78:bc:fc:c8:84:5c:74:ea:04:fc:5d:38:a5:29:4c:fc:e1:
be:de:9f:c5:3e:64:81:31:9b:c6:35:05:7e:1d:bb:d1:d1:db:
21:4e:25:88:89:fd:d4:d9:f9:d3:cb:b7:41:c3:30:50:89:6a:
cb:0a:f4:d3:f1:ec:05:1d:8f:84:b8:48:80:b0:a8:48:2f:19:
9f:ec:88:81:27:a4:a1:5c:ee:44:35:4b:1e:2e:be:a4:0d:09:
27:6c:4d:1e:48:14:58:c0:68:66:62:a6:31:64:fc:d1:6e:f9:
61:54:08:d4:7d:ad:52:37:ba:ac:b3:25:74:4e:16:97:f5:49:
32:fd:3f:d1:74:c4:6c:76:ad:9e:70:7a:58:29:5a:8e:e8:df:
10:8a:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:23:56 2025 by rpki-client