Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d-3Ij23VSSh7SshAVW354rN2M-c.roa
File: d-3Ij23VSSh7SshAVW354rN2M-c.roa (raw, json)
Hash identifier: C9ppp21+rsfkaTjOFUTmG34u/TQ1x1034+lBq8MfM0E=
Subject key identifier: 77:ED:C8:8F:6D:D5:49:28:7B:4A:C8:40:55:6D:F9:E2:B3:76:33:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194E682D1DDFA51E7372E3D73A0524B0400
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d-3Ij23VSSh7SshAVW354rN2M-c.roa
Signing time: Sat 08 Feb 2025 17:02:00 +0000
ROA not before: Sat 08 Feb 2025 17:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 94.177.13.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:82:d1:dd:fa:51:e7:37:2e:3d:73:a0:52:4b:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 8 17:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77edc88f6dd549287b4ac840556df9e2b37633e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:d5:ca:6f:62:1c:29:4f:c0:64:7c:96:46:
74:cb:29:ba:04:3c:3b:f1:ef:98:ba:e6:5d:66:e2:
be:fd:79:f4:db:fd:ac:2c:70:97:36:0f:e0:c7:f1:
f3:cb:81:33:3c:96:9b:dd:52:1a:7a:4e:92:d4:15:
6b:f6:8d:1a:23:d5:f2:e2:9b:4c:c3:b6:88:5e:e8:
71:e1:82:d9:78:ed:4a:be:61:97:7e:03:27:c1:bb:
b5:ac:c5:d8:b3:bd:47:15:19:74:0b:c9:1f:b1:6b:
25:c2:eb:de:b6:d2:13:6d:0e:46:4c:6c:c4:fc:14:
8b:87:b1:88:bc:ba:62:82:df:ba:9b:75:74:16:36:
b7:8b:58:f3:6c:ee:4f:f4:cf:63:21:ce:47:ce:2a:
d6:35:08:14:49:8c:8c:bd:b9:f9:b7:e6:64:e4:23:
ad:a7:3f:90:bc:df:8b:09:35:4f:c5:8b:08:eb:b8:
74:3d:0e:31:94:09:15:0a:50:03:4a:b3:88:8b:59:
c4:d1:99:d9:79:05:3c:9e:61:ee:21:28:16:bc:17:
cc:96:f3:50:9f:e8:75:32:41:66:26:4f:3f:9a:aa:
d8:fd:8e:fb:76:df:d5:6b:4d:7d:7a:f7:bf:6e:44:
28:15:1c:67:b1:e9:f9:33:f3:3a:97:a4:93:92:22:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:C8:8F:6D:D5:49:28:7B:4A:C8:40:55:6D:F9:E2:B3:76:33:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d-3Ij23VSSh7SshAVW354rN2M-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.13.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c6:d6:30:3a:07:1b:37:24:0f:b7:89:a2:3b:fd:32:e6:26:
03:fd:1a:17:c7:f9:cd:e2:18:dc:f4:61:03:36:50:9a:97:e5:
5e:e8:49:4d:73:65:40:b1:53:9a:8f:26:3d:a9:9d:47:ec:a6:
42:ca:dc:19:29:7a:5f:e9:5e:ab:f1:ff:45:cc:0f:a2:91:dd:
ce:6f:79:37:11:a5:76:b3:76:f7:e3:ad:01:b5:56:82:e7:57:
bd:cb:62:dd:b8:c8:2e:32:b5:ca:34:c5:4c:85:02:41:96:87:
25:13:93:48:8d:67:34:df:3a:37:6e:96:48:8a:ea:4e:97:89:
61:fb:35:80:73:50:f6:b4:4e:cd:1d:8e:0c:86:97:c1:2c:20:
48:76:de:91:2a:34:eb:32:d8:8a:cf:69:6a:1f:5d:8f:21:d7:
04:9f:ef:e0:1d:6c:e6:78:e2:a9:2a:cb:97:be:86:aa:dd:cf:
c1:e8:66:ac:ab:eb:6b:f0:12:7a:c1:8b:d1:d8:44:51:12:fb:
36:ae:f6:4a:85:18:1c:12:5a:d1:14:c3:c9:25:ab:f4:48:bf:
b2:05:71:fd:ad:c4:7f:74:f6:31:bd:1c:e9:5d:83:a9:84:10:
cf:da:bf:89:aa:60:6d:aa:35:1b:b7:4c:63:04:c4:7b:4a:8c:
2a:13:58:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:08 2025 by rpki-client