Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/nKtRoxF1P8bnivxJb6cQeiero7g.roa
File: nKtRoxF1P8bnivxJb6cQeiero7g.roa (raw, json)
Hash identifier: jsszUOPa96kQ2ad1yvzZdqSsUQzXaXJi/gNkM9CzNqU=
Subject key identifier: 9C:AB:51:A3:11:75:3F:C6:E7:8A:FC:49:6F:A7:10:7A:27:AB:A3:B8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01888ACBCC27F98392E1C8A8EDA419FE9DFF
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/nKtRoxF1P8bnivxJb6cQeiero7g.roa
Signing time: Mon 05 Jun 2023 09:03:11 +0000
ROA not before: Mon 05 Jun 2023 09:03:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204603
IP address blocks: 77.73.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:cb:cc:27:f9:83:92:e1:c8:a8:ed:a4:19:fe:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jun 5 09:03:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cab51a311753fc6e78afc496fa7107a27aba3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:1c:f1:95:80:86:bf:e0:4e:dc:91:57:06:
cc:01:d0:f2:94:d5:10:11:50:3c:c7:1e:bd:68:79:
28:e1:b1:35:4c:ec:13:78:1f:ef:56:c0:1a:20:47:
9c:fe:60:b3:4b:ee:cb:07:cd:5e:de:b3:2b:0d:51:
cc:59:d8:cf:da:92:b6:a4:dd:3e:07:10:f7:46:f5:
f1:91:23:68:1e:14:3b:38:66:f9:84:6c:fb:bf:d4:
a5:2d:c9:11:12:b3:68:88:ed:37:cd:15:35:d0:4e:
b0:33:ae:3f:3e:90:4d:f5:d6:7c:47:46:fa:55:f4:
12:e0:23:10:ed:d3:86:51:24:87:5f:c7:fb:a9:45:
fb:57:d8:59:eb:4b:fb:21:54:25:3a:86:4a:d5:12:
a8:bf:d4:01:23:4d:04:e0:64:84:0e:a8:7f:cf:57:
59:64:d7:db:f0:3c:56:d1:ee:79:7d:11:d5:15:a2:
fc:4a:d6:7e:ff:a6:0a:3d:e1:03:78:e6:25:2a:17:
de:be:75:35:72:55:c4:44:a3:e8:f9:0e:77:c0:ff:
6e:b0:5d:e6:8d:8b:d2:ae:2d:15:c0:0c:03:e6:6c:
2b:dd:19:88:3c:a8:b2:43:10:73:2e:28:77:67:f8:
a2:43:4b:74:84:b7:d6:a6:a9:dd:46:a3:1a:7f:5f:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:51:A3:11:75:3F:C6:E7:8A:FC:49:6F:A7:10:7A:27:AB:A3:B8
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/nKtRoxF1P8bnivxJb6cQeiero7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.134.0/24
Signature Algorithm: sha256WithRSAEncryption
09:59:02:2a:62:0b:c3:73:7e:bc:16:83:9c:6d:df:59:15:85:
68:45:62:83:21:4c:e0:e8:51:73:18:90:4b:79:74:df:6b:c1:
66:7f:c9:0a:b5:5b:0a:88:b7:1f:b8:01:25:cd:da:71:57:79:
94:0e:62:42:52:ec:25:b0:a3:ca:87:f9:ef:7f:02:8a:9d:66:
57:d3:82:51:3f:d6:a7:08:c2:e1:39:42:3d:f0:0a:c9:20:e7:
2b:e1:3c:98:24:a3:8b:64:4b:8d:3a:68:55:96:a1:4e:7a:86:
f6:ab:15:17:5f:4f:ed:65:34:05:34:9a:f7:cc:84:54:b5:15:
b2:ca:b5:5e:4b:a2:7a:f0:67:b8:1f:57:46:94:da:f0:ca:f8:
15:7f:b6:29:c8:3c:be:04:c0:e3:22:d1:13:dc:a6:15:db:29:
74:6e:69:39:e2:5a:a7:65:78:3c:d0:40:68:97:32:51:c0:14:
00:9b:0e:3b:91:95:5d:ae:23:40:74:61:4a:ba:c6:46:67:23:
45:84:62:5b:fa:5a:56:c1:15:0a:0a:1d:21:fd:5a:df:c5:3f:
a0:87:27:e3:a3:52:59:2a:c3:6e:28:f9:fc:bf:73:f3:7d:1b:
f2:d7:47:3c:07:f0:20:90:63:bb:87:3a:7e:e1:81:6a:7c:e1:
c8:d2:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:16 2025 by rpki-client