Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8fszvXgc3hkM6G-O_Hv7prXlClQ.roa
File: 8fszvXgc3hkM6G-O_Hv7prXlClQ.roa (raw, json)
Hash identifier: K/gflkNN7BSL1Jcb9FWsBq2tbBZ514AEGYjpfIWp+1o=
Subject key identifier: F1:FB:33:BD:78:1C:DE:19:0C:E8:6F:8E:FC:7B:FB:A6:B5:E5:0A:54
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BFFD2CC3C7E0CA54AC628DA8C6CDC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8fszvXgc3hkM6G-O_Hv7prXlClQ.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210910
IP address blocks: 77.65.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:d2:cc:3c:7e:0c:a5:4a:c6:28:da:8c:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1fb33bd781cde190ce86f8efc7bfba6b5e50a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:61:ba:66:a7:8c:da:4d:59:4f:1b:dd:83:
3e:34:89:2f:bb:c0:52:0a:72:64:99:8b:8a:c8:e2:
87:12:40:eb:4d:cd:71:c0:67:63:56:90:a2:c0:be:
5e:d0:0c:83:53:3f:ec:0f:4d:40:fd:b3:54:1e:46:
40:a0:83:dc:1c:c9:de:5b:a2:df:01:6d:5a:fe:cf:
d5:82:7d:b6:7c:16:a6:46:6d:05:68:c2:71:e7:0c:
57:15:a0:a2:a5:e6:1f:f0:6e:09:a4:a5:df:9e:ae:
ea:9a:7d:c4:da:65:0d:35:a9:20:6f:b3:37:a9:59:
c6:c1:23:bb:50:1d:d6:99:9e:94:6e:9d:2b:17:f5:
ef:a6:6c:67:6a:f2:e4:9a:b8:46:b6:00:cb:fb:ef:
34:57:21:52:6c:31:7d:63:ca:0e:c6:e2:db:4e:94:
72:14:0c:b4:6d:d6:00:c5:81:31:ce:5e:6f:ec:dc:
76:12:a6:2d:f8:83:3a:47:89:11:51:63:fb:9d:77:
29:bd:27:63:bc:79:28:f1:91:c4:18:25:e6:22:89:
e4:c0:a5:a3:dc:91:b8:d6:0a:7a:54:1d:29:54:d7:
58:c5:96:83:03:04:55:8c:7b:85:f0:f1:ec:f2:c2:
aa:e3:46:23:a3:9b:09:d6:76:aa:27:65:42:41:3e:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:33:BD:78:1C:DE:19:0C:E8:6F:8E:FC:7B:FB:A6:B5:E5:0A:54
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8fszvXgc3hkM6G-O_Hv7prXlClQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:64:8a:f6:69:4b:1a:6f:fd:b2:92:07:57:93:e9:a9:55:73:
bf:9e:ac:86:c4:bf:f6:0d:99:2f:20:62:bd:41:08:e2:ed:dc:
f2:c9:32:34:de:11:2f:cb:5d:aa:ea:94:81:ca:4a:72:bd:c3:
c2:5e:b3:7f:d5:7d:69:11:ed:f3:f0:b5:7d:0c:ef:9f:e7:66:
dc:a4:f9:e3:57:2a:67:23:92:15:60:d9:e1:76:51:82:00:5a:
74:0e:2e:41:b5:5d:0f:22:98:e6:7f:ab:bf:64:ea:d2:7c:c4:
1e:9c:7e:d5:79:1a:a1:99:c9:6d:01:35:4a:2c:b5:c4:3c:31:
96:fa:c4:98:8f:9a:4f:68:8b:07:50:2a:f4:1f:6d:ee:f6:d8:
f2:c6:47:28:2c:c9:21:02:ec:ad:96:ce:fc:ba:11:81:4e:1b:
5c:d0:ed:17:a9:e0:18:28:4a:ac:c6:ed:41:49:25:0e:5e:9d:
17:85:32:19:da:2d:64:7f:25:02:82:d6:0d:fa:36:c5:ce:e7:
8e:72:c6:0b:8f:2a:64:b9:4c:63:13:c1:2d:24:93:c7:a4:0a:
58:81:9f:a3:08:88:99:ce:ae:ef:d8:5e:7e:d2:66:5e:7e:5e:
e4:20:24:65:ed:13:21:6b:2f:1b:30:c7:00:55:59:4c:db:9f:
37:a5:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:45:11 2025 by rpki-client