Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1Gkfxv2ZvxizrwtEWTmKxNovJvA.roa
File: 1Gkfxv2ZvxizrwtEWTmKxNovJvA.roa (raw, json)
Hash identifier: DYrzhdTJRYIAj57fZl9a38kpojXw206g2ZRT9wf2KHs=
Subject key identifier: D4:69:1F:C6:FD:99:BF:18:B3:AF:0B:44:59:39:8A:C4:DA:2F:26:F0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194AF6B371E4548E6B75C026389C5D7F418
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1Gkfxv2ZvxizrwtEWTmKxNovJvA.roa
Signing time: Wed 29 Jan 2025 00:17:06 +0000
ROA not before: Wed 29 Jan 2025 00:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 77.111.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:6b:37:1e:45:48:e6:b7:5c:02:63:89:c5:d7:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 29 00:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4691fc6fd99bf18b3af0b4459398ac4da2f26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:67:3f:cc:d0:a2:de:b7:72:01:d1:15:90:
94:2d:8f:76:3e:1d:7d:2f:97:2c:3f:71:92:d6:18:
14:36:12:ae:8f:a6:a9:d0:6c:59:0a:55:b3:f8:05:
b4:74:d2:9e:de:24:96:50:47:57:aa:59:5a:85:81:
d5:89:dc:ca:56:a2:61:d3:c1:09:0f:bc:44:4b:68:
11:ad:26:8f:50:58:b0:3b:83:6c:98:09:04:02:b5:
42:4a:d0:b5:ed:a5:71:03:80:55:7f:1e:dc:39:e7:
e0:7d:ad:b6:5a:4f:79:e1:b9:e7:2e:e9:3d:3b:7e:
c4:fd:f8:a6:5f:08:f6:8a:e5:bf:64:6b:50:06:2b:
fe:bc:f2:3b:45:ac:f2:28:ff:10:2f:c0:97:75:83:
58:c3:9d:3c:ad:8d:96:06:ba:f5:43:db:b9:cc:dc:
05:25:77:9f:d7:74:03:d6:e3:be:b4:0a:41:33:3b:
b8:32:44:92:3f:74:9c:e9:bf:56:e2:89:d1:d3:c5:
d4:08:3e:6c:ea:51:1b:68:74:89:f9:4d:21:71:b9:
b8:c7:ee:54:cd:0a:17:50:ad:e7:9e:8b:b5:d5:35:
55:94:a1:0f:bb:68:68:27:a3:f6:b6:80:2b:17:70:
92:30:28:cf:26:65:84:aa:11:0b:c5:76:fb:e7:5b:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:1F:C6:FD:99:BF:18:B3:AF:0B:44:59:39:8A:C4:DA:2F:26:F0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1Gkfxv2ZvxizrwtEWTmKxNovJvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.97.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ec:49:4c:c9:e3:20:71:ec:05:52:2d:22:41:56:99:fd:85:
dc:d9:6c:eb:8e:8f:36:8b:06:1a:92:67:75:21:40:ee:da:cd:
52:ff:6a:30:82:99:1d:0b:eb:f9:6c:d3:ff:79:c8:5f:a2:f6:
d9:3f:31:e9:7b:b6:2f:7a:2d:65:ee:4c:a3:85:9c:ad:0f:45:
c0:24:6e:f5:2d:59:a3:07:d8:a9:99:80:a6:ce:48:a8:4a:0a:
b5:b4:15:a3:5d:81:e1:7b:ea:e5:c3:13:cb:0f:12:10:aa:1b:
9f:4b:ce:e2:62:8c:06:4e:01:2d:49:fc:f4:4d:f5:26:a1:ca:
51:09:3a:8e:4a:e9:40:c3:25:6b:66:33:e8:b3:95:2b:b6:3f:
24:b2:b2:66:0f:a9:4f:06:1c:dc:21:05:df:44:4e:67:c1:f2:
b8:43:74:cb:6b:cc:3d:82:0e:80:ea:3d:3d:d4:88:3d:f8:fd:
b9:e7:22:1a:58:22:e1:31:70:5e:b6:d7:fb:75:be:80:2b:9b:
ac:0d:54:6d:58:6c:cf:83:0a:1d:1a:bc:21:fe:2d:32:1f:5d:
e6:09:a8:79:0f:1d:0b:d8:1b:c6:d8:5e:2e:58:05:60:90:46:
f9:24:b7:03:a3:35:d3:92:38:0e:6b:47:2d:53:6d:1d:d7:d1:
59:1b:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:37 2025 by rpki-client