Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/_-z4nvaTTyccKXJFwod66iKewX0.roa
File: _-z4nvaTTyccKXJFwod66iKewX0.roa (raw, json)
Hash identifier: B/6vrb0o2kiLAGPMrkOgglOkupcsHoxdqdIe49F5XFQ=
Subject key identifier: FF:EC:F8:9E:F6:93:4F:27:1C:29:72:45:C2:87:7A:EA:22:9E:C1:7D
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 01946F55E0D8177D5B4915FDE967FF6B4090
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/_-z4nvaTTyccKXJFwod66iKewX0.roa
Signing time: Thu 16 Jan 2025 13:38:06 +0000
ROA not before: Thu 16 Jan 2025 13:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.161.62.0/24 maxlen: 24
91.227.193.0/24 maxlen: 24
2a01:fd40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:55:e0:d8:17:7d:5b:49:15:fd:e9:67:ff:6b:40:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Jan 16 13:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffecf89ef6934f271c297245c2877aea229ec17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:02:92:c9:fd:21:7c:cf:ce:ec:57:e2:0f:
a0:c6:dc:77:c4:88:c4:31:f5:c8:84:02:28:81:32:
09:98:cc:82:88:a8:98:e6:1a:9e:38:0a:00:fd:25:
a4:c7:5a:46:41:35:c3:de:fa:6f:8d:3d:66:c6:ae:
54:4d:54:8f:e9:98:e1:05:fd:0d:f6:d7:90:bf:b8:
4e:48:f9:cc:21:46:ee:58:16:59:34:2d:5c:ff:e2:
bb:c7:75:c1:3e:c1:87:3c:82:3e:4f:ab:33:68:68:
78:e0:c7:9b:e9:48:f5:23:0a:57:b2:b2:14:44:2c:
1e:b6:7d:93:e4:0c:48:f7:b6:1b:a2:0f:44:62:cd:
1e:df:81:d7:f1:37:ab:12:a3:bc:48:3d:9e:0c:90:
12:e9:dd:fe:aa:14:ba:9f:08:66:a0:c9:1b:3e:b8:
20:28:0a:da:3d:e3:f2:19:f8:c3:13:cd:68:9a:65:
fd:63:3e:3a:a0:f0:8d:62:07:02:5b:5b:91:df:5d:
5b:07:18:5f:96:cc:f1:7d:d7:a2:36:6d:99:d2:8c:
6f:68:bb:7e:7a:b0:01:a5:22:c7:ef:34:55:e5:bc:
ec:13:8d:5c:64:6a:ed:d8:49:3a:9d:f1:25:b8:38:
64:4c:d7:fe:d2:c2:83:a1:43:47:0f:de:92:7a:c5:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:F8:9E:F6:93:4F:27:1C:29:72:45:C2:87:7A:EA:22:9E:C1:7D
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/_-z4nvaTTyccKXJFwod66iKewX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.62.0/24
91.227.193.0/24
IPv6:
2a01:fd40::/32
Signature Algorithm: sha256WithRSAEncryption
9a:5d:ac:85:30:fa:f1:ae:dd:8b:10:30:b4:96:af:67:e8:24:
d4:01:56:69:61:71:b8:68:f3:e3:19:9e:7d:57:ad:89:01:b3:
62:33:19:36:2e:85:4e:97:ac:59:95:e8:88:33:59:0f:07:58:
b9:16:19:e5:b0:de:ff:3d:b4:43:06:d7:96:3d:5c:c1:7d:59:
ed:eb:89:88:ab:30:3e:47:9a:8d:6b:16:12:26:01:a9:24:54:
44:4e:51:60:9d:20:87:06:cf:18:8c:94:47:b9:02:14:ea:55:
fc:1b:09:60:fa:ab:79:42:0d:fb:a9:a3:e3:e1:71:55:9f:52:
1d:3e:dc:57:53:63:2d:49:eb:fb:9b:a7:ee:63:d6:d0:73:d1:
9b:1e:58:2c:2c:f4:da:0d:60:ea:94:3c:72:67:1b:3d:3b:a2:
9f:60:31:da:cb:91:97:8b:00:9c:ea:94:ea:d3:11:2f:be:1a:
c2:4c:7c:15:37:29:2e:b4:2a:3e:3c:65:4c:6a:f2:1f:76:2d:
3c:39:37:e9:e5:b0:97:43:44:83:bd:52:cb:91:e3:77:f8:e7:
c9:0d:bc:2e:29:5e:d2:73:f3:4b:57:e0:9c:37:b8:b4:ff:d1:
94:88:d4:7a:cd:40:0a:fd:e2:c4:1b:73:e1:4c:17:61:e6:55:
ed:bd:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:51 2025 by rpki-client