Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/J8OV6sWb08R90TMyBueJQSzBQfs.roa
File: J8OV6sWb08R90TMyBueJQSzBQfs.roa (raw, json)
Hash identifier: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=
Subject key identifier: 27:C3:95:EA:C5:9B:D3:C4:7D:D1:33:32:06:E7:89:41:2C:C1:41:FB
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01942827062AA2044A220083A56299515F09
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/J8OV6sWb08R90TMyBueJQSzBQfs.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 77.91.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:06:2a:a2:04:4a:22:00:83:a5:62:99:51:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c395eac59bd3c47dd1333206e789412cc141fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:c7:2f:b2:53:29:bc:96:fe:66:93:9d:72:
6a:f5:26:62:e2:83:90:f0:9b:f1:0f:af:5e:47:da:
b9:c6:b1:aa:10:48:fb:f6:e5:12:71:4d:99:ed:4f:
bb:67:0c:95:5b:41:ed:5c:62:ed:80:19:2c:9a:8a:
e9:a3:28:e7:cc:14:36:bc:e4:85:0f:a6:12:80:55:
1a:5d:99:9d:da:93:fe:a4:5d:36:0e:5f:fd:3d:23:
c4:8e:4a:99:ab:e3:07:90:0b:80:bd:ca:91:d2:30:
c8:9e:2a:bc:6b:13:81:26:57:13:2a:54:42:5c:72:
02:bd:f3:d1:7b:45:f0:53:f5:47:64:99:0d:c1:96:
ad:df:40:f7:73:65:e7:82:b3:fc:b7:0d:d4:03:23:
53:7a:e2:14:5f:d7:8d:5a:f0:11:87:2f:34:b6:34:
f3:db:65:01:77:61:29:5c:7c:eb:fd:51:83:fc:82:
0b:69:08:f7:32:78:c5:29:9a:4b:83:98:e9:77:8d:
6d:57:4b:93:61:1f:81:14:a5:ce:c7:70:50:eb:f5:
9d:b1:51:2c:5f:c6:38:db:6e:a4:1e:bb:33:8c:39:
61:9d:0f:87:b0:72:c6:43:e8:b1:49:0d:53:17:1b:
95:10:f0:51:2b:18:c9:de:3f:af:9f:d6:2a:62:51:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:95:EA:C5:9B:D3:C4:7D:D1:33:32:06:E7:89:41:2C:C1:41:FB
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/J8OV6sWb08R90TMyBueJQSzBQfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.68.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b4:e1:1e:77:b6:6f:46:e3:3b:85:f2:08:0e:cc:f5:ed:30:
55:65:5a:51:81:5c:08:b3:fe:41:7d:dd:28:04:94:c6:e7:24:
3f:6a:4d:b2:24:cd:cb:29:c8:cf:e6:ad:be:d5:b1:4b:af:c9:
78:11:84:9b:7d:92:37:44:1d:21:d1:44:07:49:21:17:96:cd:
f2:05:55:f9:64:b5:28:b9:81:08:f6:e7:02:2c:47:a6:96:d6:
fc:70:0d:1e:b2:ae:1c:1b:49:b2:d9:62:92:10:c4:f4:9d:41:
00:ab:af:e0:8f:31:31:25:ae:ad:e9:f8:03:cd:c3:1d:09:9a:
6b:78:b9:be:7e:fa:71:52:a0:a2:f9:ba:e4:2c:d4:07:5d:03:
eb:29:88:8e:a0:02:2b:8b:0b:52:20:73:89:56:0f:bd:59:ea:
6a:fb:0e:ed:8a:02:38:fc:55:9c:9c:19:ab:b5:f4:89:96:9f:
c0:6f:c3:a7:12:f1:76:c8:a8:15:16:b2:58:98:d4:87:5c:23:
84:35:61:0b:b9:b9:ef:57:93:d4:87:7e:9a:d6:c5:8b:4f:c0:
84:29:60:7b:1e:19:e8:1d:08:87:7f:75:38:b7:f3:ef:2b:35:
0c:50:f3:5b:f0:c5:62:54:fa:70:f4:39:0a:ca:46:b6:28:5a:
72:1b:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:12 2025 by rpki-client