Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vW6DP49xFYD9QamGuDpSrklSowc.roa
File: vW6DP49xFYD9QamGuDpSrklSowc.roa (raw, json)
Hash identifier: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=
Subject key identifier: BD:6E:83:3F:8F:71:15:80:FD:41:A9:86:B8:3A:52:AE:49:52:A3:07
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019483A9BCE41DA3962550D35E20CE965805
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vW6DP49xFYD9QamGuDpSrklSowc.roa
Signing time: Mon 20 Jan 2025 12:22:06 +0000
ROA not before: Mon 20 Jan 2025 12:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34568
IP address blocks: 77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
193.138.81.0/24 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:a9:bc:e4:1d:a3:96:25:50:d3:5e:20:ce:96:58:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 20 12:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd6e833f8f711580fd41a986b83a52ae4952a307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:fe:23:f2:ea:9f:7c:39:58:16:42:49:41:
9c:2d:97:61:1a:00:b1:e8:22:31:96:86:59:23:a8:
0e:47:c8:0c:77:7a:21:ed:9f:5d:d4:a2:65:6b:d6:
9b:b8:d3:13:41:21:b7:e9:97:b7:d8:31:d9:92:a5:
aa:44:88:c5:82:ba:3c:2a:70:ef:10:78:c1:fe:7e:
af:25:bb:4a:19:de:b4:61:2c:f0:c3:02:1f:0c:db:
01:39:82:1c:3a:a7:8a:03:35:3f:dd:ec:90:d8:e5:
52:bd:a4:da:e8:f0:fd:e1:57:fd:9f:bb:53:ef:3f:
82:dd:1c:4e:28:6a:97:64:c2:ff:d8:c3:d4:a7:3e:
d0:6f:2b:c7:29:0e:43:f7:f0:70:bf:a7:71:46:81:
22:6d:45:dc:7f:8c:05:b8:a0:38:98:d2:8a:de:de:
5c:64:26:5f:e4:10:23:58:90:43:91:38:79:ba:b2:
55:43:f4:95:ba:3e:7c:6a:81:19:c7:77:ee:df:fe:
4d:1e:40:bd:72:83:5a:c2:2a:71:52:30:ea:0f:36:
d6:aa:27:38:94:ac:4d:7c:63:8d:36:ff:1d:af:c2:
5d:d9:97:aa:44:84:56:8f:e2:95:a9:c2:d3:5e:85:
e9:37:30:dd:7d:0b:a1:8e:3f:c0:f7:5c:a3:09:32:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:83:3F:8F:71:15:80:FD:41:A9:86:B8:3A:52:AE:49:52:A3:07
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vW6DP49xFYD9QamGuDpSrklSowc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
84.246.120.0/21
193.138.81.0/24
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:1b:c6:3e:05:dc:be:c5:ba:01:65:fb:54:f0:67:57:0f:f2:
fa:5c:97:52:e0:e5:6e:65:de:73:c7:68:3e:f6:d8:3b:dd:c3:
fd:df:f2:91:01:19:d6:f6:64:2f:b6:3d:2c:95:95:0c:ce:82:
72:3e:7c:61:fa:18:97:52:53:27:5a:05:a7:72:69:7d:62:07:
15:0e:f6:eb:d6:73:58:2f:c0:d6:dd:37:15:bf:96:09:3b:89:
3a:5d:90:e4:63:fc:4c:f3:7c:7d:28:c3:a4:de:c3:be:32:3a:
84:05:a5:dd:20:5a:da:c1:10:db:52:1a:3a:5d:79:35:d3:4b:
81:0d:7c:c6:60:ed:0f:c9:16:ba:46:b9:d0:c1:18:a1:91:9e:
f0:af:14:94:35:ba:36:b7:2f:48:fe:90:f4:18:db:e2:2a:12:
16:4c:0d:16:02:6a:72:db:1f:cd:eb:33:7c:44:9c:c7:e1:66:
03:9c:8f:d6:55:36:62:90:d1:11:90:01:e6:46:cd:22:0c:d8:
44:16:2e:fa:b3:c9:35:df:c5:70:3f:aa:04:8f:d9:b9:a3:76:
e4:a4:0e:42:16:c6:68:2a:4f:82:ae:68:84:86:1a:3f:d3:6b:
62:c9:8a:38:8d:6e:7f:cc:1d:e4:01:00:28:1b:ee:02:10:04:
bf:de:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:28 2025 by rpki-client