Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/3TrGkSVzppBqipyUk8tgADuV6p4.roa
File: 3TrGkSVzppBqipyUk8tgADuV6p4.roa (raw, json)
Hash identifier: fR2qwmFoIxgMp0xpedPIrjTlxN0HPixz3z3KLtmqj3Y=
Subject key identifier: DD:3A:C6:91:25:73:A6:90:6A:8A:9C:94:93:CB:60:00:3B:95:EA:9E
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 01856CB84BED7017434ED16A24D2D9F6893B
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/3TrGkSVzppBqipyUk8tgADuV6p4.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62217
IP address blocks: 77.247.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4b:ed:70:17:43:4e:d1:6a:24:d2:d9:f6:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd3ac6912573a6906a8a9c9493cb60003b95ea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:05:71:12:93:80:51:35:8d:c7:26:3f:e4:
02:e9:ac:10:00:d4:11:b1:8c:ea:e8:5e:f7:fc:d8:
da:25:21:d5:8c:9a:00:72:f5:12:5e:77:07:0b:62:
1b:c7:a2:a3:83:58:c8:ea:80:8e:44:fc:98:3f:ae:
ac:75:bb:13:0a:3f:b4:2c:cb:aa:72:63:55:32:5a:
a3:15:d4:0f:cd:57:75:cf:4c:49:ce:a8:2f:23:b9:
10:9a:0c:f4:62:d8:54:0d:95:2d:73:35:f8:db:c6:
87:96:cc:6d:ab:f5:79:4b:93:12:6c:ce:26:41:f6:
ff:a3:8f:06:b1:b5:eb:10:e6:23:fe:fd:88:14:ef:
be:a1:34:5e:fb:7f:5b:76:4c:fc:4b:2d:f4:13:6e:
e2:c8:f6:66:7f:37:d0:f8:a4:00:18:12:79:d1:af:
6f:12:00:3d:46:fc:76:f7:d7:56:b8:90:4e:17:dd:
ce:e7:ed:f3:28:47:00:a5:e7:c7:7f:96:5b:69:96:
7b:ed:16:9e:12:d1:27:d3:30:3e:3a:a7:a3:44:73:
b0:19:39:db:e5:31:36:c3:33:f8:e2:cd:94:f0:10:
c5:14:ae:ea:f0:2a:a9:ec:06:e1:d7:5e:58:80:fd:
40:85:af:84:de:69:34:a5:14:a3:4b:60:02:3a:f5:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:C6:91:25:73:A6:90:6A:8A:9C:94:93:CB:60:00:3B:95:EA:9E
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/3TrGkSVzppBqipyUk8tgADuV6p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:b2:2d:87:a3:99:d1:64:07:27:65:f2:05:f7:7d:35:82:4a:
b9:66:ec:c0:0a:e7:7f:78:4b:30:fb:68:ff:61:f1:c7:a2:f8:
68:ce:06:b0:15:15:1a:0b:3d:8d:c2:06:54:24:ba:3d:0e:ce:
e9:ff:4e:c6:62:a2:e6:54:ca:20:dd:cd:b3:e6:37:59:ac:9e:
2d:d4:c5:57:fb:97:7a:5b:99:f3:cf:3c:a0:44:16:14:e4:00:
f4:c5:ab:c7:38:05:83:2e:5e:da:50:16:0d:fa:02:62:69:ea:
b5:f4:36:37:7d:dd:6c:a6:ea:e5:d9:76:8b:a1:d6:b5:b8:d2:
cf:7a:6e:24:1c:36:70:85:91:0f:ec:f6:dc:f3:f8:41:97:d3:
d2:5f:fb:72:b3:81:9f:b4:c4:c4:11:88:40:68:e2:db:7d:54:
5a:8c:1b:a2:ed:9c:17:db:0f:36:32:69:4f:e2:a4:6d:0f:49:
7a:8b:2f:46:52:2e:2e:6e:60:9a:af:64:1f:3b:6a:c3:5e:cf:
12:f3:09:2e:f2:77:60:ea:9b:a3:24:10:f2:78:7c:32:ec:d5:
d6:06:99:c0:df:21:c2:52:3c:b6:fb:31:fd:16:92:e4:5d:bd:
5f:92:79:04:af:63:38:ba:bc:15:8b:76:ba:c9:29:9a:08:7a:
5f:48:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:53 2025 by rpki-client