Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/l3kIS-H41zLKlD417TNejtnJFY4.roa
File: l3kIS-H41zLKlD417TNejtnJFY4.roa (raw, json)
Hash identifier: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=
Subject key identifier: 97:79:08:4B:E1:F8:D7:32:CA:94:3E:35:ED:33:5E:8E:D9:C9:15:8E
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 019488D4AC5C170EA09B1EE5BF4610074F90
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/l3kIS-H41zLKlD417TNejtnJFY4.roa
Signing time: Tue 21 Jan 2025 12:27:06 +0000
ROA not before: Tue 21 Jan 2025 12:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214507
IP address blocks: 185.227.77.0/24 maxlen: 24
2a13:a1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:d4:ac:5c:17:0e:a0:9b:1e:e5:bf:46:10:07:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Jan 21 12:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9779084be1f8d732ca943e35ed335e8ed9c9158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:fa:3e:ec:ff:21:39:59:7a:e8:33:95:88:
e6:2c:7b:db:63:d6:c6:58:a3:1a:ba:69:11:1b:81:
af:2a:13:3f:98:b3:61:24:63:8d:22:ca:c7:1b:d5:
36:01:64:32:75:cc:7b:e7:2f:99:0c:b6:5a:41:04:
30:77:55:39:d3:3a:de:24:b7:f7:e7:68:5a:e0:88:
79:80:6b:b4:ba:44:19:75:7e:be:c7:27:27:b9:55:
00:1d:51:bc:a1:7d:9e:7c:5f:db:7a:e6:72:7c:02:
0d:f3:90:06:1a:0d:3e:f2:a4:b2:b7:e4:45:58:d3:
af:a7:e1:ec:78:fc:1f:35:2f:9d:82:3f:b9:d0:98:
e3:08:50:93:4c:0e:bc:61:aa:39:11:dc:21:bf:10:
71:77:6e:84:1f:68:9a:c4:23:a6:c4:54:1b:c7:41:
01:42:67:12:e9:8b:16:cf:c9:fe:13:09:1d:94:99:
e9:cc:50:d6:50:72:14:86:53:38:4b:2f:d5:60:b0:
99:03:fb:49:d0:1d:89:17:07:ec:29:f9:1e:ad:1e:
66:69:d9:71:4d:cc:f8:99:c1:a2:20:89:87:d6:5f:
0f:66:70:b7:0c:12:47:9c:18:0d:ee:f0:4d:7a:54:
ed:21:61:cf:0c:87:15:1e:b5:3d:8a:ab:0f:aa:46:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:08:4B:E1:F8:D7:32:CA:94:3E:35:ED:33:5E:8E:D9:C9:15:8E
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/l3kIS-H41zLKlD417TNejtnJFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.77.0/24
IPv6:
2a13:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:8d:21:20:d4:de:9b:c8:95:c5:1e:00:6c:8a:9a:cd:0e:4d:
0a:8b:a0:6d:a1:82:89:6f:70:6a:a9:99:f2:70:d7:f7:38:2a:
94:b9:54:c8:ce:ab:ae:45:77:21:eb:9f:13:3f:6b:c1:be:3b:
c8:2d:b0:ab:6d:e6:01:07:b7:9a:d5:ca:a4:e2:ec:b6:09:26:
a1:01:38:b5:6d:d2:fd:b2:ec:72:52:8e:07:c7:5b:d6:e8:8d:
75:c2:16:4e:9b:4e:e6:1a:5e:3c:81:81:a7:e3:39:4d:56:47:
d3:51:00:4e:a0:32:1f:3e:86:3d:9d:cd:83:1e:04:c1:0b:e5:
93:37:69:91:45:4f:58:7d:6f:78:0b:e3:01:ac:2e:cd:77:ad:
87:e5:58:fc:83:2b:b1:09:dd:91:27:f9:64:cd:05:c4:d4:c4:
f9:64:34:12:db:ea:7e:9d:15:7e:7d:5f:c6:ed:f1:ac:ea:e7:
79:54:0f:e7:d2:52:a6:c8:fe:e7:8f:f3:f7:f2:d9:a1:e5:46:
67:9b:40:b4:c1:bb:55:71:66:ff:db:2a:cf:1e:52:0a:7b:63:
bb:90:3a:08:68:b5:0f:8b:43:32:af:09:ae:ce:42:9a:e8:be:
5c:f0:a0:13:06:86:a0:f6:71:67:08:23:22:74:17:d7:37:99:
2d:19:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:47 2025 by rpki-client