Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa
File: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (raw, json)
Hash identifier: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=
Subject key identifier: 1C:B7:90:17:1A:52:03:03:B9:37:5A:59:28:C5:F9:E9:0F:A1:07:5C
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0194266BD5141C59C0D328894966BFDDE662
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.130.0/24 maxlen: 24
77.73.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:14:1c:59:c0:d3:28:89:49:66:bf:dd:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb790171a520303b9375a5928c5f9e90fa1075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:ac:ea:60:63:9f:d8:17:c8:a1:75:ca:17:
f8:97:5f:93:c1:e1:22:d8:e3:9f:5d:b4:80:70:36:
76:3e:ac:53:58:63:d1:72:3c:76:a4:32:0a:dc:fa:
7c:a5:47:82:0d:35:1a:87:85:f3:ef:6d:3d:5d:d5:
05:48:3a:b1:ad:04:ea:43:98:6a:71:27:c1:fa:1b:
b9:65:a7:a8:c5:2d:e9:53:a2:01:58:f4:9c:86:52:
65:7b:41:87:f0:62:98:0b:6d:22:2b:d6:e3:88:8f:
a6:49:d5:9e:81:b0:3d:45:4f:d9:92:86:24:a0:5b:
91:fa:43:a1:61:2b:1f:84:ba:2f:9d:de:3e:cf:7a:
f2:7c:52:bd:3a:b1:f7:9c:4c:24:0c:f2:f2:8c:72:
8c:7d:25:17:f3:66:e5:70:e4:9b:71:14:9c:8c:25:
58:5f:e5:f1:3c:c1:e1:e7:1f:e8:b0:4b:33:3d:bb:
d6:0e:35:b1:fe:d9:05:05:d9:10:db:e8:56:cd:6e:
8e:d6:4e:e2:d4:b6:78:a5:92:ff:a6:ed:fb:6a:d6:
46:e1:ad:79:5c:b9:e3:33:b0:47:db:f1:bc:42:46:
c1:51:a5:1c:50:f6:8e:ed:91:53:03:72:8b:e7:7c:
34:5d:e1:cd:3f:0c:0b:16:ca:3e:62:97:3a:06:21:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:90:17:1A:52:03:03:B9:37:5A:59:28:C5:F9:E9:0F:A1:07:5C
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.130.0/24
77.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:07:35:6e:29:98:65:e1:83:e3:65:a4:f6:8d:15:ff:76:76:
2d:ea:82:d6:4e:6a:b2:56:8a:e5:de:f1:b8:ae:43:33:a3:6d:
a6:d3:04:fa:77:fa:19:c6:7f:bf:92:10:1a:18:48:ee:e7:8c:
8c:cc:a9:6f:c1:31:eb:93:17:64:3b:51:15:3b:34:61:17:44:
98:94:98:67:63:2e:34:03:29:95:c4:1b:d0:eb:1a:42:67:38:
90:5c:37:03:6b:40:3e:3f:40:11:6e:a2:d6:51:54:ef:90:f1:
03:d1:bb:77:10:a7:82:01:70:95:b2:70:43:13:58:36:b9:23:
d4:22:64:11:df:e4:02:a4:7a:3b:e8:a4:fb:6a:7a:fc:41:59:
7d:a6:fb:c3:86:48:bb:cf:1a:b9:76:d5:da:f8:76:c1:2d:a5:
b2:93:72:bb:54:99:cd:38:6a:40:bf:80:fa:7a:6e:30:ae:b5:
3b:e6:f7:61:22:7c:16:1c:03:16:7d:fe:72:f0:f9:e7:e5:93:
5d:bb:a3:a5:9c:67:5e:a2:84:ea:2a:42:55:22:f5:e4:2f:d1:
4b:6d:ba:ec:c7:dc:01:ee:bd:5b:89:ce:2a:f2:6c:bc:e9:d2:
d9:03:64:7b:8c:72:37:21:87:8a:2e:f1:75:d9:9a:12:16:55:
c5:f2:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:14:00 2025 by rpki-client