Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/L92S0PfcHSE9bgS-JCS8vvop6UQ.roa
File: L92S0PfcHSE9bgS-JCS8vvop6UQ.roa (raw, json)
Hash identifier: XSHb8sFm7h1G4YsZCXgF14jI1G7rEVjjM6p2QTILx6g=
Subject key identifier: 2F:DD:92:D0:F7:DC:1D:21:3D:6E:04:BE:24:24:BC:BE:FA:29:E9:44
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 0195849140A6330AE32994815A253DCA650D
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/L92S0PfcHSE9bgS-JCS8vvop6UQ.roa
Signing time: Tue 11 Mar 2025 09:37:46 +0000
ROA not before: Tue 11 Mar 2025 09:37:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209946
IP address blocks: 77.87.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:91:40:a6:33:0a:e3:29:94:81:5a:25:3d:ca:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Mar 11 09:37:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fdd92d0f7dc1d213d6e04be2424bcbefa29e944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:07:38:7d:7f:0d:5b:4a:38:7e:b9:6d:a0:
05:25:b9:ff:bc:93:e1:b5:43:77:44:9e:d0:00:0e:
03:11:8d:bf:5c:b8:40:60:a7:4e:8d:8a:6a:2c:76:
a3:88:1e:a3:f8:66:35:54:60:5a:28:5e:68:c0:0f:
e2:91:75:73:71:8d:3b:1f:10:4f:90:99:e1:74:66:
50:24:75:f9:00:28:4e:dd:e7:12:27:ae:fa:6a:25:
81:f9:93:34:37:94:94:c4:d7:5e:32:37:04:6b:40:
57:1f:1f:16:d6:32:0e:2b:51:ac:7c:97:be:6e:7a:
da:48:01:0f:a7:8d:23:e7:b6:e9:c1:09:f6:b0:40:
2b:f2:21:cf:d4:4e:08:b8:82:10:e4:30:6e:b5:49:
0e:a4:8c:6b:40:be:e3:c4:79:62:41:ff:2e:72:e6:
65:0a:dc:64:3c:d9:64:56:77:55:a0:25:88:79:09:
6b:3b:43:e4:16:ce:3d:6c:4b:78:5d:f8:6e:08:c9:
d8:4c:ad:1f:49:56:ef:ff:ea:eb:af:89:01:77:37:
50:e3:fd:c9:2a:bf:3a:9a:9d:29:c4:b1:76:ce:ce:
62:4c:d3:a6:c4:1d:53:4b:f0:4a:a2:05:c8:5b:9f:
e5:bb:8f:64:38:95:a7:58:f2:15:f0:ab:e4:16:bb:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:92:D0:F7:DC:1D:21:3D:6E:04:BE:24:24:BC:BE:FA:29:E9:44
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/L92S0PfcHSE9bgS-JCS8vvop6UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
84:51:1e:b3:32:2e:37:e1:49:2a:c0:66:6f:7a:2e:fa:cf:8f:
24:11:74:f1:20:4c:b5:59:1c:6c:c9:56:4a:3a:b4:6b:69:2a:
a7:87:86:2c:8e:6f:97:88:ea:b4:da:bb:c2:91:cf:1b:23:d9:
b2:3b:87:2a:c8:a4:80:52:e0:b8:87:c8:b1:48:c5:2d:c6:44:
55:c6:d1:1e:d2:f4:02:61:33:51:62:bd:bb:63:bd:5c:0d:f7:
3b:25:00:b8:9c:45:0c:45:9a:c7:3c:ac:a3:74:69:5c:54:10:
6b:32:fc:17:3f:b9:3d:29:09:48:b8:05:09:e4:27:b3:20:cd:
40:9b:db:3d:2a:58:ca:4c:99:59:23:69:36:60:0e:70:f1:24:
d5:d8:39:1a:d8:fd:70:de:0a:41:22:df:d1:d5:dc:52:3f:0d:
1d:6b:03:59:aa:8a:9d:01:15:2e:35:e1:72:2c:f8:66:cd:58:
da:40:5a:fa:16:0b:23:27:2e:38:fc:d7:42:70:0b:7b:33:07:
83:52:05:dd:9a:f1:2e:58:79:8b:b4:1f:aa:8f:f3:a9:e9:5e:
7a:36:05:be:1a:bc:b1:6b:6a:56:e9:1f:3e:d3:d6:3f:f9:ae:
6b:8e:e6:f9:d3:7c:c4:55:a6:2d:1e:7b:4f:b1:32:e3:74:e2:
54:fc:45:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWEkUCmMwrjKZSBWiU9ymUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj
NTU4ZWYwHhcNMjUwMzExMDkzNzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmRkOTJkMGY3ZGMxZDIxM2Q2ZTA0YmUyNDI0YmNiZWZhMjllOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb8HOH1/DVtKOH65baAFJbn/vJPh
tUN3RJ7QAA4DEY2/XLhAYKdOjYpqLHajiB6j+GY1VGBaKF5owA/ikXVzcY07HxBP
kJnhdGZQJHX5AChO3ecSJ676aiWB+ZM0N5SUxNdeMjcEa0BXHx8W1jIOK1GsfJe+
bnraSAEPp40j57bpwQn2sEAr8iHP1E4IuIIQ5DButUkOpIxrQL7jxHliQf8ucuZl
CtxkPNlkVndVoCWIeQlrO0PkFs49bEt4XfhuCMnYTK0fSVbv/+rrr4kBdzdQ4/3J
Kr86mp0pxLF2zs5iTNOmxB1TS/BKogXIW5/lu49kOJWnWPIV8KvkFrtzDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/dktD33B0hPW4EviQkvL76KelEMB8GA1UdIwQY
MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt
ZjNlMDUyYmFiMTQ0LzEvTDkyUzBQZmNIU0U5YmdTLUpDUzh2dm9wNlVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0
LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVd7MA0G
CSqGSIb3DQEBCwUAA4IBAQCEUR6zMi434UkqwGZvei76z48kEXTxIEy1WRxsyVZK
OrRraSqnh4Ysjm+XiOq02rvCkc8bI9myO4cqyKSAUuC4h8ixSMUtxkRVxtEe0vQC
YTNRYr27Y71cDfc7JQC4nEUMRZrHPKyjdGlcVBBrMvwXP7k9KQlIuAUJ5CezIM1A
m9s9KljKTJlZI2k2YA5w8STV2Dka2P1w3gpBIt/R1dxSPw0dawNZqoqdARUuNeFy
LPhmzVjaQFr6FgsjJy44/NdCcAt7MweDUgXdmvEuWHmLtB+qj/Op6V56NgW+Gryx
a2pW6R8+09Y/+a5rjub503zEVaYtHntPsTLjdOJU/EVw
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:38 2025 by rpki-client