Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1fD4yNej-m7SYqOXRXjb7qCSzmY.roa
File: 1fD4yNej-m7SYqOXRXjb7qCSzmY.roa (raw, json)
Hash identifier: 5jpWSXKQZejr9yxobKTkHkbKP+vjTofxAGlbrJS4q48=
Subject key identifier: D5:F0:F8:C8:D7:A3:FA:6E:D2:62:A3:97:45:78:DB:EE:A0:92:CE:66
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22CF6135F45ED3F0092FF906B38E0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1fD4yNej-m7SYqOXRXjb7qCSzmY.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201893
IP address blocks: 82.177.134.0/23 maxlen: 23
195.136.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2c:f6:13:5f:45:ed:3f:00:92:ff:90:6b:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f0f8c8d7a3fa6ed262a3974578dbeea092ce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:f4:48:fb:bb:5b:c1:eb:51:15:59:6b:88:
58:0c:ca:bc:b8:24:b3:b0:b4:4d:9b:a9:8b:1c:27:
c4:e2:dc:83:bc:85:ca:81:3a:7b:06:bb:8b:94:41:
07:62:0f:a8:32:59:a5:e0:7f:bf:f5:61:d0:ba:ee:
b6:7d:81:59:e7:d5:50:98:c0:fe:c0:de:e8:a8:9e:
b4:b3:a7:41:80:b4:02:12:7f:43:1d:e3:9f:82:ee:
d9:4c:a2:23:48:fb:40:a7:e0:1e:0c:06:00:be:4c:
b6:fd:a5:52:3b:8c:13:43:17:08:bb:43:22:56:40:
69:e7:b6:91:94:4b:58:41:30:ea:f1:04:f6:1a:58:
6c:4a:3b:ba:e0:6a:f4:7f:26:f5:cc:49:20:af:c8:
c1:08:36:1b:8d:07:6a:02:c5:58:8f:de:d9:7b:f7:
d1:8b:82:dd:c2:4c:e2:42:b2:74:4c:0c:2f:34:2d:
b1:90:04:c0:9c:b5:87:a7:e9:e0:ce:3d:3a:a3:78:
be:95:8c:29:17:89:f0:76:36:51:44:f5:ba:de:72:
c4:9a:2b:d5:93:82:73:e6:29:a9:d2:6f:ea:4b:31:
b6:ba:83:88:f3:bd:09:f4:1a:bb:ba:12:0d:f9:f8:
6f:2d:e7:bf:1a:46:3a:6f:b1:19:5b:e6:3c:5e:cc:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:F8:C8:D7:A3:FA:6E:D2:62:A3:97:45:78:DB:EE:A0:92:CE:66
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1fD4yNej-m7SYqOXRXjb7qCSzmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.134.0/23
195.136.66.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:fc:74:00:1e:63:57:0c:d5:1a:2f:78:60:64:fa:6e:be:67:
e5:be:1a:1e:b0:af:57:d3:41:2c:7f:14:9f:01:06:cb:04:ec:
e2:28:b6:17:34:c7:84:19:51:60:f0:d1:13:0e:da:fb:1f:fc:
2a:a4:c1:ee:9f:28:ae:80:65:54:d4:0a:2d:8b:6d:f7:8a:79:
6c:b6:d3:0a:b5:ad:a2:cb:b5:95:64:ab:39:f5:78:09:1a:c0:
15:e8:8d:18:fa:03:77:de:4b:5e:d1:29:b0:e1:42:4f:cd:f2:
19:b6:5b:3f:1a:e2:33:e2:f5:c7:1b:bb:b7:ad:c7:7d:6c:b2:
2e:f3:f3:05:4d:21:bd:1b:a6:12:c1:0e:e7:3a:03:de:85:8c:
30:07:f8:42:d1:6c:df:68:ad:5c:bb:4d:8f:f1:87:94:a8:98:
2e:de:fb:8e:56:2a:71:d4:b5:96:34:ff:cf:10:4d:df:57:81:
99:e0:ab:e0:c1:a9:e1:45:4a:b0:f7:c0:78:10:e7:ae:38:2d:
de:99:01:55:33:e3:66:a3:68:da:d1:4f:2d:b9:86:bf:d3:90:
87:68:6e:d0:da:a4:16:90:54:91:e5:3e:d0:a9:fb:e4:8a:6e:
a8:39:53:4a:d9:74:3b:f5:53:37:96:c2:d7:fd:33:31:98:65:
91:c5:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:42 2025 by rpki-client