Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa
File: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (raw, json)
Hash identifier: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=
Subject key identifier: 08:15:26:8B:54:B2:FB:83:87:96:6E:1D:A8:B1:3F:7C:D3:2C:C6:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194706E076D0FE8A4856F8352823B7BCE7C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa
Signing time: Thu 16 Jan 2025 18:44:06 +0000
ROA not before: Thu 16 Jan 2025 18:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 77.239.124.0/24 maxlen: 24
77.239.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:6e:07:6d:0f:e8:a4:85:6f:83:52:82:3b:7b:ce:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 16 18:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0815268b54b2fb8387966e1da8b13f7cd32cc644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:be:88:ec:70:d0:2e:80:4b:ae:34:55:79:
a9:ff:9c:8d:68:e0:0c:81:de:17:e2:d1:51:3c:6a:
e6:cf:46:7b:a0:88:bc:a0:1e:d8:09:46:27:3a:66:
bc:f9:0a:c3:bb:d6:c2:5d:e0:d1:0d:0b:ef:1a:a1:
36:14:e1:06:76:e6:24:a9:cb:9b:ca:7e:23:0e:7e:
76:9a:84:8e:97:93:85:66:e4:ba:30:4d:cd:93:90:
96:7f:d1:03:77:c9:1e:8e:69:6a:0b:ab:2e:b3:c0:
4a:a1:86:6c:c5:6b:97:73:90:8a:d3:bc:55:64:5d:
74:85:02:c0:17:d4:aa:91:1c:d0:7f:a9:1e:c0:52:
2e:37:fa:90:32:d9:cb:d7:d2:24:86:33:3a:b7:fb:
44:74:03:10:6b:6a:e7:73:e1:36:52:ba:dc:ae:de:
5d:28:6d:d0:07:64:fd:dc:96:56:e7:ea:4f:2e:49:
d9:25:6f:3a:b5:89:b2:21:dc:b5:c5:ad:75:d6:38:
93:03:05:3f:4c:cc:40:99:4a:87:56:3d:00:f7:08:
2a:d3:01:b4:c0:8b:b4:98:69:37:fc:cf:fe:b5:16:
f1:92:cd:91:c1:75:7d:47:24:6a:06:92:4e:df:2e:
3f:e4:09:a9:4a:d6:05:b0:26:96:63:73:8c:8b:f6:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:26:8B:54:B2:FB:83:87:96:6E:1D:A8:B1:3F:7C:D3:2C:C6:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:17:c2:f2:56:e1:00:cb:6c:2e:a3:0d:46:e2:46:66:c7:6e:
e6:b0:7e:65:db:62:86:c1:3d:85:c0:d3:18:ae:e5:49:92:8b:
eb:d0:b1:b2:a2:91:04:f9:d2:2f:e2:b3:5f:a3:7f:d8:80:2e:
c9:bd:e3:4f:dd:0f:78:73:df:73:4a:6d:62:74:9e:5d:64:f1:
df:cb:7b:6d:91:7c:c4:2c:d3:5e:cc:2b:e3:4f:2f:84:6b:4d:
db:19:9b:bb:24:39:b0:f5:56:7d:12:73:37:17:8f:f4:ff:f7:
a3:60:c7:fd:d0:ef:bd:d5:88:95:87:41:f1:d9:c5:15:88:49:
c3:9c:1b:3a:37:f9:c8:63:8a:50:30:65:b3:71:52:a9:3b:56:
24:23:d9:41:26:f5:8e:90:03:02:48:9c:32:6b:b1:b4:57:19:
1a:ca:0f:2d:4f:82:5c:01:37:36:b5:80:67:c3:ce:cc:f5:8a:
1d:10:94:cc:4c:4a:f2:56:af:d2:0d:1d:89:51:28:4f:09:db:
bc:82:67:0a:a3:7b:29:5e:78:db:6e:24:10:e2:40:c4:e9:7d:
c0:d0:d2:0b:72:06:6f:40:3f:3d:75:1b:c0:1c:3d:d5:ea:83:
cd:24:46:2d:1d:26:b6:01:c1:2b:99:7a:5a:a0:d6:a5:46:ce:
81:42:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:27 2025 by rpki-client