Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H05bxxYxtoijKcQ7lhpPPlR8JdU.roa
File: H05bxxYxtoijKcQ7lhpPPlR8JdU.roa (raw, json)
Hash identifier: v4GsRYWU+dWPTkFjL7lY7n7wJBqCf67cIpnIDarcBUA=
Subject key identifier: 1F:4E:5B:C7:16:31:B6:88:A3:29:C4:3B:96:1A:4F:3E:54:7C:25:D5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F80A4A42DD331EC63DEA45DB82AD2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H05bxxYxtoijKcQ7lhpPPlR8JdU.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 77.47.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:80:a4:a4:2d:d3:31:ec:63:de:a4:5d:b8:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4e5bc71631b688a329c43b961a4f3e547c25d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:10:1d:82:e3:fa:f9:20:fe:ab:c4:d5:ec:
26:1d:00:6b:13:93:2c:d5:5f:af:74:aa:41:ce:e8:
cb:ce:e2:59:ef:8e:e4:17:e8:28:ab:95:ee:f4:a6:
88:64:29:75:69:6b:75:e9:48:65:76:10:19:8e:84:
ab:ad:7b:7d:fb:48:29:e7:6f:a6:1c:cc:ff:2a:51:
73:82:f5:e0:6e:64:0e:ab:63:58:d6:84:bb:32:5e:
de:ee:76:54:e2:81:c6:b5:d1:02:c2:6e:f8:4a:76:
37:f1:1f:91:91:52:64:24:be:78:8f:7f:80:5a:fe:
9a:e5:0d:4e:ef:6f:9b:a2:b4:ec:3e:12:9a:03:4e:
3e:a4:41:6a:ff:25:e5:81:ba:04:7c:a8:65:50:fd:
3e:9b:b4:f1:1f:0e:e1:3b:45:fc:bf:0a:3c:0b:f0:
74:a1:91:59:f6:d6:df:7a:84:7d:12:4d:01:3e:be:
7e:e6:53:00:1d:00:7c:8b:df:1d:17:85:8d:d7:f7:
d5:b8:03:c4:f4:ed:aa:0f:63:2a:64:f3:cc:0c:06:
bc:a1:e9:47:3b:dd:bd:f1:56:64:be:b4:e5:bf:bd:
ee:0d:ea:63:00:15:91:42:5a:b7:9b:0b:35:2e:e0:
19:f1:df:9a:1c:fb:8c:50:a5:d8:ac:f3:e7:f0:8f:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4E:5B:C7:16:31:B6:88:A3:29:C4:3B:96:1A:4F:3E:54:7C:25:D5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H05bxxYxtoijKcQ7lhpPPlR8JdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
20:26:93:07:30:2b:ec:11:9f:a4:00:89:e7:8f:5d:e4:81:c2:
e4:b9:c0:d8:13:30:2b:58:cf:f2:3b:e5:02:af:07:ee:a0:08:
ca:96:d4:6a:30:da:f8:9c:1b:f8:77:16:75:34:cf:4e:6f:ef:
84:05:7a:d6:07:24:e6:68:82:44:34:7a:b2:cc:ac:ff:1f:60:
6e:70:08:4c:8a:f1:ee:24:93:d4:91:88:fb:8e:9d:b3:70:c5:
f3:0f:e0:18:f3:d2:0a:74:57:9d:78:00:24:55:a3:88:90:ba:
7c:98:f7:a6:d6:9c:67:ff:e1:86:a6:ad:aa:ea:b8:a5:87:56:
b1:7f:f9:2a:dc:3e:8c:d5:4b:13:85:e0:de:57:24:6b:20:9b:
56:dd:0a:aa:7c:89:26:a8:51:54:48:36:c0:6c:65:11:b9:d0:
50:b3:63:a9:3f:00:6f:90:13:a7:ef:6c:55:6b:e1:cc:78:2f:
ac:88:34:d0:0e:82:5a:eb:81:38:10:30:70:f5:14:e2:dd:27:
0f:9f:4e:e2:8d:b8:30:24:46:54:b8:95:52:b6:49:f1:06:88:
5a:48:51:8f:c8:d8:54:de:6e:8e:8b:72:dc:72:57:de:ff:20:
4a:b1:61:15:2d:fc:50:79:52:ab:16:ac:c5:c5:46:65:8e:f5:
8a:c4:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:33 2025 by rpki-client