Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/LPXBlOJ83SUZetduCUkP3lDmZb8.roa
File: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (raw, json)
Hash identifier: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=
Subject key identifier: 2C:F5:C1:94:E2:7C:DD:25:19:7A:D7:6E:09:49:0F:DE:50:E6:65:BF
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458A08736AD1B7EB1C9A84A6E20F8C
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/LPXBlOJ83SUZetduCUkP3lDmZb8.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50983
IP address blocks: 77.93.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8a:08:73:6a:d1:b7:eb:1c:9a:84:a6:e2:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf5c194e27cdd25197ad76e09490fde50e665bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:1e:8c:4d:a1:32:65:cf:46:84:63:34:b1:
74:e7:c0:a6:ce:98:73:58:2c:bb:a2:8e:d9:e3:c1:
b4:23:87:5b:71:01:c1:62:be:58:6b:e2:ea:80:fe:
cc:9e:e8:5e:a2:68:e3:a5:72:cd:66:84:8e:97:07:
60:d1:d1:2f:a9:de:54:6e:16:92:f8:b4:2e:82:ed:
b2:79:d0:81:39:6f:c0:38:02:12:03:38:4d:fe:0c:
db:2a:43:78:83:d5:ee:6a:bc:bc:f6:da:fd:62:48:
25:10:3e:c6:c8:14:97:74:30:36:92:55:f6:0e:ac:
b4:b3:6f:e3:e5:06:38:32:1a:c5:c7:60:e0:9b:ec:
83:55:0d:24:72:09:5d:84:f1:3c:83:b6:17:1f:f5:
53:fc:33:38:b0:4f:08:79:c2:95:47:3e:1f:5e:44:
98:a1:19:63:23:4c:bd:71:dd:02:c9:cb:c5:63:fb:
2a:97:75:e9:d3:60:0f:d4:a2:c6:9e:53:bd:c9:70:
9e:26:ee:12:73:27:4a:21:e4:97:53:d6:19:df:29:
60:4b:5f:8c:77:1c:60:28:5e:fd:72:dc:f6:f7:53:
62:47:99:cc:b0:39:2e:bc:3b:3a:2c:0f:75:c1:0a:
ce:f7:bf:db:7f:f8:3e:b6:85:19:09:d3:de:bf:f0:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F5:C1:94:E2:7C:DD:25:19:7A:D7:6E:09:49:0F:DE:50:E6:65:BF
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/LPXBlOJ83SUZetduCUkP3lDmZb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:a1:cc:62:b9:40:86:53:50:08:17:c0:4c:de:7d:3d:31:77:
ca:79:c6:f1:a6:7c:71:94:07:3b:8c:bd:6c:ce:df:38:a6:89:
3b:56:d9:71:6a:52:f3:9a:41:2d:5e:bb:7b:47:54:04:32:84:
0d:ca:ba:18:d0:5a:c9:7e:e6:80:41:03:28:b5:a1:35:18:b7:
3e:b6:8c:2f:c9:e3:8a:f0:a1:c7:85:b6:3e:e1:ec:8b:77:3d:
4c:6b:24:9b:76:29:5e:ed:19:cf:2a:37:a3:4c:56:69:87:70:
6c:d8:da:c4:e1:5e:29:48:df:94:9a:0c:22:56:47:35:16:71:
ac:ef:8c:4a:16:a3:a2:11:b1:10:db:dc:93:4d:1d:b9:58:0e:
01:a3:77:7d:4e:2d:ad:e8:d0:3c:2d:66:b9:d9:cd:4e:25:69:
c6:26:98:e8:21:ad:f8:8c:34:16:da:4f:cc:b6:78:f1:ea:12:
a3:22:2e:da:e1:03:33:92:a7:d5:fe:73:c7:c1:9a:1f:84:b7:
bb:1e:84:39:c1:81:68:34:12:e2:90:21:e8:3c:cc:01:38:a1:
d1:f2:e5:b5:d2:1c:f5:92:34:fa:1f:15:9e:60:e6:15:23:b7:
27:f0:b1:00:11:6b:7d:64:b8:9e:ea:18:f4:0c:07:a0:27:16:
aa:7f:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:22 2025 by rpki-client