Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iXuidHo1QSBSsFaoOTf1QHBof7o.roa
File: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (raw, json)
Hash identifier: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=
Subject key identifier: 89:7B:A2:74:7A:35:41:20:52:B0:56:A8:39:37:F5:40:70:68:7F:BA
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D03D7BC84C17A80B9E342074C7FE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iXuidHo1QSBSsFaoOTf1QHBof7o.roa
Signing time: Thu 02 Jan 2025 17:50:23 +0000
ROA not before: Thu 02 Jan 2025 17:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35632
IP address blocks: 77.84.0.0/16 maxlen: 16
87.100.0.0/17 maxlen: 17
188.141.128.0/17 maxlen: 17
2a00:7180::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d0:3d:7b:c8:4c:17:a8:0b:9e:34:20:74:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897ba2747a35412052b056a83937f54070687fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:fa:7f:c4:d3:92:74:9d:6a:a5:2f:9e:5e:
71:9f:78:2c:42:8e:06:6a:88:a4:7a:cf:92:34:06:
3d:8c:ab:e8:e1:4c:9b:13:0e:bc:52:bb:93:00:58:
05:3c:85:ee:8d:d8:a7:9c:e6:65:19:a8:e7:1c:cc:
92:ea:e5:b1:6e:56:09:c5:59:2b:49:03:3a:8e:ee:
85:6f:ed:69:64:58:2a:ca:c7:71:09:13:e0:df:46:
8d:0e:7a:eb:1c:19:33:42:a6:23:9c:8d:7e:87:ea:
87:95:13:93:b4:34:f8:77:6f:2f:b9:ea:9b:82:14:
e5:21:e2:90:41:c6:38:ab:6c:e1:fc:bd:60:2d:bf:
3e:09:05:86:dd:b6:3a:75:24:ba:ad:0b:ca:cb:9b:
29:c5:49:3f:00:d3:9a:08:55:a4:2d:da:83:c7:3d:
64:17:d1:95:5a:a7:33:95:3a:ce:ca:81:a4:58:3d:
6d:4f:12:78:42:bf:20:ee:38:28:8b:50:3a:1b:b5:
70:8a:52:64:d5:f8:96:56:a2:f4:39:96:64:43:9d:
21:83:df:8d:02:86:d7:ac:38:20:18:46:c6:08:96:
cd:0e:b4:af:e0:ee:f6:1f:e5:d3:ba:2b:3a:4b:9e:
63:23:32:d4:db:a1:d0:59:00:d3:6f:16:c6:7d:23:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:A2:74:7A:35:41:20:52:B0:56:A8:39:37:F5:40:70:68:7F:BA
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iXuidHo1QSBSsFaoOTf1QHBof7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.84.0.0/16
87.100.0.0/17
188.141.128.0/17
IPv6:
2a00:7180::/46
Signature Algorithm: sha256WithRSAEncryption
3b:9e:97:bd:d3:4c:9e:92:6a:52:af:f0:e0:c7:28:68:64:44:
db:84:97:c6:ea:b0:bb:14:26:4c:ea:c5:c6:9c:41:3b:d6:3c:
a4:aa:7b:0f:f2:30:8b:13:29:3c:ec:72:ba:2c:d2:77:3f:7e:
dc:b0:78:ed:e6:2e:70:65:9c:37:a2:75:f2:f1:4b:01:04:10:
1b:af:c6:e5:b7:46:e0:c9:1f:f6:ab:2a:a9:f4:25:0f:f8:bb:
d4:ff:a0:a6:a9:41:97:19:37:32:f0:58:db:cd:ef:b2:d4:23:
e9:88:58:c0:a5:b9:9b:e0:ed:0f:b2:bc:eb:35:be:80:4e:d0:
ec:9d:a9:4f:f3:67:b6:de:68:04:96:2f:97:ca:99:1a:30:38:
5f:a5:34:5f:29:e4:e4:73:2c:41:df:6b:27:57:ec:0e:a8:9f:
aa:3e:7c:7d:00:e5:fd:b0:27:6b:1b:a3:4c:6f:f4:90:d7:9e:
91:7a:54:3f:2c:83:5f:3b:66:6e:bf:2b:51:f0:a1:15:85:fc:
95:35:a2:45:b0:36:63:6d:4d:4b:52:9d:27:78:2d:4d:46:f9:
0c:fa:18:65:e0:c9:0c:21:ed:cf:27:5f:df:6c:75:46:8b:cd:
c8:51:d3:b4:56:4f:f0:44:83:01:de:05:9c:3c:17:d8:8b:27:
a8:8b:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:50 2025 by rpki-client