Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ej-rBCJmnu-miAXBE5PIqlt8TFo.roa
File: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (raw, json)
Hash identifier: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=
Subject key identifier: 7A:3F:AB:04:22:66:9E:EF:A6:88:05:C1:13:93:C8:AA:5B:7C:4C:5A
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F4CCD4FF9C5F4BF369E9514CC7E3
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ej-rBCJmnu-miAXBE5PIqlt8TFo.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 77.91.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f4:cc:d4:ff:9c:5f:4b:f3:69:e9:51:4c:c7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a3fab0422669eefa68805c11393c8aa5b7c4c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:a2:e2:d7:b1:ad:4c:50:3f:4a:ca:17:98:
1f:c7:1d:d7:89:08:bd:88:37:b6:19:43:9c:0f:81:
7c:d9:b9:2b:8d:b6:0b:b9:a2:fc:c1:03:23:00:eb:
67:47:43:58:e0:4d:4c:df:88:fa:77:72:43:b0:18:
d7:d7:3c:06:74:03:2e:f3:d0:bb:3b:e9:3c:bb:1e:
0a:30:ca:ea:9e:9c:c2:2d:ed:92:43:da:e8:f7:e4:
b9:53:f3:c7:1e:96:15:44:41:f6:ee:78:87:02:3d:
1b:0f:99:0d:b6:1d:b8:8d:9f:2b:82:24:92:36:43:
b0:f6:72:3d:6d:f8:e9:1a:4b:76:ec:a1:03:3b:03:
5d:8f:99:ff:33:9c:d1:18:ca:81:9f:6c:d6:01:e6:
68:8c:ab:d5:42:5d:d2:bc:c7:16:65:04:8e:fa:7e:
5c:c8:82:b0:e9:29:db:e3:e1:28:be:66:6d:14:c7:
5d:d9:18:70:37:cc:39:43:48:20:b9:3d:55:80:39:
45:e0:87:58:1f:58:cd:4d:2c:ae:88:bd:a9:7b:b5:
86:46:97:bb:52:61:b9:39:36:5b:e3:12:bf:3a:0f:
a0:f7:84:18:21:a4:60:fa:11:01:55:9c:48:b9:cb:
87:22:cc:e9:28:71:d3:3d:26:af:27:e5:94:cc:88:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:AB:04:22:66:9E:EF:A6:88:05:C1:13:93:C8:AA:5B:7C:4C:5A
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ej-rBCJmnu-miAXBE5PIqlt8TFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:03:87:3e:89:b2:f7:d9:6e:ac:a4:ce:5d:22:68:94:9d:fd:
90:75:52:4a:e9:76:23:c6:3a:52:91:e9:1e:79:61:f8:ad:32:
4e:57:4e:08:7b:d3:0b:48:d0:95:2b:d1:5e:b7:4b:5d:0d:48:
7d:29:98:bc:20:ff:44:49:45:98:64:c7:60:51:97:6d:b2:ae:
0c:7d:51:d7:2f:ad:61:c1:68:25:b5:84:65:50:0a:7f:12:4d:
23:d8:40:3b:1c:4b:49:d0:b7:ec:53:b6:6e:28:90:3e:d1:25:
af:c5:26:f6:5e:ba:1c:76:44:f0:03:61:52:73:82:3d:bd:dd:
1c:86:ca:23:a7:f5:4b:11:6f:aa:3b:bf:ee:13:63:e3:12:06:
07:52:31:34:51:d0:74:f6:d6:1f:6c:24:cc:3a:e1:e7:26:ee:
43:45:93:c5:20:a8:64:0b:8e:6d:f0:79:ae:82:ef:85:d6:af:
a6:c6:72:dc:88:90:75:34:d6:66:e6:0b:47:a2:34:97:22:5a:
62:ef:08:cf:80:58:ba:b5:62:93:70:7a:07:56:3b:1e:5b:92:
cb:d7:c0:93:56:2b:f8:34:0b:93:01:18:8f:d3:76:db:97:7f:
d1:a2:45:59:e0:3f:1a:51:a2:14:25:70:02:67:b7:4b:1a:7b:
be:9f:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:45 2025 by rpki-client