Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa
File: FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa (raw, json)
Hash identifier: Y7NpnMtxGd1OVNPFS3Fggo5HticHh8zC2s5H72cAKJA=
Subject key identifier: 15:97:38:5B:F0:D2:FB:36:06:7A:8E:95:F9:85:79:E8:DB:CB:4A:34
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 019424B2667F222DB1AD20FE81163686A551
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 77.223.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:66:7f:22:2d:b1:ad:20:fe:81:16:36:86:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1597385bf0d2fb36067a8e95f98579e8dbcb4a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:0c:1e:72:5f:1c:fb:6c:cf:46:db:b3:66:
a1:ea:17:84:8a:12:5d:77:d7:9d:6b:45:d8:1e:59:
2c:43:27:95:fc:97:f5:d2:bb:03:cc:83:be:22:34:
60:46:80:5c:2f:08:4d:00:bd:cd:94:ef:b4:13:3c:
2c:0d:82:d1:d8:c4:14:ac:d7:3d:4b:a4:cc:64:3a:
53:bf:2e:5a:e5:6f:f2:25:aa:42:0b:3d:8f:c1:f6:
d3:b6:96:95:10:b1:c3:ec:a4:96:e7:fc:18:7c:2d:
9d:e0:c4:9d:5a:57:d8:4e:c6:dd:28:54:43:03:34:
a8:33:ce:55:b9:6b:8c:2a:1b:01:26:04:4a:b0:96:
30:48:63:bf:44:c9:98:9f:71:c1:e1:68:de:88:38:
c6:8b:45:f4:37:e6:97:a3:2c:e4:55:b1:df:60:63:
6e:7a:51:9d:1a:8c:05:d6:8b:91:e7:ff:2b:de:40:
73:78:f4:6b:1c:a6:ab:44:7d:10:7f:26:3b:eb:8c:
94:6c:6b:67:2a:1a:ba:26:28:af:4b:0a:aa:ea:ba:
c2:e7:ba:06:b3:ec:f2:a4:26:bf:b5:d6:fd:a5:20:
e1:40:2a:55:bc:b8:99:98:f2:0e:f5:42:62:9f:3d:
93:83:b4:b0:43:2b:01:16:eb:40:af:77:36:7d:7f:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:38:5B:F0:D2:FB:36:06:7A:8E:95:F9:85:79:E8:DB:CB:4A:34
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.144.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1b:c8:34:0a:18:1a:54:e4:d7:08:c5:b8:06:59:07:84:71:
b6:16:d9:70:51:4a:7e:2b:3f:33:bf:80:8f:13:4a:ee:72:cc:
73:fa:2f:20:e4:ff:c9:8a:a6:7a:97:ed:15:9c:1d:2e:e7:f5:
a7:d8:6e:e8:2c:32:87:12:b6:da:b1:aa:a0:4b:aa:cb:2d:37:
19:01:bc:01:37:2b:9c:9f:29:a7:97:35:40:d9:30:2e:56:6a:
1c:4c:94:e9:07:02:c8:96:15:c0:40:86:10:c9:38:a5:f7:a9:
60:e1:aa:9b:24:d1:27:f2:0e:0d:e6:24:34:46:55:2d:2a:3a:
27:2b:ae:d4:a0:01:10:66:6a:57:6d:e3:9a:5d:f1:d1:0e:32:
6a:8a:e9:1a:be:6a:da:94:24:9a:f0:eb:0b:dc:2e:33:37:95:
86:be:9d:c3:fd:07:9f:cd:ad:f1:32:fd:26:c6:f5:cd:47:6d:
b3:f5:d7:50:58:db:00:65:90:80:1e:de:9d:73:72:a3:48:d5:
d8:f2:32:2a:ee:bc:df:f2:9b:fe:03:cd:cc:5f:00:8c:e6:4b:
41:09:43:cf:fc:72:f3:01:50:d3:b2:ad:5f:4f:89:9e:c0:e8:
e4:47:70:ad:bf:b1:c9:db:4a:01:0d:46:17:70:44:dd:05:a7:
23:54:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:02:30 2025 by rpki-client