Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa
File: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (raw, json)
Hash identifier: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=
Subject key identifier: 48:A2:F5:09:DF:13:9F:E6:4A:6D:C3:B1:80:CA:3D:FB:02:74:81:B4
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0194228DCD52935B8FEC7F92D0CF124FA46C
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42838
IP address blocks: 77.87.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cd:52:93:5b:8f:ec:7f:92:d0:cf:12:4f:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a2f509df139fe64a6dc3b180ca3dfb027481b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:e6:1f:e5:22:c5:4b:9e:d2:85:90:a8:a0:
be:5c:b0:28:d1:8d:04:4c:d5:3b:0d:69:bb:60:2a:
1d:0b:45:c7:91:dd:8b:11:18:44:56:32:74:c2:53:
8f:d3:b3:e2:a0:47:e9:d6:0c:38:6e:f5:3a:83:a4:
27:84:7c:b0:ee:cb:54:f4:4b:66:75:d5:3c:64:30:
b7:d6:89:c7:07:37:0e:04:bc:e2:cb:bd:05:9d:40:
c8:9f:1d:15:12:96:ba:0a:e6:e2:69:81:66:2f:05:
e6:86:7c:6a:04:5b:24:92:b9:37:f1:41:1e:cf:d2:
27:c8:2c:c5:54:17:de:b9:9e:95:f8:4f:be:dd:67:
71:42:90:3a:28:81:5f:de:63:c2:89:02:f6:22:76:
bf:af:74:54:65:b8:d3:4b:4f:c0:82:ad:80:a2:25:
bd:1e:7f:14:2a:43:40:57:75:07:87:32:be:52:b0:
49:53:ac:95:2f:d7:d9:a4:14:8e:4b:7f:ce:8c:90:
f5:d3:8a:5d:87:eb:35:93:ee:93:d6:7e:05:33:25:
3f:55:c4:ae:bb:78:92:21:a3:91:ec:e9:e8:f2:4e:
00:e2:2b:f0:ee:8b:42:f2:5f:52:5b:04:29:e1:38:
e1:70:ee:0e:02:88:b0:c0:07:ad:e7:0c:1a:d2:d2:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:F5:09:DF:13:9F:E6:4A:6D:C3:B1:80:CA:3D:FB:02:74:81:B4
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:87:9e:ac:9d:17:e3:1f:45:12:4a:1b:85:2a:a0:43:8e:e6:
2a:ae:87:69:dd:85:fe:fa:ac:da:52:ce:a1:50:3e:0d:73:f6:
39:5e:54:42:2c:c9:f0:c7:13:9b:8f:06:09:86:d0:6f:62:d1:
de:07:17:8a:55:30:e8:83:fa:c7:04:09:57:ab:15:da:d0:d2:
f2:81:3e:60:fa:e2:e8:fd:cb:26:d5:b8:7c:ea:ce:16:ec:59:
c2:75:ab:2f:f5:f3:3e:05:e9:21:ce:98:b8:fc:26:71:c7:74:
3f:b2:ef:17:92:8d:9d:53:20:56:c6:2c:69:39:c1:73:5e:33:
69:2d:b5:70:21:e2:6f:8c:23:36:bd:24:1d:50:1e:5b:58:32:
ae:6b:86:2b:b9:9b:01:c2:7a:d7:e6:8d:b4:8a:0f:0b:62:c5:
7b:46:9b:0f:d6:1e:41:00:a2:e7:bf:a3:d6:98:28:bb:c6:b3:
55:6e:a5:c7:3a:3d:7b:f9:61:c3:91:20:2f:ce:f7:b3:8e:05:
f1:0e:62:a6:06:c0:e5:95:e7:07:28:a4:be:85:53:54:de:6c:
3d:7a:a4:ac:74:a6:74:85:fe:79:a6:42:04:04:05:29:de:2e:
d8:2e:d0:d3:20:49:1e:93:ba:f1:e3:49:7a:5e:79:4c:04:60:
59:50:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:01 2025 by rpki-client