Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa
File: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (raw, json)
Hash identifier: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=
Subject key identifier: 8C:35:A1:44:0B:15:1F:E0:03:58:ED:DF:3C:AC:1A:4B:09:2B:FA:D7
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194DF9847DCAAD365F7F1C024E19343964E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa
Signing time: Fri 07 Feb 2025 08:48:06 +0000
ROA not before: Fri 07 Feb 2025 08:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:98:47:dc:aa:d3:65:f7:f1:c0:24:e1:93:43:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 7 08:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c35a1440b151fe00358eddf3cac1a4b092bfad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:e5:af:ad:b6:ac:92:32:7e:4e:40:a8:de:
63:35:b1:8e:f0:34:16:87:61:81:db:e6:54:07:b2:
0a:37:e8:fa:dd:1b:fe:35:c1:b2:7d:0d:ce:f3:e2:
ae:6f:21:63:e6:6e:63:d8:04:3b:66:ba:8f:bb:2d:
c0:58:47:9b:7a:19:44:c7:01:7e:ca:b6:cb:c2:2d:
94:c0:ef:4e:1b:e9:23:75:28:00:93:62:37:b8:9a:
ec:91:fb:83:b7:b1:e2:6a:78:40:4b:60:53:ec:df:
af:08:28:f9:ad:e5:11:e9:de:a5:88:6d:a5:4c:0f:
43:78:dc:f3:e2:cf:81:78:1a:0e:95:c7:25:b5:88:
ea:2b:d3:d6:4f:20:00:e0:83:52:13:2f:91:97:ca:
4e:5b:29:b9:7c:89:2f:ff:59:6d:6f:97:fa:33:19:
29:80:8e:0a:f2:69:04:0e:83:02:93:4f:9d:84:e4:
10:73:82:da:a7:3a:77:e1:72:f2:06:8f:76:bb:e7:
e1:9c:27:c5:68:57:5f:63:bc:9b:7e:65:11:30:b9:
14:ec:23:13:1a:77:11:71:c2:e2:e9:ff:dd:54:af:
25:81:40:3c:09:b3:df:84:f2:32:60:53:77:63:3e:
61:32:21:f8:80:71:2b:08:0d:d7:23:6f:dd:75:3f:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:A1:44:0B:15:1F:E0:03:58:ED:DF:3C:AC:1A:4B:09:2B:FA:D7
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/23
Signature Algorithm: sha256WithRSAEncryption
58:72:02:f0:5f:49:35:35:57:56:b6:b4:88:1b:62:3e:24:50:
9d:da:f5:0b:84:c3:2a:55:bf:43:7a:e7:74:e0:19:22:66:53:
de:7f:64:52:72:7c:2a:53:3a:f6:a0:3b:b1:8c:99:72:70:5f:
8e:45:33:5e:1a:91:d4:78:1a:a4:3d:ba:be:fa:8b:25:77:7f:
d0:1f:fc:5c:07:06:89:7a:df:e9:4c:17:fd:33:74:d7:bb:ca:
17:a4:2a:84:4b:db:5e:bf:11:61:32:5d:c5:7d:9e:30:6f:89:
bf:3c:07:2d:43:a6:d4:90:2f:e3:11:ac:a0:f0:11:23:a8:73:
e1:15:c0:10:2a:bc:4a:44:83:4d:b3:f6:77:30:33:d6:a2:0e:
2b:47:13:e8:1b:cc:28:85:aa:93:99:79:31:65:ef:1b:e5:0a:
5b:6c:54:75:14:73:e7:1d:24:cb:d0:a8:67:ae:a9:b1:16:18:
aa:2b:5d:a1:50:6c:59:58:8d:b6:81:80:7c:4a:93:b2:c1:60:
b1:15:3b:1e:f4:97:d6:df:e6:94:91:2a:1a:27:14:e3:58:6d:
0d:ee:bb:31:be:89:44:da:18:fa:44:af:e7:8c:ca:0f:4a:03:
7b:5e:ef:c7:4c:08:f8:f9:ba:8d:a4:a9:f0:3d:c6:0b:f4:7b:
31:a4:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:36 2025 by rpki-client