Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kZwWILiy81Zysg9lr8pWjFCtPIM.roa
File: kZwWILiy81Zysg9lr8pWjFCtPIM.roa (raw, json)
Hash identifier: WDx6avf7em33F0TQFoBv1oit65I+jKkkCdj9ZFcLNTA=
Subject key identifier: 91:9C:16:20:B8:B2:F3:56:72:B2:0F:65:AF:CA:56:8C:50:AD:3C:83
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0193D90ACD70705380BD488807A0F181F895
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kZwWILiy81Zysg9lr8pWjFCtPIM.roa
Signing time: Wed 18 Dec 2024 09:13:03 +0000
ROA not before: Wed 18 Dec 2024 09:13:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213702
IP address blocks: 77.105.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:0a:cd:70:70:53:80:bd:48:88:07:a0:f1:81:f8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Dec 18 09:13:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919c1620b8b2f35672b20f65afca568c50ad3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:07:90:02:6a:f9:a7:ea:84:73:a2:9c:68:
ec:8c:23:89:47:3d:9d:f8:2f:5d:c6:c2:b1:9e:d5:
27:60:dc:b3:2b:f2:37:24:eb:20:f0:2e:7c:06:4d:
8e:58:d6:c9:38:e1:b2:08:c5:f4:54:7a:b2:1d:0c:
c9:e4:db:f0:ea:df:ed:7d:34:79:3e:96:ba:04:48:
cc:e1:de:03:65:49:31:9a:3b:1c:ea:1d:f7:db:52:
25:38:96:4c:70:be:46:dd:cc:bf:3f:d4:d6:56:40:
38:da:69:f6:9f:ee:3b:05:06:2c:ef:fc:74:05:46:
dc:8e:9d:60:f7:b4:07:ae:d2:85:21:8c:ba:6c:40:
29:aa:05:6a:db:05:52:97:a7:0d:35:59:4a:9c:a1:
9c:32:00:5d:f9:10:67:7a:fa:18:cb:7c:77:4f:df:
2a:69:63:57:df:9e:a7:f2:8e:12:db:fe:81:51:44:
72:0c:e9:26:f7:8b:7f:49:4b:77:fb:ba:cd:60:58:
cb:78:e5:59:fd:b3:49:ca:c8:78:bc:45:b0:f3:d6:
c4:a1:1a:71:23:71:ef:30:bb:c1:f3:db:c3:fe:eb:
9f:f8:e6:84:2c:ef:a7:cf:df:72:f6:b6:67:4c:82:
4d:53:49:26:77:d2:ef:f0:17:4e:31:54:46:66:62:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:16:20:B8:B2:F3:56:72:B2:0F:65:AF:CA:56:8C:50:AD:3C:83
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/kZwWILiy81Zysg9lr8pWjFCtPIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.164.0/24
Signature Algorithm: sha256WithRSAEncryption
33:12:37:bd:95:1e:f6:53:2b:2a:64:ec:2e:24:ad:5c:55:fa:
bc:4c:11:6a:de:24:84:42:c1:53:21:61:35:e6:f5:01:ec:66:
c7:8c:f3:71:72:1f:c6:3a:22:c2:3a:b4:1f:f8:af:25:2d:90:
5e:80:78:15:62:f2:90:4f:28:3f:f1:7c:a8:12:c2:07:3a:4c:
cb:79:01:e7:a7:89:d6:71:44:11:67:7f:82:13:a6:26:71:41:
94:99:9a:ce:81:6f:21:e9:29:7f:07:75:83:d5:1c:59:21:41:
06:0f:4a:c0:b1:08:e1:c6:d8:5e:37:08:84:b6:a0:f2:35:54:
05:cf:c0:98:45:24:03:48:17:94:d9:b8:15:28:4e:a3:50:f9:
54:a1:c4:3e:56:07:ee:1e:ff:bc:5e:c8:2b:82:21:29:39:ed:
29:38:bc:4b:0e:20:b4:a0:e8:b1:ca:95:28:21:ff:d1:89:cf:
48:63:4b:49:a0:b2:23:50:e2:84:fa:68:95:31:af:03:4b:a4:
c4:70:b8:bc:41:3e:64:fd:18:6d:de:25:37:8c:fb:9a:b7:a3:
1d:2a:f5:f8:03:33:5a:09:47:dd:03:92:e8:ed:b2:c3:0c:44:
67:31:9a:59:a4:5b:5b:0c:fa:28:97:f0:a1:41:c0:f3:85:f3:
55:e1:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:32 2025 by rpki-client