Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa
File: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (raw, json)
Hash identifier: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=
Subject key identifier: DE:A2:8B:53:8F:E1:9E:17:AF:C9:0D:B1:CE:3A:EC:9F:12:B3:F3:0C
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019427B66DD916E8A6E988B627BD559F3ED5
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa
Signing time: Thu 02 Jan 2025 15:50:54 +0000
ROA not before: Thu 02 Jan 2025 15:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42309
IP address blocks: 77.240.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:6d:d9:16:e8:a6:e9:88:b6:27:bd:55:9f:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jan 2 15:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dea28b538fe19e17afc90db1ce3aec9f12b3f30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:1f:36:e1:36:46:95:f2:e5:7b:e5:9a:63:
28:62:17:a0:cb:90:c0:5c:e2:19:bf:c1:24:e2:80:
80:a4:c9:3a:c8:a7:55:2a:0c:08:f1:6b:12:b7:57:
3f:61:2d:77:08:69:69:0a:48:c7:7f:0d:92:9a:f6:
e3:b2:75:4a:61:cf:95:bf:e5:ff:94:9c:04:34:93:
b8:ba:8c:2c:0e:69:68:47:bf:03:1a:cd:44:4d:aa:
e1:e5:c1:ca:ff:7a:38:8b:3e:d3:34:4c:18:80:2e:
f8:5a:35:9d:d7:3d:69:5c:3a:be:19:8d:26:a6:f3:
d9:a5:03:17:57:ea:01:c5:c8:3f:40:62:45:cf:c1:
8a:b6:a5:83:47:1d:0d:25:dd:e1:43:58:6d:f5:d3:
7a:9a:19:56:ab:ad:d2:a2:32:97:b7:a8:a6:d9:71:
31:68:1f:39:24:5b:8b:1e:9b:69:2d:27:3b:4f:64:
34:33:5e:a2:0c:c4:6a:90:54:e9:29:e7:8b:12:c1:
24:32:6a:5e:45:07:c9:c9:2e:b3:18:09:3f:9b:e2:
db:73:eb:0b:aa:2d:41:33:53:d8:58:be:ed:66:7c:
0a:46:f3:e6:77:e6:6e:d9:85:45:2a:42:fe:4e:6a:
85:f9:84:62:1a:a6:db:b0:b2:93:db:af:eb:f7:bc:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:8B:53:8F:E1:9E:17:AF:C9:0D:B1:CE:3A:EC:9F:12:B3:F3:0C
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.208.0/20
Signature Algorithm: sha256WithRSAEncryption
70:9e:60:39:f1:4b:96:27:f5:96:03:a7:3b:a9:b3:e9:6a:a4:
38:50:ec:7f:9d:10:17:26:f2:b2:79:13:2d:87:0b:76:84:73:
c0:a9:97:57:81:d3:b1:de:e0:ad:2e:79:d7:7a:d5:d1:4b:ab:
60:10:5c:86:49:eb:82:1d:08:5d:ed:3a:c0:4d:b8:aa:ce:7d:
fd:15:08:83:a8:96:e4:d4:53:43:d8:df:5b:49:48:c7:74:04:
35:5c:5c:57:92:5e:41:1e:41:f8:97:c5:4c:92:fe:d8:10:cc:
49:84:0c:a3:c4:39:db:81:3d:30:af:06:25:fc:75:13:86:aa:
04:4c:f5:41:af:71:1b:5e:62:b9:4a:7f:95:6c:ee:88:76:8f:
45:4b:6c:a1:c1:0a:04:02:77:1f:f8:dd:2f:ab:16:65:c4:33:
af:f0:12:49:54:97:f7:18:7f:24:dc:d6:56:60:0e:3d:92:e0:
27:49:2f:6f:9b:5b:0a:f1:48:1a:53:69:3e:9c:49:e3:a0:f1:
b6:b0:61:0c:53:25:cc:1e:a4:b3:09:3f:fe:c9:59:d2:2f:78:
42:f8:f1:17:d0:62:a9:4c:30:88:9b:c1:91:33:e4:df:ef:d4:
fb:d7:61:3c:36:99:fa:8b:95:a5:56:34:cc:ef:c8:ec:52:33:
86:f0:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:24 2025 by rpki-client