Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eih7WU82Lm_L8G4jNF-_CAoIUZQ.roa
File: eih7WU82Lm_L8G4jNF-_CAoIUZQ.roa (raw, json)
Hash identifier: c8/OvqK6vkcA7fAHDI7coTGJ7hu5ngTr6sbI6QHXIoo=
Subject key identifier: 7A:28:7B:59:4F:36:2E:6F:CB:F0:6E:23:34:5F:BF:08:0A:08:51:94
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0194AC0920F4664A31B015ECA3CB5EF52618
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eih7WU82Lm_L8G4jNF-_CAoIUZQ.roa
Signing time: Tue 28 Jan 2025 08:31:06 +0000
ROA not before: Tue 28 Jan 2025 08:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62025
IP address blocks: 82.177.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:09:20:f4:66:4a:31:b0:15:ec:a3:cb:5e:f5:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 28 08:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a287b594f362e6fcbf06e23345fbf080a085194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:36:6c:c5:53:0c:c5:a6:f1:5e:e8:ad:4e:
66:b8:ff:4a:69:dd:d5:8d:99:af:d5:0f:1e:c8:aa:
54:ad:d3:c3:a1:fd:29:17:8f:49:69:a5:b5:14:ab:
06:cb:0e:6a:52:39:3e:d1:a6:01:ea:53:4d:c2:8d:
7a:c6:35:d9:cc:69:25:d9:63:db:10:e1:12:f4:14:
b7:79:00:3e:82:b2:cd:d4:f6:8d:9a:ce:d0:1c:77:
b7:1d:21:68:4e:eb:e3:bd:e5:17:d1:87:f1:ef:cf:
fa:eb:db:d5:71:51:7d:21:ef:30:aa:35:dd:9a:b1:
f8:63:2c:99:55:40:ec:29:0d:30:70:31:7f:94:2b:
af:e3:98:55:50:1a:e4:dc:b6:50:64:a5:81:b4:99:
e9:23:99:6a:1e:14:d7:d8:4a:95:11:7f:c8:11:a7:
58:76:b9:26:56:1f:cf:30:df:5c:73:04:3e:94:07:
27:cd:c4:e4:d4:b2:0e:d9:33:09:87:2e:c0:56:d0:
17:8f:90:66:72:af:53:e0:7a:f0:bd:6b:a3:be:38:
b6:3b:c8:7a:d7:38:f6:cc:ef:56:90:3f:22:d2:12:
32:4c:97:44:f7:53:dd:d7:74:6a:16:ee:87:94:bc:
14:8b:59:83:25:34:dd:ac:d1:9f:04:13:bb:58:49:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:7B:59:4F:36:2E:6F:CB:F0:6E:23:34:5F:BF:08:0A:08:51:94
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eih7WU82Lm_L8G4jNF-_CAoIUZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.8.0/24
Signature Algorithm: sha256WithRSAEncryption
61:56:db:ca:81:55:00:47:8d:6b:36:7a:ae:a7:9a:1e:d0:a1:
01:a8:e8:9f:1e:ef:01:7a:0b:b6:b2:93:02:84:62:9c:7a:15:
9c:f4:31:b5:19:8d:71:29:b9:98:5d:50:2f:d5:b4:c9:ab:0e:
a2:bc:f3:5f:09:2b:2e:75:aa:c0:21:78:3d:dc:a3:8c:29:19:
1e:90:26:41:bf:2a:8d:c4:d4:aa:bb:dd:bc:ec:9e:8b:59:ca:
fa:56:97:23:3a:c7:aa:0e:1d:a1:88:45:ab:8e:ec:45:65:9b:
d0:2a:74:67:b6:f9:67:97:b5:b4:d9:b5:4b:d3:56:11:d5:44:
5f:43:ee:c9:d1:4c:fe:40:39:72:ce:02:df:4e:7e:9b:57:c9:
63:c6:cf:0c:f7:96:84:b2:93:9c:f6:8a:07:7d:91:af:3f:02:
83:31:3b:5e:7b:16:bd:45:74:29:1e:ce:88:b5:ac:b2:ed:85:
cb:48:59:dc:ab:20:d6:61:c1:25:05:32:ea:ca:f9:00:08:82:
ff:68:ba:29:6b:16:2b:00:ea:24:16:f2:aa:1f:21:c1:a7:10:
50:c0:af:b0:7b:0e:fb:dc:bb:ed:56:56:46:0e:e4:a6:11:6d:
58:7e:9d:77:4a:f7:e2:63:34:2d:6a:eb:47:69:95:79:12:71:
ed:3e:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:13 2025 by rpki-client