Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/tsEv1qVQHykcMReMnSxiv4bgVCQ.roa
File: tsEv1qVQHykcMReMnSxiv4bgVCQ.roa (raw, json)
Hash identifier: OI4f+7xY0kZYXGjjR9gMRShWIXb9+DNc4VhZ+Jq0GH4=
Subject key identifier: B6:C1:2F:D6:A5:50:1F:29:1C:31:17:8C:9D:2C:62:BF:86:E0:54:24
Certificate issuer: /CN=5a0161461fffe43e9f8af1a7d16c11809f301d74
Certificate serial: 01896478F08D4AFFB13746A79A0A5F8862C2
Authority key identifier: 5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/tsEv1qVQHykcMReMnSxiv4bgVCQ.roa
Signing time: Mon 17 Jul 2023 15:29:54 +0000
ROA not before: Mon 17 Jul 2023 15:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 77.246.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:f0:8d:4a:ff:b1:37:46:a7:9a:0a:5f:88:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0161461fffe43e9f8af1a7d16c11809f301d74
Validity
Not Before: Jul 17 15:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6c12fd6a5501f291c31178c9d2c62bf86e05424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:6b:4d:3d:b5:6c:13:13:0e:1b:2f:49:e6:
09:4d:b3:79:e4:91:90:0d:4f:57:50:53:2a:46:77:
4d:8d:ef:18:4a:68:9d:b3:f3:a4:2e:05:2b:ea:be:
94:5e:c5:b8:c6:8d:54:f2:e2:b9:00:40:4d:1f:79:
fb:35:06:7e:c1:26:19:79:38:6a:6e:9b:11:da:59:
66:bc:97:81:5e:64:f8:df:6f:33:38:43:03:92:9e:
3c:8a:02:a8:e3:d7:db:37:2e:43:e2:82:50:63:2d:
d8:94:b9:5a:aa:54:cf:0b:9d:19:73:04:6d:55:4c:
42:77:6a:b7:72:68:6c:c2:c2:d5:1f:c1:07:ac:9e:
b6:05:27:03:cc:a6:ee:46:ea:18:b3:81:fb:da:20:
b8:a6:2d:e9:8b:99:ab:0f:b5:c5:eb:65:2a:76:77:
c8:8d:43:54:72:b4:3d:39:08:31:fd:5e:c4:2b:7b:
47:39:66:a3:24:01:7c:a7:49:04:9d:a1:be:a2:86:
4e:5b:74:d6:03:75:1d:87:24:e1:2e:7f:f5:1f:0d:
a1:26:99:8a:ee:b7:25:34:18:74:23:69:c4:cc:f9:
b5:64:e6:9c:df:c2:f9:54:e5:cf:f1:e0:8a:30:a8:
6d:e3:7b:f9:ce:b5:31:66:d9:57:d2:12:30:d8:ba:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:2F:D6:A5:50:1F:29:1C:31:17:8C:9D:2C:62:BF:86:E0:54:24
X509v3 Authority Key Identifier:
keyid:5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/tsEv1qVQHykcMReMnSxiv4bgVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:7b:86:47:ed:f5:1a:95:73:f0:df:59:52:fd:9a:89:d2:
f3:e3:15:16:26:4e:7c:83:a7:34:89:2f:a5:ba:4b:33:18:21:
c5:b4:3d:07:99:94:27:5a:eb:d8:91:dd:89:b1:79:be:45:64:
e4:c4:97:86:98:d5:e0:27:61:e7:c1:60:6f:13:72:15:75:81:
50:65:da:aa:bb:af:0c:f7:b0:84:c4:04:d2:61:17:9a:76:a1:
d9:89:13:52:0c:e3:e3:e7:2a:84:50:c3:69:08:c3:14:df:65:
ed:44:18:e1:9b:a0:59:72:ec:a5:4b:7d:1a:b2:3a:37:ef:2e:
16:84:52:00:8c:54:11:4d:39:e6:b1:13:14:25:40:7a:2f:54:
a5:37:e5:b1:15:e6:1a:7a:b2:c4:dc:f4:af:c4:21:14:ab:77:
f5:8d:39:90:de:b5:3c:ae:ef:b4:d9:e2:bb:b2:d3:c8:cc:70:
3f:d4:9c:ad:37:d6:06:61:fd:49:7f:6b:a3:42:84:b4:62:12:
5a:2d:cc:9c:f0:33:51:db:88:37:35:df:2b:86:f6:13:ce:09:
bd:05:a8:93:cc:71:b3:92:e8:5c:eb:dc:dd:dd:a9:e0:4a:36:
2b:d7:c6:f3:80:3f:db:64:9c:fe:12:62:a6:90:6a:72:03:cc:
b8:7f:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:24:32 2025 by rpki-client