Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa
File: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (raw, json)
Hash identifier: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=
Subject key identifier: B5:70:7F:C6:04:77:ED:7A:0B:8F:74:AC:5B:0D:AC:8E:A8:6A:67:DB
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 019421443F0958243F93C8A877DD538A5DC0
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210459
IP address blocks: 77.81.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3f:09:58:24:3f:93:c8:a8:77:dd:53:8a:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5707fc60477ed7a0b8f74ac5b0dac8ea86a67db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:88:0d:90:21:a9:5c:e1:cc:42:45:9a:9b:
b2:80:7d:a2:d4:96:ae:bd:a5:b8:b2:e3:1b:dc:ad:
8f:99:b8:c6:54:84:92:43:cc:a8:67:1b:c2:79:e3:
3a:5b:3b:aa:ae:0c:b7:32:e7:01:88:22:67:cb:79:
22:ad:09:70:d8:7f:cd:0f:f0:d5:57:08:65:55:79:
38:e9:98:d4:06:fe:b1:cb:64:df:14:9c:62:25:42:
48:f0:1f:7f:cd:cd:15:6b:05:3a:f2:6f:c5:87:70:
ac:2d:d5:18:8e:ac:4d:df:61:a4:04:55:e4:c7:fe:
44:cf:76:73:34:8d:45:c0:c3:6e:d1:8c:f6:6a:ef:
0f:85:79:9e:be:37:d9:17:67:53:8e:cc:9d:5b:12:
b1:10:c5:50:a7:24:84:b2:f0:1c:09:52:e7:c4:24:
b9:09:50:7c:d8:66:e1:ab:60:d5:9c:33:09:95:8a:
5e:20:1f:c9:cf:74:d8:4e:4c:2d:ab:f0:2d:cc:b1:
bd:23:78:00:37:dd:20:02:ac:e4:80:0e:2c:73:17:
ea:0e:f2:7e:ce:4d:13:3d:d6:d0:58:2f:a0:95:2a:
4c:25:e1:a0:61:6b:9d:63:33:65:37:3f:e4:01:04:
16:bd:13:86:62:ba:d4:02:ee:00:8e:13:44:04:54:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:7F:C6:04:77:ED:7A:0B:8F:74:AC:5B:0D:AC:8E:A8:6A:67:DB
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:6c:96:9c:e8:0c:60:d2:1f:4c:22:44:97:07:43:94:8b:
f4:a0:46:cb:56:91:30:28:17:88:1c:bc:0b:30:3a:7b:44:8c:
74:77:a5:39:be:bb:25:96:c4:78:74:2d:7e:93:21:47:e2:6b:
f0:ac:df:a9:bc:40:a5:1e:0a:ba:5c:51:40:b8:44:e0:f0:be:
6d:d1:61:96:61:f6:1e:6d:98:84:f5:88:c3:b8:ed:4c:5c:02:
b9:78:e9:43:f6:0d:d3:47:57:d3:2d:3a:a8:e3:16:30:c4:45:
89:f3:9a:b2:ca:8b:8f:a3:4a:ea:0f:4f:66:ad:cd:d4:cf:bd:
3c:a0:bc:b0:84:82:23:08:f5:1e:e4:8a:20:c0:eb:18:51:64:
d8:ad:0a:1c:99:a2:49:2d:09:d5:ad:ec:67:60:45:32:a0:7f:
a2:6b:29:53:9f:25:d3:ff:20:8b:34:c6:fb:ed:42:dc:da:85:
82:ba:ea:53:a0:45:34:4e:38:68:cf:0c:a2:c9:b2:60:bb:8b:
4b:fe:57:a7:a6:82:a9:97:5c:a7:82:bf:8d:31:87:7b:25:ef:
86:3d:72:b4:01:62:43:4f:06:4e:c2:5c:3a:dd:d5:6d:2c:0f:
56:bb:50:4a:c8:9d:91:42:e6:20:d8:c6:15:cd:10:46:38:5e:
17:45:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:46 2025 by rpki-client