Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0Qch0mPMOpv-llgfI0sY5M6GYOw.roa
File: 0Qch0mPMOpv-llgfI0sY5M6GYOw.roa (raw, json)
Hash identifier: qyhVEmRF4X3ri6jIrfTlb6YS1JUKTSo7DKJ6jRMDN1M=
Subject key identifier: D1:07:21:D2:63:CC:3A:9B:FE:96:58:1F:23:4B:18:E4:CE:86:60:EC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01944FABFD46DA59B835DB43BA92901DA6AB
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0Qch0mPMOpv-llgfI0sY5M6GYOw.roa
Signing time: Fri 10 Jan 2025 10:04:19 +0000
ROA not before: Fri 10 Jan 2025 10:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273192
IP address blocks: 201.77.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:ab:fd:46:da:59:b8:35:db:43:ba:92:90:1d:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 10 10:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10721d263cc3a9bfe96581f234b18e4ce8660ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:47:a9:b3:6b:dc:54:03:68:70:79:15:f1:
57:30:1c:6f:cc:37:0c:e7:00:22:d9:2d:9c:0b:08:
b6:a2:08:eb:2e:d9:73:bb:30:82:17:dc:b4:8b:4c:
f2:0d:95:ea:71:2e:9e:42:95:c6:d7:aa:76:2a:0e:
e0:69:46:66:23:da:d3:9f:9d:21:62:bb:27:65:67:
18:22:f7:37:fb:7d:2e:f7:4d:7d:f8:50:29:8b:01:
71:f8:d1:1f:36:11:81:15:13:31:02:b1:7d:15:43:
ef:c9:58:57:58:dc:1a:37:a6:88:42:dd:3f:ac:59:
86:c9:94:ca:08:4b:21:4a:ac:0f:79:eb:f2:26:d0:
67:34:1d:c3:28:af:aa:ab:15:63:fa:8a:6d:24:70:
d9:81:cf:df:a4:bb:da:b6:13:21:1b:b9:b4:66:72:
58:9e:91:47:29:1b:af:b8:1c:d0:ed:9e:0e:a7:35:
9f:2a:8b:11:51:c7:80:a9:7a:b6:f1:46:7c:8a:18:
0a:fc:37:10:cf:4b:34:15:b3:fe:68:75:a3:46:e3:
6f:3c:7d:f9:42:7d:58:7a:47:32:a9:58:cc:c7:3a:
28:0a:2f:58:52:00:38:9c:96:43:53:c8:df:f4:4b:
b5:88:3f:75:ea:88:bc:14:f1:d9:22:f9:65:dd:1e:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:21:D2:63:CC:3A:9B:FE:96:58:1F:23:4B:18:E4:CE:86:60:EC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0Qch0mPMOpv-llgfI0sY5M6GYOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:23:78:4c:18:d9:91:65:0b:7c:5b:1d:62:59:5b:48:f2:0b:
44:09:59:74:00:ab:ee:a2:53:e7:82:8d:6f:7f:f4:52:04:9f:
d2:e5:46:01:08:43:18:92:5b:bc:59:1b:f4:b0:d3:55:6c:d6:
d7:e4:45:96:13:df:f2:87:24:53:c4:ac:ae:5b:13:59:3b:80:
2e:16:94:84:42:80:49:ed:73:f3:7a:41:c0:12:68:c9:4e:31:
b7:cd:20:65:b3:cf:e1:25:13:24:2b:fe:0f:c9:24:15:3c:a9:
b7:1e:5e:17:e4:cc:73:65:b8:17:a7:7d:89:0b:8a:a2:09:d4:
03:a8:08:a0:07:84:ab:88:09:10:81:98:26:c2:07:3a:4e:20:
84:d3:74:92:a3:bb:d2:1b:03:b1:8b:82:a7:a2:00:8d:28:7e:
18:cf:b9:79:a0:ca:e1:6d:01:f7:00:08:d6:e0:c1:f1:48:71:
59:b7:f7:3e:35:f0:f3:fd:49:a4:ed:15:cb:9d:a4:89:b0:20:
71:e6:23:fc:c0:2a:0d:bb:ff:ec:91:8f:6b:81:df:5e:b4:83:
6e:0c:2a:f3:db:c8:38:59:6e:00:ba:09:95:ad:78:d6:91:60:
af:32:f9:64:cc:16:33:10:42:36:7c:b6:1d:7c:c4:94:18:99:
e5:3a:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:42 2025 by rpki-client