Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/v42cceBBaSqzvgVNoLf2yv8Hn_Y.roa
File: v42cceBBaSqzvgVNoLf2yv8Hn_Y.roa (raw, json)
Hash identifier: vCQ+Srk+bu+Ik6SzxBTVndPc4OGEZBoPEXXrLdPH2zo=
Subject key identifier: BF:8D:9C:71:E0:41:69:2A:B3:BE:05:4D:A0:B7:F6:CA:FF:07:9F:F6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369879FCCFC9F875036D4A01F3DD14B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/v42cceBBaSqzvgVNoLf2yv8Hn_Y.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13209
IP address blocks: 77.81.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:87:9f:cc:fc:9f:87:50:36:d4:a0:1f:3d:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf8d9c71e041692ab3be054da0b7f6caff079ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:e7:0a:6f:a1:d5:43:11:70:3e:82:79:c3:
29:b7:93:e2:7d:ef:4b:d1:da:9d:b7:14:94:6f:83:
9d:01:88:f4:fa:05:0c:42:fe:a5:84:e4:b7:5c:7b:
20:94:02:fe:5f:6a:42:ba:da:8c:6f:2c:ec:13:15:
e9:17:58:05:17:a0:e3:68:12:02:b6:d0:68:c3:9f:
54:dd:33:2e:0c:6a:5d:86:84:d0:60:02:29:34:a7:
73:9d:b1:c1:40:0f:e2:7e:a7:52:45:ed:7d:8a:38:
23:89:95:8c:a6:f7:1d:48:89:bc:06:8a:d6:21:a3:
75:71:a9:6e:61:a0:30:86:40:36:76:a8:f0:ba:12:
1b:0d:94:01:d7:d7:ee:14:0c:78:76:35:91:e7:b2:
fb:60:23:62:dd:1f:73:75:b3:f0:2f:43:d6:3c:db:
da:a1:9f:d8:7c:a6:da:85:16:ee:96:41:ae:74:d0:
1f:a3:5b:cb:c6:26:fe:58:be:b1:7c:7c:4b:8c:71:
e8:ef:91:12:17:9a:e5:8b:d0:3c:60:93:a3:75:db:
a9:b6:db:d7:c2:79:da:37:34:58:0f:78:3a:fa:6b:
0d:38:7b:96:8a:7f:c5:b3:2a:ca:20:1c:7a:65:3d:
85:a3:d8:22:a7:b5:81:49:a4:c3:78:c4:1a:7a:08:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:9C:71:E0:41:69:2A:B3:BE:05:4D:A0:B7:F6:CA:FF:07:9F:F6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/v42cceBBaSqzvgVNoLf2yv8Hn_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e9:b9:7b:be:4e:d3:96:00:4e:ae:77:33:d6:75:01:cd:27:
c8:0c:09:23:76:8e:35:a4:b5:4e:f8:57:24:47:d0:5f:69:f4:
88:78:f4:08:56:75:df:0c:28:03:37:17:d8:b2:f2:da:1d:01:
a3:59:d4:83:15:23:92:2e:10:5c:6f:cb:24:6b:a1:4c:ce:67:
53:7d:1e:1d:f7:02:de:e7:2d:0e:f1:73:04:02:d8:aa:1c:10:
6a:83:a4:aa:a9:d3:5f:26:60:0c:29:e2:00:e1:8e:9d:1d:c9:
a9:72:77:95:f3:95:3b:6d:4c:b9:5e:9e:d7:69:c7:e1:50:3c:
9c:1b:cc:14:07:ff:c8:f2:da:c8:7a:a0:8a:5d:89:0e:ba:2b:
f7:e0:17:03:84:da:d5:12:28:b2:54:77:f4:96:ff:c7:b2:05:
a1:44:1e:9d:c6:48:be:4e:20:34:8d:9b:68:d5:ff:51:56:01:
e1:c0:f3:bc:03:c8:3f:07:68:6b:04:cf:75:07:34:09:0a:bc:
25:d3:26:72:f4:eb:e1:bd:b1:1a:bb:53:5d:57:b8:f7:b3:f0:
e1:ad:9a:0f:35:5b:7d:50:1e:c2:a4:aa:09:e5:82:c3:5f:17:
c9:7b:51:de:d1:0e:1d:10:20:ae:ac:30:ac:52:c1:3c:fa:29:
1b:af:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:32 2025 by rpki-client