Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VJwaUjw9YSp9dM4CvRCRlk11lU0.roa
File: VJwaUjw9YSp9dM4CvRCRlk11lU0.roa (raw, json)
Hash identifier: 64Hf0SVzLJDgRArxljyjnDRNgigd92h+cE4AeGUf0EI=
Subject key identifier: 54:9C:1A:52:3C:3D:61:2A:7D:74:CE:02:BD:10:91:96:4D:75:95:4D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019407F514ED1A5E0BC8003213B5689EC8E6
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VJwaUjw9YSp9dM4CvRCRlk11lU0.roa
Signing time: Fri 27 Dec 2024 11:51:29 +0000
ROA not before: Fri 27 Dec 2024 11:51:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 77.246.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:f5:14:ed:1a:5e:0b:c8:00:32:13:b5:68:9e:c8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Dec 27 11:51:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=549c1a523c3d612a7d74ce02bd1091964d75954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:74:99:01:97:54:b8:d6:3d:59:64:3f:fe:
2e:40:ca:28:7d:9c:bb:0b:74:10:ec:a8:bc:b4:66:
4c:de:db:39:33:29:33:09:8d:38:a1:51:00:0b:cc:
6e:b8:19:98:56:6b:26:49:7b:db:9a:af:d0:ca:d1:
60:c7:c7:34:d0:e6:d2:a7:79:ea:d7:04:c2:6f:10:
cd:af:ea:d8:b0:b3:b5:55:97:b3:e3:88:d2:e2:15:
e1:40:0f:a5:59:80:ac:1e:48:d4:bc:e3:68:ec:4c:
d6:03:86:87:e9:0a:7c:cb:28:e7:c3:77:13:00:9c:
24:15:6b:30:f6:1c:0a:7d:c6:c4:28:25:6f:86:de:
23:df:a7:37:40:65:30:f4:d6:cc:b3:e1:1b:75:70:
e6:c7:c2:70:b7:f0:12:ec:00:55:86:5a:1b:e6:05:
30:42:05:d6:0a:16:30:e5:c9:aa:79:d3:1d:6d:b8:
32:b0:4f:4e:3b:e1:fe:b6:bd:88:4c:8e:7d:5c:ff:
a4:3f:ae:f4:83:94:f1:40:8f:c9:2d:15:43:16:38:
80:d6:8b:f9:98:8e:3b:21:1e:93:d2:02:b3:22:0f:
c0:0f:48:5d:8a:3c:69:f4:0f:d5:f2:55:45:f6:c1:
6b:e5:c3:a2:60:47:6e:fa:dc:71:f7:46:cd:36:05:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:1A:52:3C:3D:61:2A:7D:74:CE:02:BD:10:91:96:4D:75:95:4D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VJwaUjw9YSp9dM4CvRCRlk11lU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2f:32:0a:b1:db:ea:75:4a:31:c7:fc:25:4a:75:23:1d:5b:
46:b0:aa:f8:23:25:de:12:52:d0:53:1f:ea:6a:ad:d9:6e:d9:
de:fc:2d:e4:a4:57:38:bb:e0:14:8c:96:e9:73:c8:33:fc:c2:
63:66:1a:23:cb:73:b1:26:48:df:6b:cb:8b:e0:ea:fc:07:c4:
83:a7:1e:ab:2b:02:68:15:d1:04:90:01:bc:0c:07:97:7a:6e:
e9:8b:59:6e:4b:f4:ae:19:9a:d3:71:dc:a4:f0:c5:5a:bc:43:
f7:73:f1:19:e3:a0:c4:35:55:62:84:3f:04:90:b2:25:cc:7a:
e4:b1:7b:5f:35:50:22:6a:f5:b1:c9:11:90:ed:6e:e2:df:8b:
74:1a:d3:20:65:10:4f:69:cd:53:bd:a5:43:bf:ce:09:34:a3:
d3:c2:7a:87:fa:05:51:ce:0f:27:a1:72:30:cb:fc:ee:35:f7:
b9:0a:92:70:38:35:a6:6b:93:51:7d:7e:58:cb:98:aa:98:3c:
6f:e8:5f:6c:79:8b:f8:7e:a3:12:77:27:30:c3:61:15:59:e8:
36:f4:1d:6b:4f:29:9b:6f:ab:78:e2:58:2b:c6:0b:f7:d7:8b:
19:3c:70:62:0b:76:21:a9:52:f5:4e:6d:fb:18:23:75:d6:9d:
3c:83:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:39:19 2025 by rpki-client