Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/At_RKOo0LdCiweKWuc79eYgeSgU.roa
File: At_RKOo0LdCiweKWuc79eYgeSgU.roa (raw, json)
Hash identifier: FlxRTM+tnEybyVccyExiwk929zNyzvg+GBOegmxm1Wo=
Subject key identifier: 02:DF:D1:28:EA:34:2D:D0:A2:C1:E2:96:B9:CE:FD:79:88:1E:4A:05
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0193B5A532E76C97CDD69FD9D64C9A496AAD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/At_RKOo0LdCiweKWuc79eYgeSgU.roa
Signing time: Wed 11 Dec 2024 12:15:22 +0000
ROA not before: Wed 11 Dec 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:a5:32:e7:6c:97:cd:d6:9f:d9:d6:4c:9a:49:6a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Dec 11 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02dfd128ea342dd0a2c1e296b9cefd79881e4a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:53:f4:71:a5:17:59:73:92:bd:45:31:03:
4f:55:0a:8a:65:31:52:76:37:e5:d2:2c:ee:16:39:
65:8d:21:9d:c0:b8:66:f7:19:f6:39:b1:62:66:15:
fb:76:73:7a:75:e4:53:dc:cf:bc:8a:da:58:3c:20:
91:38:58:ea:8b:be:a8:b0:e1:b9:38:88:08:9f:31:
42:66:c9:e4:fc:56:a3:37:cc:be:d4:4f:d8:03:0f:
df:d8:ca:4a:08:75:92:6f:b9:9c:4d:dc:af:4f:2d:
fc:d1:3f:a5:de:37:19:95:3c:67:95:44:e7:3e:55:
02:1f:3c:65:f0:2d:6e:8b:9b:36:62:27:60:d1:c3:
26:af:bc:71:15:7a:14:79:38:4a:e1:0e:2a:b4:3f:
ce:81:88:42:df:89:eb:a3:30:e9:3c:da:82:3f:7b:
15:21:4a:a0:bf:1f:6d:8a:71:ea:48:b0:03:47:72:
b8:d6:75:9c:be:fc:fe:99:a6:76:84:f4:f3:d3:a8:
ad:a1:4b:a3:ea:83:25:34:62:49:c6:bc:50:b8:ca:
a2:41:48:db:ab:f6:4c:a1:b7:56:2d:b2:85:0c:8f:
71:1c:de:7e:c0:7e:9b:36:80:92:0d:d0:4b:96:24:
9f:a3:11:2b:3e:68:e8:3a:a6:bc:61:37:bb:30:50:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:D1:28:EA:34:2D:D0:A2:C1:E2:96:B9:CE:FD:79:88:1E:4A:05
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/At_RKOo0LdCiweKWuc79eYgeSgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7d:aa:c5:04:06:da:e0:44:10:93:9d:fa:2a:35:65:19:03:
69:95:3d:f0:01:c5:3f:df:57:a1:5e:5f:5c:57:7b:31:fb:98:
f3:b5:11:7c:7f:72:09:31:10:88:4b:07:46:ac:2e:c5:14:0f:
de:1c:cb:71:7b:d8:2c:79:42:bf:3a:bb:cf:cc:de:ad:7c:2a:
8a:ba:48:9b:f7:4d:b0:e9:af:cc:e4:f9:b7:bb:a1:9c:56:bb:
b2:ec:bb:dd:51:38:b9:ca:ec:81:26:f9:db:22:14:ff:71:d4:
fa:09:e0:4e:4e:86:2c:54:90:bb:cd:af:dd:20:c0:44:9d:63:
e4:7c:bc:f4:8a:52:1d:0b:52:8e:25:47:44:56:89:00:ad:e5:
eb:ed:30:5c:15:10:48:61:e2:de:74:0b:ee:31:e4:30:d4:3f:
21:a0:62:a4:81:60:d4:80:e4:88:62:e8:83:a6:8b:41:2d:31:
ee:1b:d3:a7:b1:e0:a9:05:84:20:39:04:9f:c3:03:3e:44:c3:
99:c3:50:aa:c0:a6:ab:01:7f:45:db:df:cb:8f:fb:49:d6:29:
04:1e:a4:03:da:a2:db:fa:ac:8e:3b:dc:7b:c9:ee:a6:26:bd:
4c:d2:b8:dc:e7:1b:f2:cc:7d:67:f9:76:24:51:85:ee:e1:b2:
73:93:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:46 2025 by rpki-client