Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa
File: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (raw, json)
Hash identifier: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=
Subject key identifier: B6:BC:A2:26:CA:FF:D4:2E:96:97:A9:66:57:AF:DF:47:1B:FD:26:95
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019428270ABF8502561A301F2D260B6AC73E
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa
Signing time: Thu 02 Jan 2025 17:53:54 +0000
ROA not before: Thu 02 Jan 2025 17:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 77.91.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0a:bf:85:02:56:1a:30:1f:2d:26:0b:6a:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6bca226caffd42e9697a96657afdf471bfd2695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:a0:73:da:00:f3:1d:12:ef:ef:63:f3:f4:
32:36:5b:48:cb:7a:8a:7f:5c:67:06:75:e0:b3:41:
5b:32:19:66:8d:53:13:d0:06:15:fd:d9:f4:c0:9b:
e0:40:3e:e0:78:87:18:f6:64:2a:f8:8e:18:d7:13:
b7:95:19:de:71:ec:09:65:67:47:4c:34:09:4e:98:
d7:02:82:6e:0e:f7:f6:17:fa:48:81:2a:3d:d6:3e:
fd:2f:e3:70:fd:43:69:60:5c:0a:24:a9:43:8f:fa:
91:f1:e0:b8:9d:d7:c4:fa:f5:37:45:d3:0c:79:87:
cb:12:05:86:9b:8c:75:15:d7:78:69:aa:5d:06:70:
5c:19:02:41:08:94:26:10:b4:1c:e6:ff:35:c8:d8:
20:a5:3e:19:3b:07:1d:7e:97:44:58:82:94:c7:ec:
54:fb:01:5a:47:00:79:9f:f5:df:97:c4:e4:3a:9a:
a7:77:14:4d:ed:15:64:ef:ec:a9:c5:17:ae:3e:6d:
c0:97:ca:c3:5a:ec:82:7f:e6:9b:c9:f0:80:3d:8b:
42:98:cf:6b:35:e7:ef:cb:da:a8:6e:b4:d8:86:46:
d8:0b:cb:32:6f:fd:56:a9:e6:7b:4f:75:2f:a9:04:
39:63:9d:11:75:47:45:2f:9c:52:22:36:50:5a:0a:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:A2:26:CA:FF:D4:2E:96:97:A9:66:57:AF:DF:47:1B:FD:26:95
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.76.0/24
Signature Algorithm: sha256WithRSAEncryption
47:02:fd:a1:f2:16:40:c3:ea:23:58:b7:13:7b:e2:2b:7b:d2:
6d:f9:09:5e:54:eb:86:8b:ee:55:b5:68:02:fd:4b:40:09:a1:
1d:42:c2:73:28:30:0e:30:d1:36:0f:9d:c7:51:69:fc:ab:8e:
dc:40:40:3e:ab:e1:21:9b:82:68:4c:99:39:39:66:bc:bc:98:
c7:72:ba:41:08:f4:70:6f:03:65:3c:08:4b:1e:1d:4d:c9:3a:
34:f3:e2:c5:4d:4c:36:0a:68:5b:7b:c4:ed:22:15:96:60:e3:
6f:36:e0:ae:cf:77:92:4a:f3:31:2b:17:69:d4:f1:f0:5d:a7:
9d:44:e0:eb:ec:0e:5a:fa:56:27:92:9a:54:ca:ac:26:91:ba:
46:e1:c3:91:9f:2d:62:08:80:55:ca:7d:ff:8f:e8:87:f9:da:
32:e3:2c:0d:2e:82:32:66:04:63:e5:fa:78:bd:9c:cb:7b:84:
63:8a:d0:98:39:20:3c:87:c0:71:93:25:7e:23:90:0c:cf:34:
dc:1d:47:d4:22:57:b3:fe:8f:92:f4:7a:d1:02:12:25:55:50:
53:6a:1d:0b:26:3d:0d:ae:5f:f9:6e:44:d8:b6:ab:07:2a:46:
36:35:9d:15:de:ba:ca:e3:17:16:39:13:b1:ff:58:66:7f:f7:
53:eb:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:11 2025 by rpki-client