Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Db2iAbS9ejYfycXSQZBHOznsDg0.roa
File: Db2iAbS9ejYfycXSQZBHOznsDg0.roa (raw, json)
Hash identifier: qTKzHMT/LJGXJAgzpsHoXVNTn3nht00CRIupCP6ZQXQ=
Subject key identifier: 0D:BD:A2:01:B4:BD:7A:36:1F:C9:C5:D2:41:90:47:3B:39:EC:0E:0D
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09ECBBD3
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Db2iAbS9ejYfycXSQZBHOznsDg0.roa
Signing time: Sat 01 Jan 2022 04:56:16 +0000
ROA not before: Sat 01 Jan 2022 04:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210089
IP address blocks: 79.110.169.0/24 maxlen: 24
2a0d:1a45::/32 maxlen: 48
2a06:1e83:caff::/48 maxlen: 48
2a06:1e86:babe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166509523 (0x9ecbbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dbda201b4bd7a361fc9c5d24190473b39ec0e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:c2:c9:ba:65:48:09:84:ba:62:20:29:ff:
a2:cf:04:fd:13:fa:47:78:67:1f:8e:32:83:3a:c2:
db:9e:64:d0:72:d5:4b:4e:2d:0a:e4:9d:1a:b0:4c:
e4:9f:d6:ad:35:a8:f0:66:a4:5b:d5:27:de:35:e4:
d5:8b:52:4c:75:d8:31:94:b4:fe:01:27:09:0d:0d:
f7:3f:fc:44:b4:fe:41:ec:f8:e7:14:53:ab:80:51:
9c:0c:97:4c:f6:eb:81:63:88:2f:b0:41:bf:53:68:
6e:8e:1d:e1:d3:48:6d:33:ef:ca:ac:67:5d:8e:b6:
ac:b1:77:21:70:f5:5a:bf:91:a0:ae:f6:db:81:1a:
b6:44:df:d0:ab:da:da:24:5c:77:2e:1d:ac:eb:d9:
eb:e9:1d:12:e2:77:50:62:cb:71:e3:b7:d6:10:94:
1d:05:4c:a4:51:05:60:82:48:8f:d2:b2:63:0d:44:
b0:bd:cc:d3:be:2a:e9:de:29:ba:24:54:9e:0a:66:
e8:28:eb:d9:63:22:92:6c:b5:1b:9f:bb:90:48:00:
ad:fa:af:31:7e:e0:6b:f9:2b:03:7c:a1:85:1e:76:
ec:ad:78:5b:93:89:47:8a:3a:18:4a:3c:fc:28:4b:
1f:d5:c1:85:13:41:55:7f:3d:05:32:9a:95:64:cc:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:A2:01:B4:BD:7A:36:1F:C9:C5:D2:41:90:47:3B:39:EC:0E:0D
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/Db2iAbS9ejYfycXSQZBHOznsDg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.169.0/24
IPv6:
2a06:1e83:caff::/48
2a06:1e86:babe::/48
2a0d:1a45::/32
Signature Algorithm: sha256WithRSAEncryption
70:19:c0:92:5f:32:9e:5a:31:08:47:dd:f9:1d:e7:d2:b1:54:
fc:88:93:02:cf:c9:2b:fe:20:0c:60:c1:ce:40:33:0e:74:3c:
aa:30:ba:42:1b:b2:ac:b8:1f:f7:c8:26:a4:a3:6a:e1:8e:17:
10:e5:fa:e7:16:04:33:13:ae:f1:1e:e9:a5:3f:61:3b:a3:1d:
5d:b2:66:c4:fd:54:f4:be:ed:76:27:c7:f7:ed:c1:b0:d8:5d:
62:4f:cf:ae:c0:f8:73:79:e1:1c:91:df:66:b7:61:5d:59:00:
84:b4:c2:64:3e:d5:5e:09:e2:20:b6:6b:13:d4:f8:8b:78:6a:
2a:11:92:2f:da:0b:df:80:67:8e:63:3f:7e:d9:e8:77:b5:3e:
c9:6b:28:1d:ea:f4:7a:bb:06:1b:dc:c0:05:24:b1:3c:f2:c3:
ad:49:5b:d6:b6:d4:91:5b:39:fc:e2:d5:d8:c8:76:4c:a4:d5:
c2:84:60:ff:04:a6:c8:1e:14:78:33:b5:11:da:86:ed:f0:78:
ad:f0:f3:42:01:6f:a8:dd:54:13:45:d9:c5:74:92:2b:fd:bf:
2c:f7:9f:f8:8f:29:ba:eb:a7:55:ba:2e:ee:8b:67:ba:38:c4:
ae:7d:96:aa:86:65:24:b9:fa:80:43:1c:e8:9f:8a:fe:7e:b0:
f9:27:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:18:53 2025 by rpki-client