Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa
File: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (raw, json)
Hash identifier: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=
Subject key identifier: 6F:D5:5D:3E:90:DD:04:D7:1D:8F:D0:07:22:B2:19:CD:2C:3A:B9:F2
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01942827068FCF68DF3461178EABB943E036
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198981
IP address blocks: 77.91.66.0/24 maxlen: 24
91.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:06:8f:cf:68:df:34:61:17:8e:ab:b9:43:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd55d3e90dd04d71d8fd00722b219cd2c3ab9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:75:e7:78:c0:c6:1b:3d:df:78:e1:da:c7:
de:e3:9c:ae:8a:aa:c5:e5:8b:19:df:3a:44:8d:b9:
fd:2e:76:6d:ce:5d:54:ef:90:46:d6:e3:e7:05:3b:
55:3f:08:77:64:9e:3c:51:30:df:77:bb:6e:5d:80:
61:d7:f7:15:56:a1:78:9a:4f:c4:76:b9:da:35:da:
ca:f4:32:fb:19:3f:20:4b:84:a5:51:ba:be:f5:05:
4c:e0:ad:42:fa:6c:52:8d:fb:ab:af:82:3d:b4:3a:
23:d6:cf:4a:56:3f:df:2d:ae:3c:09:4e:12:48:75:
4e:18:4c:af:fe:36:dd:c7:02:97:12:7c:3d:cf:c1:
e1:8b:52:22:29:52:b4:b8:0e:49:cc:e5:c0:b6:55:
2b:f7:f9:97:0b:47:24:19:a5:4c:1d:ac:31:ec:6f:
9a:a4:12:58:23:46:8d:b5:c3:0d:df:b1:aa:7f:38:
a1:22:8c:7e:cf:38:ef:d9:55:bf:12:70:e0:bb:54:
b5:3e:db:9b:09:35:99:c2:19:a0:d3:b8:78:97:ce:
29:a5:8d:e9:d1:74:9d:8b:49:05:bb:e4:db:3b:d9:
d7:72:a9:0b:1d:f0:45:d2:ee:cc:1b:41:7a:2e:8b:
6d:79:f3:0a:0c:a2:39:76:0f:36:72:31:0d:fa:c2:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:5D:3E:90:DD:04:D7:1D:8F:D0:07:22:B2:19:CD:2C:3A:B9:F2
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.66.0/24
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bc:46:1c:e6:44:88:5c:a2:95:d3:95:b4:a2:75:b0:cc:94:
30:1e:96:cd:07:03:2e:6c:b2:8d:46:7b:05:2f:9c:7d:16:02:
f7:51:57:c1:f2:76:26:66:a5:c5:fa:2e:93:50:70:3d:39:1f:
e6:2d:a4:cf:00:ce:d6:a4:32:a2:e7:66:c4:44:1d:f4:74:34:
e1:77:8e:15:66:6c:4e:42:94:5c:81:23:50:5a:79:ea:98:62:
e2:27:57:ae:d7:18:c3:b1:2f:cb:8b:37:97:b4:cd:d2:e3:80:
43:3d:aa:86:7d:81:52:b3:5c:06:1f:53:45:ce:2d:6f:1c:18:
c8:81:df:ba:3b:26:e8:f6:87:9d:92:0e:2d:8f:e0:54:0d:ea:
e3:72:f2:b5:ef:3b:68:52:a2:cd:2b:2e:4e:72:7a:53:4b:1f:
de:a9:7d:79:84:0c:50:fd:36:f0:34:2e:aa:00:3a:48:11:b7:
0b:cd:b4:7d:db:07:a3:8a:b1:97:77:74:d7:6a:07:d0:e4:f5:
96:59:7f:34:1a:92:b8:6e:03:96:f7:aa:03:3c:52:96:ed:0c:
9d:4b:72:34:af:6b:13:e9:76:a0:07:1e:7e:17:eb:e5:f2:9e:
2f:63:1b:6d:9e:0a:99:4a:d8:15:e4:5f:e9:1d:97:f1:11:00:
80:be:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:53 2025 by rpki-client