Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UqRTo9zfPVco3yYn5nw6sqcSIPY.roa
File: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (raw, json)
Hash identifier: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=
Subject key identifier: 52:A4:53:A3:DC:DF:3D:57:28:DF:26:27:E6:7C:3A:B2:A7:12:20:F6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D217720B6279A82E9E5FF080CF4E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UqRTo9zfPVco3yYn5nw6sqcSIPY.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:17:72:0b:62:79:a8:2e:9e:5f:f0:80:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52a453a3dcdf3d5728df2627e67c3ab2a71220f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:ac:29:d8:a6:6c:75:08:13:7a:92:5e:a0:
83:23:2e:d4:7a:70:1b:52:58:07:cd:4e:14:42:d2:
24:fa:e1:82:a8:5b:7e:06:80:2e:1e:2b:78:98:6a:
62:3f:c2:7c:17:13:ea:7d:b5:51:c1:ac:31:a8:71:
10:a3:60:a5:49:f4:44:82:f9:86:f7:ad:6a:6f:14:
61:3e:8e:53:7d:78:00:9a:c1:51:d3:db:35:fb:6f:
85:b4:5f:cd:8c:2d:2d:30:d1:57:14:9b:41:ab:37:
61:35:9f:ae:1d:a6:8b:b5:b9:18:40:a3:9c:ff:76:
61:bb:12:3b:f9:4d:ee:30:9a:ac:b0:2d:5e:a1:d4:
6a:3f:ff:52:ca:4b:77:77:6d:45:82:55:48:7d:73:
8b:0d:2c:c9:dc:41:07:9a:fd:b7:d7:4d:6c:3e:48:
67:ff:df:1b:b1:f8:9e:e4:9e:02:1d:74:0f:c1:c2:
79:42:92:2d:41:8b:52:a7:62:5d:dc:77:76:7b:32:
e8:9a:24:c4:93:2e:38:42:f0:ea:07:70:64:bf:04:
4e:f7:8f:be:01:76:14:04:f8:23:a8:6c:49:b4:6d:
49:dd:45:6a:c0:06:80:b1:e9:9c:dc:db:46:af:41:
38:07:95:ee:24:f9:64:14:1e:5d:f3:1f:24:f2:dd:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:53:A3:DC:DF:3D:57:28:DF:26:27:E6:7C:3A:B2:A7:12:20:F6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UqRTo9zfPVco3yYn5nw6sqcSIPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f5:79:47:3a:ba:b8:78:24:1e:c6:ca:97:5f:bd:ed:3b:27:
2e:4f:aa:eb:aa:e1:c0:54:d1:d9:2f:aa:1d:48:dd:28:d1:bb:
7f:4e:19:bd:06:d2:a2:2a:53:fa:02:7f:4c:f1:24:8d:ad:08:
95:33:c1:b2:f7:73:6b:bb:1c:32:af:0d:dd:20:d0:10:10:c5:
5d:e6:aa:a5:38:b7:ba:34:c8:50:e5:35:7a:3e:bf:0e:7c:19:
f4:18:14:66:29:dc:f9:3b:fd:a1:51:18:6d:f5:09:65:d3:79:
3b:5f:e4:b5:da:a2:60:25:70:fa:32:7a:7c:26:18:57:03:a0:
9b:8c:3c:4f:49:a6:5f:81:b2:7b:02:37:c8:37:bb:0c:77:56:
71:e3:5f:9d:52:a0:fb:4c:c0:9a:87:28:0d:9e:89:12:a3:97:
29:30:09:e3:e4:4b:f2:f4:54:9a:d9:7c:d9:26:36:80:73:cf:
a0:d2:5f:34:a6:cd:68:d6:30:5f:e8:0e:b9:a3:de:d6:bf:b3:
47:b5:7a:97:0e:ab:3b:ae:fe:c1:58:c1:3d:27:a5:f8:ae:55:
cd:05:93:38:4f:cf:69:66:62:58:ca:5d:ae:55:15:f8:7b:da:
ba:03:12:26:7b:db:8b:37:8b:aa:dc:cd:30:2d:86:9a:e7:65:
c2:cb:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:08 2025 by rpki-client