Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa
File: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (raw, json)
Hash identifier: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=
Subject key identifier: 8C:B6:CC:97:E8:91:5E:8E:42:B4:40:29:5C:38:27:2C:54:9D:AC:44
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01941FFA03A37956185967EA1C1D9315BF5E
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43022
IP address blocks: 77.93.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:a3:79:56:18:59:67:ea:1c:1d:93:15:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb6cc97e8915e8e42b440295c38272c549dac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:c9:50:18:7b:a9:59:50:61:0b:75:f3:84:
b6:6c:2b:36:74:60:d4:8e:6b:8d:4f:e8:65:34:9d:
1b:08:ed:82:2b:90:ca:7c:49:ca:af:32:40:30:21:
5e:11:6f:63:ff:1a:12:40:88:c0:bd:7f:bd:25:06:
57:85:20:55:72:ba:3d:dc:0f:79:e9:54:4c:0b:20:
72:6e:21:9c:e1:6b:a5:73:2f:37:42:31:8a:68:2b:
a3:35:29:5d:43:72:90:a1:7c:a2:1a:8c:3c:6a:cf:
8c:1d:66:91:08:b5:8e:8e:a4:52:04:e9:5c:57:30:
1b:23:1f:e0:d9:44:21:fd:ed:f1:2c:c3:b4:0a:9e:
a7:d0:95:70:ec:bf:f3:69:f7:c4:68:dd:d1:f6:a4:
3d:ce:a8:07:04:08:fb:52:45:72:c9:a4:a5:c2:8c:
ce:b1:10:dc:f2:7b:4d:8a:1c:8a:82:a2:59:81:f9:
00:7f:11:3d:96:58:04:65:d2:26:fe:f2:4f:c6:e5:
df:e0:76:da:bc:21:a6:bd:b2:98:c3:b1:74:d8:0d:
d9:53:67:f6:b9:38:e5:09:47:f7:ca:f6:c7:bf:d8:
c8:d0:6f:81:b0:b2:02:5f:fa:00:7d:eb:92:7a:93:
5d:6f:cb:06:0e:b2:1d:4c:72:7b:41:b4:57:79:d1:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:CC:97:E8:91:5E:8E:42:B4:40:29:5C:38:27:2C:54:9D:AC:44
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:28:30:98:91:15:3b:58:b5:7f:b6:6e:3c:9e:ea:8b:e2:5a:
23:0b:af:66:d9:4e:28:fc:d9:d9:01:1a:bd:c2:3c:66:a1:0b:
d8:85:bc:5e:c8:83:6a:7b:18:59:73:a0:89:17:d7:c8:8a:5e:
cb:1e:86:9c:81:e1:6e:d4:5b:21:b8:b7:f5:37:cb:e2:cb:c6:
51:bf:16:49:b8:aa:29:2d:39:e1:24:34:9c:3e:13:86:8b:b7:
5a:cc:3a:d9:96:20:0b:b3:fc:67:b7:ce:b4:32:74:4c:d9:5a:
3d:ae:3a:92:bb:8a:7b:46:df:ab:04:a4:92:08:70:53:2c:0f:
07:2f:c4:15:cc:a7:29:7b:a2:b7:79:1a:70:fe:2d:ba:ef:32:
69:87:1f:59:17:15:6a:5f:48:04:ed:0a:b7:d9:2f:26:d2:2b:
1d:e8:ec:37:fe:87:50:1b:22:62:1a:d5:41:0b:43:7a:ba:b4:
5e:e2:69:85:86:2a:07:2e:98:28:38:b4:86:4f:02:ba:7a:9b:
e5:d1:26:b6:05:b6:46:2b:c0:50:8a:cc:67:79:5e:0f:8f:6b:
1c:3f:eb:d2:fc:10:87:2c:f3:45:b7:a1:51:40:c5:9f:43:93:
81:b7:eb:8f:ac:a1:3e:b9:26:0a:4b:3a:9e:bc:cd:53:6a:bb:
96:bd:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:23 2025 by rpki-client