Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/x3D_9p2rugUZ8bWD-2tNP1p549Y.roa
File: x3D_9p2rugUZ8bWD-2tNP1p549Y.roa (raw, json)
Hash identifier: xevoiHRFkpYid6CBadvhCXcxEy0F/4D6AtZDjaDoW/w=
Subject key identifier: C7:70:FF:F6:9D:AB:BA:05:19:F1:B5:83:FB:6B:4D:3F:5A:79:E3:D6
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DCFD7C1A39A0D69E165067F9A3AD6
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/x3D_9p2rugUZ8bWD-2tNP1p549Y.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34568
IP address blocks: 77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cf:d7:c1:a3:9a:0d:69:e1:65:06:7f:9a:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c770fff69dabba0519f1b583fb6b4d3f5a79e3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:1a:99:58:a6:a5:3a:70:82:c8:16:7a:20:
54:e5:3b:28:4f:d9:16:4d:c3:cc:ac:ee:14:23:dd:
b4:3b:4b:46:31:47:f5:8e:44:39:1b:31:6a:85:a6:
e4:66:cf:f0:91:ff:e4:8e:0b:d4:2b:e9:94:f1:12:
23:95:09:39:58:43:dd:2c:7e:cf:9a:00:c8:0d:41:
24:3f:15:80:7e:81:54:ad:e5:e5:b0:a0:72:8e:da:
76:b2:fd:1f:93:cd:02:39:da:d4:3c:22:66:73:74:
90:d2:8d:7b:97:ac:8e:19:44:f2:a9:e9:60:dd:50:
61:83:77:32:ba:75:4c:9b:93:b2:8d:05:3d:d5:d6:
0d:f0:9e:61:3e:09:3c:2a:17:20:80:64:f4:45:20:
61:6f:a2:56:2d:a2:0a:6a:1e:2e:56:2d:ab:a2:2f:
4e:48:52:2c:79:1d:bf:8f:85:d9:02:00:bf:23:3b:
14:16:73:bf:f2:ed:2e:22:e3:5c:53:b5:81:b2:40:
9d:13:81:74:ca:c2:e3:f5:37:57:0a:97:f7:05:2b:
55:92:3e:31:85:ca:39:de:8b:d6:6a:fa:f0:10:da:
93:b3:1a:0d:aa:a7:5e:ce:4e:fa:7e:86:71:23:e4:
91:3d:b9:a1:11:fb:bd:99:27:97:5d:ab:20:98:9b:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:FF:F6:9D:AB:BA:05:19:F1:B5:83:FB:6B:4D:3F:5A:79:E3:D6
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/x3D_9p2rugUZ8bWD-2tNP1p549Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
84.246.120.0/21
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
6f:1f:16:12:a5:41:cd:17:82:0f:90:55:c9:c8:85:e9:4a:94:
8f:2a:fd:07:8b:25:88:12:23:e7:5b:18:50:85:fd:ca:87:dc:
5d:76:ee:b1:c7:81:1d:11:ec:41:ac:1b:8a:45:ff:57:be:d7:
5e:25:c9:e2:81:4c:e0:39:24:cf:5f:43:ea:e7:e2:78:5f:e9:
f9:0b:80:41:6a:e6:ba:09:6b:80:a3:1d:21:b4:e2:7c:29:df:
39:39:7a:df:de:37:90:0d:01:79:94:b1:26:d5:40:06:82:4a:
ec:4f:6d:8c:cb:4f:85:20:a0:c7:c5:d5:6d:6b:9a:6c:57:ec:
fc:2d:bc:a7:4a:7a:cb:b7:9c:85:3d:83:3e:d0:39:f5:1e:46:
65:1e:dc:65:ce:86:48:02:b9:2e:16:54:6e:97:8a:9c:61:54:
7b:22:ff:58:c2:6f:0c:9b:15:6b:ab:f6:86:d8:4c:ab:0b:9c:
09:82:47:09:ba:9c:9d:bd:d4:cf:fe:44:8e:2b:87:da:7a:b4:
6d:34:14:24:8d:78:ed:52:ce:27:65:6c:eb:31:e7:f1:95:8b:
0b:a2:62:2f:bd:51:9d:71:92:28:4a:3d:61:92:48:e6:b0:16:
f4:46:eb:2d:e1:ee:3d:53:13:12:d2:4e:4b:bf:a1:3d:8e:fc:
96:2e:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:22 2025 by rpki-client