Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/k1SzpHNLnvixn2uUeaxLc54WSYY.roa
File: k1SzpHNLnvixn2uUeaxLc54WSYY.roa (raw, json)
Hash identifier: nSsztbZe3YnZb8KZHUTTCShYwoUF4Y0JA6PXmvUGaIM=
Subject key identifier: 93:54:B3:A4:73:4B:9E:F8:B1:9F:6B:94:79:AC:4B:73:9E:16:49:86
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019367512074312A5F962B3404826637084C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/k1SzpHNLnvixn2uUeaxLc54WSYY.roa
Signing time: Tue 26 Nov 2024 07:13:09 +0000
ROA not before: Tue 26 Nov 2024 07:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 77.246.211.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:51:20:74:31:2a:5f:96:2b:34:04:82:66:37:08:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 26 07:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9354b3a4734b9ef8b19f6b9479ac4b739e164986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:b7:46:c4:a1:6d:24:d2:6f:87:72:05:d1:
9c:54:5c:2b:ab:28:f0:cc:d2:6c:89:d9:54:8e:7b:
67:b0:4f:65:db:d7:e6:3d:b8:76:a5:56:48:eb:95:
c4:55:3c:ab:a1:ff:ac:02:f4:f8:57:13:f9:96:fb:
68:87:cc:b2:c8:b8:7f:d9:93:0a:ca:a8:a8:e2:40:
31:e2:1e:62:b2:3d:cf:a7:bc:82:65:e4:3c:2c:30:
5b:b2:3f:a8:7b:04:4b:2c:e9:65:09:0a:56:b2:12:
b7:e1:17:f6:ca:b2:98:fb:75:4a:c8:f2:b4:44:14:
d4:f0:21:cf:e3:6e:ca:34:01:10:74:c0:3b:6b:a4:
b7:31:77:f4:89:91:0c:35:77:4c:8b:c0:1c:20:a5:
f8:87:a4:79:69:98:72:bf:0c:a8:62:b3:55:d3:6f:
0c:00:d0:7f:d5:66:1f:34:c9:42:29:c3:70:a0:7e:
77:5b:37:9c:56:73:a1:b8:09:10:d4:57:3a:3a:ce:
a0:02:4e:dd:ea:16:0a:43:b7:cc:dc:e7:37:d7:80:
38:6a:91:9f:90:f9:74:88:64:0f:29:94:fa:a9:2c:
09:41:95:9d:c9:38:05:20:81:68:5c:6c:0d:2a:b9:
1d:4a:df:e3:25:25:ff:43:0d:fd:1f:f8:28:e7:ed:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:B3:A4:73:4B:9E:F8:B1:9F:6B:94:79:AC:4B:73:9E:16:49:86
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/k1SzpHNLnvixn2uUeaxLc54WSYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d0:85:fa:17:5d:a1:4c:db:87:d4:4f:47:d9:a3:8c:30:2d:
7b:69:15:98:c3:b5:09:42:5e:d7:f6:a9:96:34:aa:b3:4e:2f:
72:8c:e0:f3:6c:93:a9:df:49:f4:11:7f:24:8b:13:5c:4b:20:
2d:ef:30:15:33:c0:8b:1d:b9:22:6d:7a:54:65:1f:3d:b8:8c:
26:26:79:8e:18:16:60:aa:4e:93:2a:7a:c8:ad:8e:59:26:b5:
f5:de:b7:3d:2e:9e:12:5f:19:b7:a8:4d:ea:e4:42:34:cf:b6:
30:60:31:45:d7:f1:cd:3f:56:bf:6e:c6:31:d6:da:c5:7a:52:
54:87:1b:d5:f4:3e:b5:75:1a:6c:f3:f2:12:6f:36:b3:bb:df:
ca:3e:c4:4a:6d:c3:a4:6d:7d:79:8d:61:f7:ea:d5:22:0e:31:
f2:82:da:c5:91:dc:1d:50:72:f6:4f:a9:d2:6d:68:7f:bd:a5:
77:2a:eb:ac:91:94:21:20:92:4f:6b:76:9d:00:49:26:df:0a:
ba:f7:42:99:2f:d5:f6:b7:b1:4f:bc:c3:c4:9d:4c:6c:13:e9:
a1:23:f0:35:1f:26:03:b5:cb:d7:14:c6:bb:82:83:83:24:e6:
61:26:e4:18:ea:bd:38:73:82:a5:71:35:fb:ca:6b:58:7b:9a:
c8:3f:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:46 2025 by rpki-client