Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fKRj5ou6WM3nKAWDQThNnAaSadI.roa
File: fKRj5ou6WM3nKAWDQThNnAaSadI.roa (raw, json)
Hash identifier: RQl31RptBlpDDKTycubYrINV6rWfSs+eKKH0ORLTZJw=
Subject key identifier: 7C:A4:63:E6:8B:BA:58:CD:E7:28:05:83:41:38:4D:9C:06:92:69:D2
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B218387C58F302603EC3D0B43CB0F5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fKRj5ou6WM3nKAWDQThNnAaSadI.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42877
IP address blocks: 82.177.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:18:38:7c:58:f3:02:60:3e:c3:d0:b4:3c:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca463e68bba58cde728058341384d9c069269d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:21:43:eb:6c:51:70:29:7c:c4:6b:91:78:
d4:ac:8c:2a:d9:0e:31:b3:23:8f:03:79:4b:3d:78:
d0:45:08:35:5b:2c:bc:85:f4:f5:89:59:f2:b5:a7:
59:ac:e5:ac:03:be:d1:dd:93:5b:89:d7:29:8d:f4:
d5:89:d3:18:9a:fb:84:2f:d7:9f:e0:69:d4:bc:6b:
89:14:19:8f:e6:ea:eb:c0:9a:f5:e7:b0:ec:2d:7c:
da:20:7f:d8:f9:23:83:ad:3e:a2:c6:0a:0a:fe:03:
f1:84:b2:42:8d:1c:b8:d9:8a:d9:bb:8b:f8:2d:57:
10:7b:cf:af:2a:b6:28:8c:25:57:2e:0b:24:99:4e:
3b:28:db:76:f7:5e:45:44:d3:20:49:fe:92:8a:60:
06:18:bb:eb:6b:d8:9d:84:e5:be:4d:c2:39:7e:3b:
56:fb:c6:98:ed:1f:bc:0d:61:b6:65:97:3a:93:1e:
e2:21:7d:d2:3c:00:1c:f5:ad:cf:07:b4:46:7a:7a:
3b:78:c9:86:d7:09:08:80:a7:c3:66:c0:4e:27:2a:
4c:43:25:14:e5:cd:41:9f:6e:55:5c:dc:92:d7:28:
f4:9f:7a:88:10:6b:2a:dd:6b:d5:c4:d8:67:6a:83:
f6:0c:f0:24:d6:33:01:ce:2a:31:a8:a4:c4:10:b5:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A4:63:E6:8B:BA:58:CD:E7:28:05:83:41:38:4D:9C:06:92:69:D2
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fKRj5ou6WM3nKAWDQThNnAaSadI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.242.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ba:05:2e:17:fe:1d:fd:90:d3:82:dc:d7:01:3d:a1:55:a5:
a1:01:90:c6:72:ea:fa:4e:b2:cf:e1:5d:00:5a:0b:e4:c7:06:
7c:9c:31:1c:01:28:c6:6e:d8:6b:52:30:18:42:89:fa:ed:9f:
08:0d:b0:99:75:0e:54:94:94:1f:83:8d:7c:6f:ff:28:01:94:
70:1a:93:c0:e4:4e:5d:ab:a0:56:91:87:1f:c3:8c:b9:c1:38:
c0:fe:55:d6:96:29:eb:50:4b:f4:6d:c7:68:2c:b6:5b:49:ac:
80:42:0f:27:b1:07:dd:4c:7a:f0:16:1a:a2:fa:17:9c:b4:9f:
dd:73:83:47:af:df:5f:de:7b:06:4e:3c:98:fc:88:54:bb:b0:
5a:84:95:28:bb:a4:b9:65:10:6c:de:49:9b:8e:e4:fb:c1:0f:
7f:2d:c0:76:33:c8:70:86:8a:aa:4d:9f:5d:67:5e:c5:3c:7e:
00:47:9d:72:c2:19:b9:b3:6b:5d:46:ef:ed:1c:d3:a2:e4:24:
87:ac:61:be:c3:ae:b8:72:6c:af:ee:5b:e3:b4:af:2d:55:44:
8b:7d:2d:08:4d:9b:9e:ea:fd:eb:f0:59:8c:3b:75:d2:40:f9:
6a:ba:fa:25:8a:59:de:10:6d:7d:92:10:8d:00:48:cb:62:34:
f0:cb:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:50 2025 by rpki-client