Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0M44VwR4IQHdJLVkNs3Fc4wdVz8.roa
File: 0M44VwR4IQHdJLVkNs3Fc4wdVz8.roa (raw, json)
Hash identifier: vDyCVG+MFBcT+fs9nCnembpNeuapgqguvAPPr8dAHec=
Subject key identifier: D0:CE:38:57:04:78:21:01:DD:24:B5:64:36:CD:C5:73:8C:1D:57:3F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B239A9B21879F79EEBD7562FE4D136
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0M44VwR4IQHdJLVkNs3Fc4wdVz8.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212251
IP address blocks: 82.177.68.0/22 maxlen: 22
82.177.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:a9:b2:18:79:f7:9e:eb:d7:56:2f:e4:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ce385704782101dd24b56436cdc5738c1d573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:7a:38:f4:1b:58:2d:4f:7b:d0:fc:1c:6a:
25:15:a9:cc:b6:57:7f:19:d9:1e:50:d5:09:b4:89:
58:82:b7:51:df:67:15:4b:62:bb:08:3d:40:b5:c5:
19:41:2d:eb:48:63:0f:5c:5e:98:3d:84:67:df:48:
60:a7:1e:1d:a8:71:10:9b:59:9f:82:35:8c:e6:f6:
2c:a2:e1:f5:ae:a9:e0:59:03:48:f1:cc:18:53:75:
c8:cb:d4:ad:9c:58:7c:c8:4e:d8:fc:31:cd:8f:f1:
b0:92:3e:2a:7f:c2:02:69:3c:70:13:07:05:98:e9:
70:67:f3:8b:40:11:cb:be:9a:86:b5:79:af:97:cd:
c8:1c:2a:01:91:d3:fa:2f:f8:cd:1f:f1:e7:ab:f7:
c9:dc:ce:95:02:a4:06:e9:16:86:39:f8:fb:c2:71:
d3:81:5a:34:e3:f3:a1:60:1e:43:59:be:68:0f:c7:
88:cb:1c:70:c5:e6:29:e0:c6:cd:5d:e6:ef:22:3a:
1d:f3:dc:14:cd:22:d3:26:71:30:4e:9d:6e:e4:8e:
34:65:b4:27:9d:66:8b:f4:dd:d8:17:99:82:db:1b:
85:8e:69:1f:c3:1f:f9:d2:58:c8:41:cd:89:0b:fe:
a6:ca:41:ba:c5:7c:5c:96:b0:67:6a:7a:21:53:43:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:38:57:04:78:21:01:DD:24:B5:64:36:CD:C5:73:8C:1D:57:3F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0M44VwR4IQHdJLVkNs3Fc4wdVz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.68.0/22
82.177.102.0/23
Signature Algorithm: sha256WithRSAEncryption
91:56:5f:49:30:f7:da:e4:c5:d3:a5:24:f9:3c:96:61:56:5f:
db:8f:bf:cf:e2:88:27:bc:ba:ca:e9:46:75:3b:af:33:a7:fa:
14:20:98:a5:cb:c3:ce:00:5a:b0:f1:81:87:a6:5d:88:35:92:
96:d1:93:be:43:2d:5e:2c:90:d1:fe:90:a6:09:9f:46:4f:c3:
8d:4c:c1:98:30:74:0d:82:94:2f:18:6e:0e:75:ca:c1:fa:00:
2c:e1:f5:fd:10:0d:dd:45:be:61:1d:6e:0a:c1:d9:03:a5:55:
c2:06:9a:6a:f0:d2:6a:91:ae:6e:e2:f7:dc:fc:79:c8:42:4d:
92:6e:77:77:0b:26:22:77:b4:a3:80:54:92:58:55:8e:ff:7a:
33:a0:f2:46:05:f5:38:16:e7:19:8a:05:08:94:e0:7d:e8:96:
4b:9f:3d:1a:55:6c:0a:f6:04:01:e7:f4:e5:23:58:4a:a0:46:
df:a2:c1:0c:a2:c6:be:81:c7:4a:7a:da:ab:66:2b:d5:fa:e0:
95:e2:75:3e:97:8a:7e:44:92:91:f4:95:b5:26:29:eb:6a:3b:
db:4f:95:a4:9d:b1:a1:d9:17:69:41:61:a8:69:39:87:84:de:
87:d9:bc:da:4d:66:f4:12:b5:da:e2:38:b9:40:81:6e:bc:6c:
6f:22:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:42 2025 by rpki-client