Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/h1T1hZYMTwwgSDQZzAl3oL295zA.roa
File: h1T1hZYMTwwgSDQZzAl3oL295zA.roa (raw, json)
Hash identifier: SCw7yUz/XAwSUeKReZtoL2zZ1gEpVW6d0s8bT6JnlkM=
Subject key identifier: 87:54:F5:85:96:0C:4F:0C:20:48:34:19:CC:09:77:A0:BD:BD:E7:30
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01896E424FEF7A1DFF68FA0FB7E966F8C19B
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/h1T1hZYMTwwgSDQZzAl3oL295zA.roa
Signing time: Wed 19 Jul 2023 13:06:26 +0000
ROA not before: Wed 19 Jul 2023 13:06:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35632
IP address blocks: 87.100.0.0/17 maxlen: 17
77.84.0.0/16 maxlen: 16
188.141.128.0/17 maxlen: 17
2a00:7180::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:42:4f:ef:7a:1d:ff:68:fa:0f:b7:e9:66:f8:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 19 13:06:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8754f585960c4f0c20483419cc0977a0bdbde730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:98:91:ce:30:1c:2c:0d:fa:76:8e:e5:59:
b7:f7:a1:e0:d9:c2:82:40:5a:67:8b:f3:b8:06:a6:
49:e1:82:48:2e:cc:44:13:91:05:a7:ed:3d:4f:a5:
79:42:7f:ab:c1:18:50:fc:ed:c9:cc:2d:14:44:ab:
b4:2f:ca:54:8b:b9:25:ad:6a:3a:29:46:50:45:9c:
5b:61:0f:cb:70:e8:11:30:96:ca:13:e1:d7:e1:70:
55:8d:47:1b:4f:da:ff:25:4a:8a:59:7b:41:d6:1f:
c0:93:36:8c:5e:0d:7f:d2:c1:77:77:b9:0b:fa:50:
64:e8:2b:c8:4b:8c:e6:58:30:6d:d0:36:96:7d:2b:
53:a0:92:96:ab:84:32:30:da:d6:8c:9b:91:6b:16:
82:9e:66:ec:16:02:26:2e:64:8c:ff:8b:d2:c9:e0:
61:dd:e7:d6:4b:bc:e7:18:64:cd:4a:0f:18:7d:21:
0f:f5:23:b0:4b:c6:70:00:62:8c:1b:ba:af:d1:a0:
c2:f2:27:8c:33:de:2c:cc:9e:91:55:d8:20:cd:93:
cf:55:4f:aa:60:56:7e:03:34:cd:27:c3:04:23:b9:
61:06:86:0f:00:2a:d4:49:6c:7f:40:be:6f:88:1d:
27:e8:a5:fa:c6:4a:30:72:dc:6e:09:3b:5d:d6:fc:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:F5:85:96:0C:4F:0C:20:48:34:19:CC:09:77:A0:BD:BD:E7:30
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/h1T1hZYMTwwgSDQZzAl3oL295zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.84.0.0/16
87.100.0.0/17
188.141.128.0/17
IPv6:
2a00:7180::/46
Signature Algorithm: sha256WithRSAEncryption
7d:65:45:cb:59:ce:2c:62:3f:ef:41:42:4b:90:d8:d4:ba:45:
27:b9:4c:dd:6e:5d:ed:e0:c6:05:47:63:c4:8a:2b:96:49:9c:
21:1d:0d:d9:15:91:b2:20:9e:18:6e:eb:fa:57:ee:e0:8c:14:
ca:7b:41:51:1e:bb:92:cf:f5:05:5d:7b:7d:f0:47:71:f1:bc:
9c:16:f6:2b:28:4f:85:fb:0d:ff:f6:78:db:08:97:de:52:3a:
7c:74:e1:e1:0b:d1:c7:ed:66:57:56:b4:f8:36:cc:e2:45:f2:
74:ee:87:d1:5b:f8:c0:7b:de:71:97:4d:c2:65:64:c4:4c:10:
e4:8f:86:19:cd:a8:b4:03:95:78:30:eb:34:c3:36:f3:d5:a0:
92:47:1a:2f:59:c9:9f:f1:d1:c5:31:8e:ca:89:f7:87:36:0c:
e3:4f:81:0a:92:6f:e3:80:36:19:96:f1:5a:d1:fd:ab:14:88:
c8:f0:c1:3e:e7:22:00:1f:60:d7:7e:3e:00:f2:ff:9a:39:60:
09:03:65:2f:55:b5:bd:59:a8:41:1f:e4:59:9b:c9:d5:d8:c3:
f5:24:98:e2:f7:4a:74:4e:2a:c3:65:bb:5a:28:af:bc:fb:b8:
94:b0:21:29:56:82:8d:df:29:b3:cf:b9:a2:d8:50:ed:a1:72:
e1:ff:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:32 2025 by rpki-client