Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/EOgnkpCGO25TfSV28ABNiElbHMI.roa
File: EOgnkpCGO25TfSV28ABNiElbHMI.roa (raw, json)
Hash identifier: xamMOb/MG2jklBJl6shRJRNZ2UW4izFBKtZBvXEcSVg=
Subject key identifier: 10:E8:27:92:90:86:3B:6E:53:7D:25:76:F0:00:4D:88:49:5B:1C:C2
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 01941F8C38D6A11999C4E801112441C32C29
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/EOgnkpCGO25TfSV28ABNiElbHMI.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212745
IP address blocks: 77.247.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:d6:a1:19:99:c4:e8:01:11:24:41:c3:2c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e8279290863b6e537d2576f0004d88495b1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:5e:1e:d9:6e:7c:6f:5e:a7:97:99:04:1f:
16:69:09:88:ee:33:e0:23:15:29:6b:89:a7:27:00:
6f:a2:9b:d2:e3:17:4a:d2:e1:bc:a6:fa:1e:2e:1f:
68:36:02:bd:e8:ae:01:62:99:76:5a:ad:02:90:2e:
db:59:1d:21:e0:89:cf:34:e3:d5:5a:ec:d0:3e:f8:
35:02:52:e7:25:fe:9d:ef:09:4b:13:7f:3f:c2:d2:
9b:91:3d:2a:ab:7c:40:57:ea:12:1b:75:e6:4c:d0:
71:1e:2f:0b:ca:3d:b6:5f:93:60:9b:69:9c:bc:14:
8c:5d:d7:10:2e:78:28:ec:37:4f:b5:d7:c3:62:88:
16:fe:52:ca:1f:fe:8f:96:5e:a1:54:84:c1:73:4a:
dc:a2:0f:b1:39:cf:50:5f:31:91:4d:66:0c:64:a9:
d9:ca:2c:38:2f:66:11:8c:bc:36:9f:65:fb:34:8d:
8f:4b:89:48:6d:56:86:9c:28:82:35:62:73:17:90:
7b:44:76:8b:39:89:fc:2c:a5:07:e9:7b:82:79:cb:
48:79:a6:75:15:31:71:5f:85:0e:a0:86:be:f1:68:
36:e3:03:df:b1:c1:3e:74:21:e1:36:0c:89:91:d7:
a5:f3:28:21:21:d2:d5:93:ea:1e:7e:7f:09:c0:11:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E8:27:92:90:86:3B:6E:53:7D:25:76:F0:00:4D:88:49:5B:1C:C2
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/EOgnkpCGO25TfSV28ABNiElbHMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.193.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5c:50:f0:d0:51:0b:33:f0:a0:90:c7:6e:76:59:cb:4e:5c:
26:d4:27:5b:53:76:64:fa:94:46:6f:26:19:5d:5c:a5:04:ce:
ce:72:8f:0a:7e:77:48:c0:9b:e0:c6:ca:c3:13:69:db:19:84:
a9:6e:9a:d9:74:02:9b:6c:c0:b2:8e:97:f6:0b:3d:15:02:bf:
eb:53:92:93:5c:b2:ff:2a:80:5c:63:14:b4:06:7e:1c:90:51:
90:38:a0:67:d6:3f:e4:d9:0d:18:56:cb:67:5d:d4:2a:d9:51:
d5:51:05:01:2c:2c:f1:d4:7b:d8:91:df:9c:cf:53:53:a0:2f:
64:67:94:4d:05:00:85:a3:cc:30:1c:aa:4e:9a:17:1c:3f:a2:
d6:6c:69:e4:d2:ed:db:d6:68:d1:a2:8e:62:a1:6b:be:e2:9e:
66:b6:74:cf:50:fd:45:82:a0:5c:35:06:2c:cb:7c:8f:83:b4:
d5:63:e1:ba:58:0d:c0:32:87:c1:09:bc:8e:59:bf:4a:54:c6:
96:a9:43:5d:1d:a3:f4:9f:67:72:a7:3c:31:f7:33:b0:ec:e8:
71:9e:f8:18:ec:13:aa:6b:0b:d3:19:8f:11:21:de:ec:f1:67:
11:3d:ec:3c:29:81:2b:88:5d:96:29:66:5d:37:13:db:89:5f:
a7:79:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:10 2025 by rpki-client