Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-rTayTC7LQ5OlG9uxdojaLsHDQE.roa
File: 1-rTayTC7LQ5OlG9uxdojaLsHDQE.roa (raw, json)
Hash identifier: bLiPa7SaaoAOnS6B+lVHbOzitnKMGTjot+jVC74v7oY=
Subject key identifier: FA:B4:DA:C9:30:BB:2D:0E:4E:94:6F:6E:C5:DA:23:68:BB:07:0D:01
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 0190316DC0D560943EE0B41794787D01111C
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-rTayTC7LQ5OlG9uxdojaLsHDQE.roa
Signing time: Wed 19 Jun 2024 16:56:34 +0000
ROA not before: Wed 19 Jun 2024 16:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 77.247.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:6d:c0:d5:60:94:3e:e0:b4:17:94:78:7d:01:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jun 19 16:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fab4dac930bb2d0e4e946f6ec5da2368bb070d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:41:32:96:30:64:ad:ef:8f:4e:14:bc:4c:
df:cc:45:a8:92:4d:2f:4c:48:bd:43:55:f0:d2:19:
b2:88:dd:84:8b:12:18:33:a3:96:f9:4c:92:96:14:
46:be:89:ec:a5:5d:b9:7c:8d:cd:a7:fa:8f:ca:bc:
57:01:9b:e1:1c:72:bf:6a:03:dc:96:33:87:ef:d7:
b1:57:c7:38:7d:19:80:87:1c:bc:4c:f1:a4:74:8a:
8f:42:73:3a:bb:48:d4:c8:21:23:88:79:5e:84:53:
3d:c1:8d:a7:ff:d6:3e:40:9a:83:36:6b:fb:60:aa:
d7:45:e8:4c:78:99:31:f1:93:aa:d2:94:58:3f:c7:
22:69:3b:c7:f9:ac:9b:61:09:04:c2:6f:bc:32:71:
36:90:26:7b:c7:6e:ff:34:a3:dc:5a:cd:87:6b:9e:
e9:6f:c7:6c:1a:12:fc:c9:4e:7a:8c:8b:b3:15:8d:
32:fb:79:dc:9f:77:11:7f:f2:d4:81:12:20:07:d8:
dd:ca:33:dd:7a:69:5b:3a:07:50:39:de:5d:bb:22:
6b:b4:79:50:89:67:b0:22:c9:7a:61:44:2b:99:f7:
98:2e:7b:1f:69:28:11:f2:cc:19:f7:a7:d1:38:2c:
8b:9c:27:19:2b:c0:ab:e3:81:e9:06:31:6f:cd:47:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:DA:C9:30:BB:2D:0E:4E:94:6F:6E:C5:DA:23:68:BB:07:0D:01
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/1-rTayTC7LQ5OlG9uxdojaLsHDQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:2a:97:73:32:3e:04:8d:75:af:bb:2c:63:90:48:3a:ab:24:
ae:a2:63:55:28:61:8d:42:87:1c:da:66:75:bb:bf:f8:26:c2:
bf:07:a9:6d:19:f2:c1:b2:66:f0:8d:21:66:f1:1d:a0:06:ee:
8f:20:35:75:09:36:0a:4c:a6:c0:82:59:d9:1e:66:55:19:2c:
81:73:61:ea:9c:10:a6:44:8e:cc:1a:ca:d0:ca:a6:d4:d9:9c:
23:2d:e8:e0:86:89:01:45:11:02:62:e1:ef:19:53:50:e2:0f:
2e:6e:b3:37:5c:0c:88:80:79:17:5b:85:9e:a5:f1:87:30:fd:
f3:82:6e:ff:c0:c8:c2:ac:04:d3:26:22:cd:e7:4a:7c:72:49:
83:fa:94:59:16:24:fe:fb:3a:a7:0c:e8:28:6f:c6:47:bc:06:
d7:29:ec:0d:38:30:ac:6d:17:d7:8e:c4:02:42:47:46:43:0a:
1f:23:9c:d6:3b:06:db:89:02:8d:f6:74:e7:a5:79:2e:1d:5d:
ba:2e:f4:58:d0:a7:72:02:c9:6f:39:06:b8:9c:0d:ad:fb:55:
c3:25:30:54:83:c2:cc:a4:e0:70:a9:ec:1b:b8:a4:59:5a:42:
7d:4b:7d:a0:08:75:5a:61:1f:1d:17:17:89:75:27:f9:2f:92:
b1:16:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:55 2025 by rpki-client