Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/jDCzVV2I4qF_67ASFJySD4Hfru8.roa
File: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (raw, json)
Hash identifier: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=
Subject key identifier: 8C:30:B3:55:5D:88:E2:A1:7F:EB:B0:12:14:9C:92:0F:81:DF:AE:EF
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01942144342A9F54BE2E4F9CF1771B93EBF4
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/jDCzVV2I4qF_67ASFJySD4Hfru8.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206814
IP address blocks: 77.247.197.0/24 maxlen: 24
2a12:b540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:34:2a:9f:54:be:2e:4f:9c:f1:77:1b:93:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c30b3555d88e2a17febb012149c920f81dfaeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:79:f6:81:b9:71:c8:d1:95:8f:3b:b6:51:
13:d5:5d:46:15:3b:20:aa:2a:35:c8:b6:ec:dc:bd:
94:72:14:3f:a0:ab:eb:0b:c1:1a:4f:c2:f8:ea:c3:
bb:4c:c9:9e:50:63:10:48:d8:5d:12:f1:89:a8:13:
6e:26:7d:da:5a:3f:f3:38:95:76:eb:20:87:9f:b5:
21:0d:ae:56:8d:f3:a4:66:35:a2:bb:e9:47:da:b6:
cf:dd:5c:56:7d:7f:54:ea:5c:c3:5e:ae:c3:86:a7:
63:31:67:1c:f0:e7:7a:81:b0:7e:04:c1:ac:0a:18:
6d:0a:28:51:b9:c0:68:a2:47:df:43:47:3c:f9:06:
2e:86:85:8d:a1:be:96:8d:db:bd:99:2f:47:9e:4b:
75:a7:2c:5b:5e:61:65:cc:ba:e2:ce:57:3b:db:05:
70:e9:77:cd:68:52:7b:14:c1:c7:12:33:8d:1f:3e:
9a:0d:47:b9:cf:82:6b:ed:30:0e:f4:18:12:0c:a3:
95:ef:9e:7f:cc:ca:e6:57:ba:68:44:0c:a0:9c:a6:
65:d1:0e:04:0b:1c:d5:65:81:5c:c2:1c:a7:4b:df:
76:31:46:ea:f4:fb:7c:7b:34:25:5c:54:08:6f:1f:
b5:35:91:01:04:9e:19:37:18:1b:c4:44:23:e9:a2:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:B3:55:5D:88:E2:A1:7F:EB:B0:12:14:9C:92:0F:81:DF:AE:EF
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/jDCzVV2I4qF_67ASFJySD4Hfru8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.197.0/24
IPv6:
2a12:b540::/29
Signature Algorithm: sha256WithRSAEncryption
7c:c8:63:9c:c5:3a:9c:7e:b1:b9:a1:f4:ba:39:d7:bc:cc:ed:
7e:cb:1b:e8:ca:54:f9:d1:43:48:ad:4a:86:9c:e3:5c:bb:dc:
f9:77:35:c6:fc:86:29:3c:c6:ca:8a:58:13:d0:b7:07:34:04:
38:f8:6b:7e:91:cf:87:77:f2:a5:ab:13:24:5a:80:82:37:df:
68:17:4b:b9:fb:6f:5f:c7:e4:29:4e:5d:24:45:58:13:bd:df:
9a:c3:6f:be:31:42:4b:bb:2e:66:9a:a3:f4:50:59:4a:cf:b9:
31:a6:9f:ad:48:6b:47:fa:28:c5:65:01:cd:01:f0:59:68:a5:
59:38:ef:9c:89:76:57:e3:48:e2:6b:36:e8:33:1e:63:0a:c9:
91:f3:e0:0b:16:a6:14:57:e3:c1:31:ad:10:ff:a7:e7:26:4c:
4b:34:2a:30:72:b0:d6:1b:c6:b4:e8:09:3b:2c:9d:d5:3f:67:
0e:2b:c6:a9:31:82:2f:b9:d3:6d:73:7c:4f:8a:ea:fb:3d:8a:
a4:04:8b:8d:ac:72:e6:26:91:61:3b:67:38:0b:27:d7:22:bf:
3c:ba:fe:8a:8f:79:a9:5a:4a:31:6e:06:08:a4:f4:dc:19:f2:
15:0a:09:55:37:db:4d:5d:92:78:70:0b:ad:6c:81:8b:27:d3:
56:07:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:41 2025 by rpki-client