Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ss1inrdWtMpncmfrIQdK4BAYXXw.roa
File: Ss1inrdWtMpncmfrIQdK4BAYXXw.roa (raw, json)
Hash identifier: gOu2HhXQT6vEkTgLBX7fJhn1BlZxwwpBI9gYBWVGcj0=
Subject key identifier: 4A:CD:62:9E:B7:56:B4:CA:67:72:67:EB:21:07:4A:E0:10:18:5D:7C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0193B6EB208263912E978B0E1E928CB00593
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ss1inrdWtMpncmfrIQdK4BAYXXw.roa
Signing time: Wed 11 Dec 2024 18:11:22 +0000
ROA not before: Wed 11 Dec 2024 18:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:eb:20:82:63:91:2e:97:8b:0e:1e:92:8c:b0:05:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Dec 11 18:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4acd629eb756b4ca677267eb21074ae010185d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:d0:6d:84:47:db:8d:af:e7:52:93:2f:e8:
62:ec:5c:36:03:6d:66:04:b9:87:ac:71:08:67:ca:
44:61:53:89:0a:92:44:d1:d1:35:95:5e:17:4d:c4:
23:48:a7:08:d9:5d:21:1b:5c:03:06:84:64:95:13:
2e:09:23:20:85:d4:45:17:d6:09:7a:16:13:8f:aa:
18:ef:24:04:46:4c:db:48:1a:63:c6:3a:16:6d:25:
a4:16:a0:1d:1a:a4:bd:10:05:84:2f:ff:d1:c4:a7:
97:48:b8:ea:81:60:72:3a:19:25:6d:e0:e3:b2:c4:
42:96:0d:09:37:16:fc:de:d7:26:52:4b:4e:da:f0:
fb:c9:79:b4:64:0b:9e:d2:b1:80:58:a0:20:15:7d:
1f:10:34:93:ed:44:ae:9c:e8:11:c0:78:e8:3d:b4:
b1:01:7a:bd:b7:fd:41:22:42:cf:92:7f:12:6d:b1:
40:b7:0f:fd:b6:37:b4:68:fe:0b:d6:2e:d7:da:e0:
97:bb:29:05:03:0c:2c:d9:02:18:94:fd:a8:41:af:
34:af:29:1a:8a:90:c9:42:d3:1f:44:96:1f:58:f1:
4b:9f:c7:7a:62:9a:c5:4e:72:3e:a6:6a:4b:f7:95:
e4:cd:76:df:d5:77:2c:5e:1b:33:1b:cc:d1:d9:d7:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:62:9E:B7:56:B4:CA:67:72:67:EB:21:07:4A:E0:10:18:5D:7C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ss1inrdWtMpncmfrIQdK4BAYXXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
195.178.148.0/23
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:82:3e:f7:c0:d7:00:18:98:d4:91:aa:da:09:9c:06:4d:95:
61:51:b1:4e:57:67:d3:54:84:98:6d:d7:4e:e9:d4:9a:3d:69:
4d:35:5a:fe:9d:b1:98:70:9a:a3:9f:e7:f6:01:0c:ff:54:21:
d5:47:44:fa:58:be:28:7a:43:67:c4:6b:1b:05:06:76:fb:8f:
0d:9b:71:d2:d9:bd:8f:dd:8e:74:90:5d:b4:e9:66:78:82:d5:
9d:4c:01:93:70:15:60:45:85:c3:d7:48:ff:bc:3c:27:ae:b6:
55:ff:4e:c1:4f:a7:6e:90:86:89:c1:04:68:2e:bc:a5:56:89:
ed:24:5e:b4:de:f0:fa:b9:78:b7:96:07:53:a6:6f:83:11:f1:
66:2d:5f:ee:29:5b:66:73:7f:78:b0:e3:ba:1e:7e:e4:8d:94:
57:85:c9:76:73:52:1f:69:77:09:ab:9e:24:01:8f:78:ba:5e:
8c:72:58:6a:81:85:74:57:d4:e8:63:3d:71:38:8d:af:eb:9a:
ea:d4:77:71:49:21:7b:2b:83:92:1a:b9:48:53:69:f2:70:d9:
45:a5:b1:3f:68:c5:24:48:62:7e:42:91:57:ae:bc:84:09:c2:
cb:83:cc:01:f5:ef:bc:7b:ad:71:93:2a:29:7f:6c:ae:5e:8d:
ff:e5:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:11 2025 by rpki-client