Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/5qKykUUqkbLjKLHbz2U1FZ6dibc.roa
File: 5qKykUUqkbLjKLHbz2U1FZ6dibc.roa (raw, json)
Hash identifier: Tcy9CQIYBp57Qhgnrq9yN3y6l+JPofhqPEUzeJMb3Mo=
Subject key identifier: E6:A2:B2:91:45:2A:91:B2:E3:28:B1:DB:CF:65:35:15:9E:9D:89:B7
Certificate issuer: /CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
Certificate serial: 018CC7257B895557EE1396621B709AB1F059
Authority key identifier: 1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/5qKykUUqkbLjKLHbz2U1FZ6dibc.roa
Signing time: Mon 01 Jan 2024 22:29:31 +0000
ROA not before: Mon 01 Jan 2024 22:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206654
IP address blocks: 37.77.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7b:89:55:57:ee:13:96:62:1b:70:9a:b1:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
Validity
Not Before: Jan 1 22:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6a2b291452a91b2e328b1dbcf6535159e9d89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:b2:a9:78:d0:ab:9b:da:a3:04:f0:e8:e0:
08:26:da:7d:95:6a:42:ac:96:3d:e7:0d:c7:36:62:
06:86:a8:98:9b:b0:0c:6b:02:47:92:85:bb:af:b9:
94:b8:f0:ee:57:c1:67:9e:ba:77:4c:ed:f9:cf:0f:
a2:9a:01:15:0e:2c:5d:6d:70:82:68:f6:b2:d2:70:
a0:08:8a:da:f5:79:5c:ae:5e:42:80:42:2c:1c:23:
1c:29:d1:dc:d3:47:e8:ce:38:6b:9f:45:88:c3:ae:
09:71:19:de:8b:ba:7d:29:6c:a0:ea:3e:3d:7a:19:
cc:d8:87:be:a0:f8:a9:83:d3:25:73:c9:45:95:e4:
45:d4:08:29:be:0f:28:c3:f4:37:f0:f5:86:69:f4:
d6:94:8e:38:f6:db:06:2e:d9:8d:31:80:0e:dd:4c:
55:71:71:a6:2c:c3:95:78:b0:65:5f:f1:c8:1c:fc:
ae:cb:a9:21:c9:82:6b:97:bf:ec:99:b0:db:a6:cd:
63:4a:a5:e7:e3:bb:2d:c3:0e:09:09:9e:80:07:2f:
1d:52:bb:3c:b7:97:b9:2f:7b:e2:16:dd:40:36:2d:
b5:a0:d7:89:1f:83:01:ee:d7:3d:65:25:11:9f:39:
8a:0a:f5:a2:3e:56:52:10:c7:07:b0:0e:cf:67:ac:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:B2:91:45:2A:91:B2:E3:28:B1:DB:CF:65:35:15:9E:9D:89:B7
X509v3 Authority Key Identifier:
keyid:1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/5qKykUUqkbLjKLHbz2U1FZ6dibc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.144.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c5:aa:66:94:94:7e:5e:14:f1:b0:92:06:91:cb:63:75:1b:
ef:26:f4:2e:33:01:3f:25:ff:81:80:fa:c1:c9:7b:a2:f3:4f:
7c:5a:2f:03:e0:76:04:ca:5a:1a:df:0d:f9:e0:ae:4f:f8:60:
e0:dc:49:41:bc:85:b4:47:52:5b:30:4c:4b:6f:c2:6d:23:02:
33:eb:3e:20:e6:66:28:6b:ec:c4:1a:97:a8:5e:a2:86:5c:89:
e2:76:88:63:ed:3f:a9:75:2e:fb:74:23:3e:d9:2a:a0:fa:0e:
20:61:bb:b2:6d:95:26:74:43:41:b6:4f:21:18:3a:4e:eb:22:
cb:8f:dd:27:d2:91:d4:3b:89:d1:6b:29:d4:3f:a9:31:0e:5a:
11:22:25:28:9f:e2:11:d7:3c:cd:af:b1:83:ed:fb:f6:25:c5:
5b:c5:c5:c4:0e:5a:ae:dd:50:f8:3a:df:85:a4:c5:56:f5:89:
6b:62:3c:03:af:d4:ab:d8:9c:08:38:e2:aa:57:4d:7e:28:40:
42:1c:89:09:dd:9d:73:20:1e:c0:82:5e:83:96:24:d5:7e:31:
26:fc:5e:78:f5:d5:74:f3:47:8c:db:14:84:74:f5:b0:27:ab:
89:05:0b:42:4c:60:05:3f:c4:26:5b:0b:33:58:4d:68:a9:83:
32:99:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:01 2025 by rpki-client