Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8EqsHhZ3IAk2yM4Lq4kB4MbcpA.roa
File: J8EqsHhZ3IAk2yM4Lq4kB4MbcpA.roa (raw, json)
Hash identifier: lA0nS4whHkMbXoK6PPwY+6zb+DO/dMArf4jMhuM5/tU=
Subject key identifier: 27:C1:2A:B0:78:59:DC:80:24:DB:23:38:2E:AE:24:07:83:1B:72:90
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF9E855FD9153B5CA767920D82C4E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8EqsHhZ3IAk2yM4Lq4kB4MbcpA.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209066
IP address blocks: 77.65.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f9:e8:55:fd:91:53:b5:ca:76:79:20:d8:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c12ab07859dc8024db23382eae2407831b7290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:69:42:15:4a:f8:ac:d2:10:4d:72:15:93:
f9:3f:bb:a9:de:0c:03:ee:73:21:cb:ae:de:f1:f8:
66:f0:3c:b8:4d:06:6b:c3:3a:98:25:e1:7a:9c:31:
94:2c:a5:d6:a3:a6:24:5a:35:c1:b2:c7:83:2a:82:
55:ac:42:e7:4a:cf:e4:33:76:ca:c9:f7:1e:cb:15:
a8:51:41:7b:4c:78:41:a8:5e:30:ff:92:a5:9a:9a:
44:de:12:74:b4:76:4a:b6:88:3c:3e:c2:67:4b:1f:
80:5e:50:97:bc:0b:cf:5a:65:93:a0:0c:a8:3f:3d:
f4:4d:79:25:6a:5d:e9:08:11:51:dd:ae:89:e3:31:
10:ca:e5:c3:35:77:fc:1c:f5:a6:ae:e5:1a:eb:00:
d4:47:66:27:6b:78:0e:52:c6:5e:bc:96:dc:d2:e7:
b2:7d:18:92:6b:1d:59:6d:7f:3b:62:2b:71:f5:66:
a4:8e:f7:27:a1:17:84:6c:b6:a3:ab:d7:5f:43:0b:
60:ed:0e:4a:07:4c:ff:a5:d0:37:b9:d7:84:78:29:
5a:6c:88:7b:6a:cc:03:91:4d:e8:67:da:42:81:dd:
f9:94:d0:f8:95:1e:f4:d6:89:dc:30:93:b1:87:f5:
46:39:a7:bf:8c:44:b5:5c:13:4b:83:4d:08:57:3d:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:2A:B0:78:59:DC:80:24:DB:23:38:2E:AE:24:07:83:1B:72:90
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8EqsHhZ3IAk2yM4Lq4kB4MbcpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:93:54:10:26:3c:ce:13:f4:b4:d6:99:75:0b:24:59:e8:00:
a1:ee:84:38:0f:ed:04:da:00:a6:f2:39:f8:7a:28:66:f6:85:
1e:b5:f2:c8:c3:86:45:b6:eb:0d:f3:21:8e:e4:3e:9b:46:07:
0c:c0:e4:12:a7:31:61:7a:d2:a3:d6:8d:f3:f7:f6:26:7d:6b:
58:90:07:b1:ed:e6:75:0b:2a:11:62:0f:e4:cd:b8:a8:2f:58:
00:43:b4:68:ee:c6:2a:e5:2a:4d:2a:92:06:ea:39:ec:56:57:
a4:79:63:86:95:58:07:54:26:47:45:30:f6:57:06:f3:96:76:
f4:a4:da:a3:ca:79:02:94:53:6e:73:bc:f8:85:50:1d:82:15:
ba:eb:a5:e7:b6:f7:64:07:6f:0f:74:97:30:a4:ec:8b:99:cf:
35:f2:1a:22:21:90:74:f0:22:75:75:4a:4c:58:f8:ee:76:5f:
6d:91:4d:2d:06:cd:95:a2:0d:a8:06:6f:4c:23:72:43:99:79:
56:ab:b7:34:36:b3:3d:fc:29:02:5b:e6:ff:76:08:9f:26:30:
64:d0:4c:ef:4b:74:0a:12:b9:f5:f2:56:0c:9e:15:8d:09:79:
7a:ab:98:4c:f9:c0:46:13:17:5f:12:a5:2f:be:cb:29:d5:6b:
06:8c:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:59 2025 by rpki-client