Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eT8sKU3g2YvlsANxErYCCvW2RuU.roa
File: eT8sKU3g2YvlsANxErYCCvW2RuU.roa (raw, json)
Hash identifier: gyVr8g+hzw96UbTGMcuFKcMmz4OpgWFGgh623fwYgnk=
Subject key identifier: 79:3F:2C:29:4D:E0:D9:8B:E5:B0:03:71:12:B6:02:0A:F5:B6:46:E5
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01942824304889B36785CBDFAC8F1B4C0E11
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eT8sKU3g2YvlsANxErYCCvW2RuU.roa
Signing time: Thu 02 Jan 2025 17:50:47 +0000
ROA not before: Thu 02 Jan 2025 17:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216151
IP address blocks: 77.76.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:30:48:89:b3:67:85:cb:df:ac:8f:1b:4c:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=793f2c294de0d98be5b0037112b6020af5b646e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:0f:d9:87:aa:24:e5:39:70:62:01:6d:ac:
ca:45:65:07:ac:70:f1:2b:52:25:9f:3e:5a:e3:38:
c2:89:db:8b:ee:2f:ea:aa:54:0d:7b:3f:c0:82:9f:
3f:51:5b:6f:38:64:41:ff:98:ec:00:15:d9:88:fb:
b2:38:d7:e3:d4:27:97:6c:8f:ae:82:78:96:22:ef:
0a:1e:9b:e3:6b:2e:fb:b2:29:21:ba:82:23:b8:97:
b1:6e:eb:84:c5:15:13:fd:f8:66:89:8c:59:53:9f:
d5:18:54:1f:7c:66:68:0c:c9:6c:b4:5a:55:82:3b:
85:e7:fb:91:6d:da:86:a2:37:4b:9b:78:ff:3b:6d:
37:d1:28:9d:9a:b3:2d:dd:fb:f4:76:54:4e:6a:82:
38:64:cc:ec:b7:fd:2b:b2:ba:d3:9f:b4:17:38:58:
a2:51:09:3a:40:8a:ea:d8:7a:b7:78:84:88:bc:c6:
d5:13:ef:97:e0:55:15:4a:4f:26:1c:99:87:01:34:
da:99:38:c8:92:f2:70:df:45:7f:4d:61:e4:8c:ea:
ee:94:65:c4:66:5e:39:97:c2:e8:a0:3f:9f:aa:21:
2d:c8:e3:30:6e:34:bb:99:29:6d:b3:d5:95:9a:12:
3c:fd:d8:10:d7:b5:94:99:d8:20:38:e4:10:43:86:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:2C:29:4D:E0:D9:8B:E5:B0:03:71:12:B6:02:0A:F5:B6:46:E5
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/eT8sKU3g2YvlsANxErYCCvW2RuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c9:a4:d3:f1:bc:0b:f7:36:16:cd:a4:bc:e7:7b:e4:b1:4a:
9c:e8:ba:8f:5e:31:61:8a:d3:d3:26:f7:4f:3e:b8:a4:a2:ac:
18:90:cf:6c:a3:e5:e4:d8:88:e2:34:32:96:c5:61:24:f3:5d:
0f:61:c9:a1:bd:df:42:3b:48:16:f6:40:70:8e:e1:ea:6e:6d:
a1:11:3d:20:86:5d:fd:8c:53:0f:f0:cf:89:a2:35:0c:2b:86:
4a:60:85:f3:6c:b5:c9:71:7c:46:5c:1a:08:30:5e:90:90:52:
0c:4b:02:fc:bd:7e:96:ac:a8:a0:d3:16:87:ae:96:cb:a1:e6:
6d:b2:5a:b8:29:c7:77:75:63:68:a8:1b:be:32:0a:62:58:3f:
5a:c6:67:14:fb:f3:0f:21:9c:91:ce:ea:53:f1:7a:ac:3c:fd:
6f:01:df:6f:99:ad:8c:f0:2c:d9:02:5b:42:57:33:75:24:c7:
d7:19:64:1c:19:f6:c3:76:ff:fd:a5:10:5b:df:96:2e:85:65:
8c:da:d6:fb:48:45:26:41:76:c6:35:67:a5:c3:4d:63:b0:c4:
5b:d1:35:f9:36:9d:f7:26:20:a0:83:40:ff:c3:62:c9:fa:c1:
10:0b:8d:7f:f1:d9:44:ff:f0:b9:06:8c:a6:94:44:1c:3e:9a:
4c:36:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:38:34 2025 by rpki-client