Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/z8o3H0Ki0PWyhn-OQXUu-ORrrDs.roa
File: z8o3H0Ki0PWyhn-OQXUu-ORrrDs.roa (raw, json)
Hash identifier: IhGn7rPKcI2vbx7t5qvqQY9gihqxcJiSwca1uKmwfIE=
Subject key identifier: CF:CA:37:1F:42:A2:D0:F5:B2:86:7F:8E:41:75:2E:F8:E4:6B:AC:3B
Certificate issuer: /CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Certificate serial: 018D8430EEB22929F0883CA743542E7EB58F
Authority key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/z8o3H0Ki0PWyhn-OQXUu-ORrrDs.roa
Signing time: Wed 07 Feb 2024 15:30:15 +0000
ROA not before: Wed 07 Feb 2024 15:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 77.87.120.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:ee:b2:29:29:f0:88:3c:a7:43:54:2e:7e:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Validity
Not Before: Feb 7 15:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfca371f42a2d0f5b2867f8e41752ef8e46bac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:5e:4d:58:ef:c4:52:65:e5:54:2e:5e:1c:
29:d8:43:66:01:f4:cd:0b:ee:6f:d5:c5:5c:7f:b7:
3a:73:fb:9d:84:a5:42:f3:37:6f:90:5a:dd:eb:43:
f2:2b:20:72:0b:7a:e1:25:f4:54:9d:eb:84:a8:f8:
18:09:b3:9b:6a:fd:9b:ee:be:57:ad:be:a5:ed:4b:
1d:ac:a8:40:bc:10:92:a4:a4:d4:d9:99:88:69:34:
23:0e:79:e1:96:18:8f:cf:76:8f:89:bb:6b:c3:13:
e5:39:01:b6:5e:ab:8a:59:9e:da:65:97:1b:a7:83:
c2:8b:61:30:6b:b8:81:f0:7b:0e:d0:24:8d:32:34:
ed:60:af:bf:3c:67:bd:5f:99:bc:d2:c1:f9:05:8e:
f8:45:68:8d:a3:ff:4f:73:90:59:e8:c0:fe:89:d6:
a0:7c:16:12:ed:e2:65:f5:ea:bf:23:e1:a4:6a:78:
0a:af:c2:64:ba:57:85:67:2c:7c:a8:eb:03:b1:5f:
92:64:b6:43:b5:35:49:14:e0:0c:9f:39:56:9e:b9:
dd:99:be:98:7c:34:82:35:8c:92:d3:a7:99:38:ac:
23:9d:b0:15:e5:b3:e9:55:ae:9f:e9:d5:30:60:b6:
e8:7a:87:e8:1b:a1:2f:7d:18:fb:e8:dd:b0:6e:06:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:37:1F:42:A2:D0:F5:B2:86:7F:8E:41:75:2E:F8:E4:6B:AC:3B
X509v3 Authority Key Identifier:
keyid:D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/z8o3H0Ki0PWyhn-OQXUu-ORrrDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.120.0/24
84.246.86.0/24
91.246.53.0/24
176.116.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8e:c1:b7:b1:7b:92:71:7e:28:42:90:53:17:30:4d:27:7d:
b6:0e:66:cf:27:dd:bb:ec:80:50:5a:01:4c:e9:39:30:93:58:
ee:e7:14:4e:77:72:0b:55:55:f6:ad:1f:54:68:68:8a:2d:43:
53:9f:4e:28:19:cf:9a:72:ef:5b:19:6a:8b:75:16:04:20:06:
51:01:12:6c:b1:a3:38:ab:c9:4c:0d:5e:78:e4:8b:dc:96:f4:
69:a8:3c:49:0c:e3:a0:dd:71:3b:02:e2:36:e0:51:69:96:57:
df:25:68:18:77:77:54:11:87:49:01:60:c7:e3:4b:2b:44:26:
eb:2d:3e:64:1e:ef:ce:2b:a4:b5:b7:ef:e3:ed:30:b6:f5:6e:
2e:1a:40:98:c2:0e:c3:61:2e:99:0f:32:28:b5:cc:70:22:a7:
57:52:75:d7:68:c1:ee:a3:17:b8:2c:e4:73:66:cf:14:63:a8:
66:53:1f:1b:4f:fa:cf:71:ad:07:3e:78:87:05:b9:28:e4:19:
c6:9e:4f:47:63:cf:55:eb:1e:6e:9c:80:fa:7c:b9:46:a7:10:
15:22:6c:c9:f3:60:7b:f9:de:fa:b9:de:5a:24:bc:35:24:a3:
5b:a7:79:5c:02:04:fb:b3:ba:e3:d8:67:17:56:4e:e7:2c:d9:
61:24:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:51 2025 by rpki-client