Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C6KgGO6iNDAOSr_LdNE2CtRO9cg.roa
File: C6KgGO6iNDAOSr_LdNE2CtRO9cg.roa (raw, json)
Hash identifier: YIRxt0ZdMtXtp+fj1rbjsDqcPqu+NsT+4NjRquGjlyo=
Subject key identifier: 0B:A2:A0:18:EE:A2:34:30:0E:4A:BF:CB:74:D1:36:0A:D4:4E:F5:C8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193AD07B15A2EE0B91624C3D61448A29887
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C6KgGO6iNDAOSr_LdNE2CtRO9cg.roa
Signing time: Mon 09 Dec 2024 20:06:22 +0000
ROA not before: Mon 09 Dec 2024 20:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:07:b1:5a:2e:e0:b9:16:24:c3:d6:14:48:a2:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 9 20:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ba2a018eea234300e4abfcb74d1360ad44ef5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:d2:5f:83:0a:64:9d:39:04:fa:f0:a4:87:
0c:35:14:88:09:fe:df:4c:48:fd:07:bb:23:c1:7c:
3a:e9:cf:d8:ca:06:07:7a:97:3d:a3:5e:b7:f7:f0:
dd:60:e4:fe:d5:fc:ec:79:a8:a4:74:6b:f2:18:9b:
55:d6:c9:5f:b2:b9:03:7f:ac:17:6b:0d:90:81:31:
72:de:a7:ee:fe:e3:9f:eb:2f:7b:7d:4b:51:78:7e:
0c:2d:12:0d:0d:22:fe:22:4e:f3:34:48:4d:a0:8b:
02:99:9b:b2:af:d2:f8:33:53:d2:e2:94:80:dd:cd:
39:4d:0b:fc:33:8a:2d:cb:93:a9:03:fe:37:06:2f:
03:ea:2e:d4:46:79:be:8d:bd:39:6b:4e:0d:27:b3:
d8:05:9e:e9:1a:32:53:4e:08:39:40:3a:c9:75:ab:
6d:55:42:16:cf:f7:2e:39:a8:3a:03:3d:be:f7:81:
6f:5f:3d:6d:38:f4:0a:04:c1:b5:4c:f7:3d:f4:f0:
e5:b5:b8:77:38:7c:6b:c4:85:62:45:ae:04:98:12:
14:11:20:27:1c:74:ce:f2:74:5c:fd:8b:ea:fe:dc:
a2:28:27:a3:f6:ea:3a:25:ab:70:65:83:8d:56:b5:
53:ec:b3:e1:c7:0b:e2:20:33:97:e7:8d:20:ea:d5:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:A0:18:EE:A2:34:30:0E:4A:BF:CB:74:D1:36:0A:D4:4E:F5:C8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C6KgGO6iNDAOSr_LdNE2CtRO9cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/22
77.111.106.0/24
94.229.210.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:47:af:c6:fb:d2:da:4e:9a:2e:31:41:5f:c0:98:f9:fd:3f:
c4:0a:28:56:1b:12:5a:3f:f4:ce:fb:39:d6:65:7e:10:69:4d:
4c:3b:73:b7:02:e7:6f:f4:8d:af:52:57:d1:8b:8f:a4:ac:74:
f5:9e:ea:4b:a5:7f:36:84:11:cd:1a:77:24:3a:52:fd:32:6d:
c1:e6:84:50:c1:6b:b4:4e:78:c3:55:af:93:66:de:19:d6:a8:
08:ec:11:45:d5:e7:5c:25:40:eb:f0:4f:c0:06:aa:ea:59:69:
1f:31:27:5d:0c:90:21:de:a5:40:e2:98:d0:fb:0c:9b:f6:f9:
b7:4a:7d:8c:aa:9a:70:48:cb:45:60:d1:17:0b:2d:50:8b:b7:
94:5e:38:e8:75:5d:c3:29:85:23:c0:4b:c3:9b:4f:d5:98:37:
4b:5d:a5:e5:bb:c8:9f:63:34:ae:22:85:16:3d:35:a9:5d:c2:
fa:86:a2:ca:13:80:d8:7f:b4:d0:3b:29:bf:be:16:50:a1:0c:
e8:8e:ae:11:5b:28:c4:15:7a:06:ed:c9:be:ec:38:87:a6:0e:
b1:f2:4b:08:89:2e:44:de:77:16:5e:31:52:d2:7c:52:66:69:
31:95:b8:d5:c5:d5:cc:f0:1e:b9:4c:11:d7:62:38:38:59:87:
67:a0:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client