Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa
File: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (raw, json)
Hash identifier: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=
Subject key identifier: 23:49:59:FB:09:C6:98:91:C8:79:69:38:25:27:1C:75:82:C6:23:ED
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F672759546762CDDF77C1AA61D8D
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64419
IP address blocks: 77.91.120.0/23 maxlen: 23
77.91.120.0/24 maxlen: 24
77.91.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:72:75:95:46:76:2c:dd:f7:7c:1a:a6:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=234959fb09c69891c879693825271c7582c623ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:ed:42:e0:94:81:82:c8:73:4e:a4:05:b3:
70:69:67:c9:83:d9:41:9f:c6:29:c4:8a:94:0f:75:
d4:29:c9:eb:b7:01:1f:37:7e:0a:2b:a0:f5:0d:02:
65:57:43:91:45:2f:13:e2:ef:9f:f7:1e:84:c5:7e:
0b:33:d7:5e:c7:f1:a0:0e:0a:6c:77:f4:f7:5c:5c:
33:c9:44:8d:b9:4f:80:d0:38:e9:ac:4c:89:16:f1:
45:46:3c:c7:6c:73:16:55:65:cf:03:f5:7b:13:d9:
0c:15:04:32:e8:8f:3e:77:8f:3b:d1:16:3b:d0:90:
38:3d:5b:d8:96:84:b0:33:42:18:52:16:97:fa:96:
d6:8f:8d:ea:fc:35:f5:1e:f9:79:31:85:72:37:07:
ed:89:ec:51:ce:84:dd:12:79:ec:f4:4b:0c:20:ad:
b2:91:2a:bd:a6:3d:f9:00:03:e5:6a:cf:44:cf:b4:
b5:90:28:c6:72:e8:23:f0:e8:8c:1d:68:f7:5e:49:
5a:f7:d1:a8:a6:46:5c:94:1a:be:93:9c:da:7a:9c:
ce:42:70:39:c3:13:3d:89:97:8b:5c:ae:32:e0:00:
14:30:f9:57:1b:8e:1e:e6:e2:8e:b5:d3:a7:e2:05:
b0:73:9c:78:c1:90:ae:47:74:9b:a9:91:ea:a9:28:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:59:FB:09:C6:98:91:C8:79:69:38:25:27:1C:75:82:C6:23:ED
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.120.0/23
Signature Algorithm: sha256WithRSAEncryption
85:15:99:5c:57:e4:f5:76:7a:c7:38:f0:1f:65:b6:af:f9:3f:
71:0c:be:7b:cb:c5:2c:62:09:7d:7a:be:6c:a8:09:5b:4a:4e:
d6:af:9b:9e:04:58:8d:49:30:25:4e:e8:2c:cf:e8:ab:8d:16:
a1:65:7f:49:67:04:9e:7c:40:14:79:a8:93:8e:ae:6a:7e:bf:
95:1e:f1:2f:87:34:ef:13:62:22:f7:55:98:08:7b:33:5f:10:
80:0c:3a:a5:56:21:68:dc:25:9c:56:48:e4:21:09:df:93:ad:
da:b1:2d:75:6b:07:6d:f4:fe:e8:d6:08:fd:61:f2:1b:45:94:
f4:8c:a1:6d:90:38:24:d2:84:57:3f:29:c5:9e:78:3d:80:29:
d3:b9:0e:a6:3a:f2:7d:66:a6:96:a7:34:3d:5a:de:74:f2:ff:
e7:34:29:46:76:17:53:b0:80:44:01:07:66:1e:e0:14:23:88:
b1:a4:65:8a:40:66:37:18:48:30:37:89:04:84:3d:19:4b:89:
b0:ac:4a:06:32:eb:93:3f:5d:69:1f:be:68:22:df:8f:a9:62:
0d:35:84:ca:4d:88:f6:63:b6:2e:18:2a:07:1f:1a:b1:f0:7c:
cb:91:8c:4f:14:8a:90:88:74:1d:42:dd:0c:4e:1f:2a:b8:6b:
c8:81:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:54 2025 by rpki-client