Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_FZRXOMw8cJ5_jns8AW1s_1FtCE.roa
File: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (raw, json)
Hash identifier: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=
Subject key identifier: FC:56:51:5C:E3:30:F1:C2:79:FE:39:EC:F0:05:B5:B3:FD:45:B4:21
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019426D99B60250B3063BB63C2AC04B61EFD
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_FZRXOMw8cJ5_jns8AW1s_1FtCE.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215428
IP address blocks: 77.105.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9b:60:25:0b:30:63:bb:63:c2:ac:04:b6:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc56515ce330f1c279fe39ecf005b5b3fd45b421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:44:dc:40:77:c6:9c:86:66:8b:b4:53:9c:
c5:99:89:9e:6f:ee:59:6f:ca:c3:bc:60:ce:fe:de:
39:e3:6b:82:87:dd:4f:98:9b:53:c2:07:37:31:56:
b2:db:a4:b1:14:cd:2e:84:54:cb:24:5b:ce:e7:e0:
c9:3a:a0:17:0a:2b:e1:12:9e:07:f3:6c:fd:9a:a7:
44:c7:2f:49:3c:2c:2e:ab:c6:26:a5:b0:97:65:42:
9d:9b:fd:7d:3d:bb:93:8d:bb:b8:f9:a9:d1:1c:ee:
9b:a4:b1:77:fe:91:74:a8:00:84:72:10:10:e9:54:
3c:84:05:8f:33:01:75:6a:25:e0:d3:b0:e8:ce:0d:
9d:3f:46:d9:7d:70:bb:60:5c:2a:82:72:a1:e3:ad:
13:71:83:d3:73:54:de:2f:4b:23:80:27:8c:d2:7f:
eb:4d:58:ed:71:26:12:b3:b0:ed:5a:11:91:1e:07:
c8:1e:b3:b3:bd:08:89:77:7a:64:ee:5e:2e:31:f4:
72:c2:4d:9b:ed:d9:27:05:15:cf:40:97:c4:21:14:
83:23:52:7a:29:27:d4:56:48:d8:e1:fb:36:a5:9d:
84:75:d1:2b:8e:67:fb:99:b4:7c:50:28:ef:f5:23:
be:1f:dc:de:f5:d3:78:5c:e6:4f:cf:ed:01:0e:67:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:56:51:5C:E3:30:F1:C2:79:FE:39:EC:F0:05:B5:B3:FD:45:B4:21
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/_FZRXOMw8cJ5_jns8AW1s_1FtCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:31:49:bc:47:54:26:5d:08:22:a7:c9:3b:8c:aa:d3:25:08:
1b:9e:4e:ac:ef:4f:15:3f:e3:7e:41:34:b5:5d:3b:d8:c3:b2:
41:9f:7f:03:cf:bb:cf:6f:13:7e:d2:ac:5a:83:c7:1d:23:10:
2e:49:97:0c:30:27:cc:24:f7:8d:cd:34:c3:1b:a8:ee:13:f0:
d5:c8:c7:a4:15:00:0c:a5:21:ec:b7:ff:32:cf:dc:22:6c:91:
1d:17:0a:7a:8f:42:27:95:7e:67:40:0a:86:6f:4e:05:4e:a8:
7e:b7:8d:5a:64:0c:de:ef:94:a9:80:d6:d2:81:b5:23:02:c7:
6d:ee:be:69:7c:35:bb:57:5f:ba:b3:16:65:ef:5d:1a:d4:b9:
e5:5d:e1:ef:4e:14:d5:cf:3e:1b:de:c7:42:cc:43:b8:42:e2:
e2:12:da:f6:c4:3f:18:d4:df:38:0d:eb:a6:0b:05:41:80:ff:
93:c3:30:7a:6e:b7:e8:e4:0f:2c:f9:b8:2d:ec:f8:5b:6c:98:
de:b5:a1:b7:75:75:e2:94:30:b0:41:63:3e:c7:dd:02:12:d5:
79:3f:0f:27:33:db:a5:e1:29:11:b9:bb:8f:91:38:d3:4a:9a:
44:29:31:b7:82:3b:6d:cb:d2:61:40:fe:96:01:0d:b2:9c:5a:
4d:95:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:12 2025 by rpki-client