Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WS4uxLin9A07kXjBxHGbnSx0pLw.roa
File: WS4uxLin9A07kXjBxHGbnSx0pLw.roa (raw, json)
Hash identifier: nzR9vfUB30F0SpW47P+/WwXwTTG1FJpWVQbXJgFsMhI=
Subject key identifier: 59:2E:2E:C4:B8:A7:F4:0D:3B:91:78:C1:C4:71:9B:9D:2C:74:A4:BC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01936BCE1C69334D9E2A4FB8A882D2B639B7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WS4uxLin9A07kXjBxHGbnSx0pLw.roa
Signing time: Wed 27 Nov 2024 04:08:09 +0000
ROA not before: Wed 27 Nov 2024 04:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:ce:1c:69:33:4d:9e:2a:4f:b8:a8:82:d2:b6:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 27 04:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592e2ec4b8a7f40d3b9178c1c4719b9d2c74a4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:6b:e4:e1:bf:0f:3a:d7:36:32:b9:59:3e:
41:cb:9e:b6:01:52:66:61:9b:78:d8:98:fc:b3:9f:
6d:61:1b:95:cb:f3:86:d3:2a:3f:ba:c1:65:e6:44:
45:cb:23:79:3b:49:32:1b:87:15:64:ae:bb:18:3e:
f6:66:ec:33:45:6a:0d:0c:7b:0f:89:ed:f9:3f:46:
10:c0:da:a1:8e:a0:ba:c0:a5:31:63:28:ee:20:c1:
87:6b:83:70:03:b4:a7:b8:48:3c:08:73:dd:0d:06:
9d:cb:65:55:6c:1a:c4:c3:df:cb:c5:d8:84:95:f1:
65:ce:d3:77:4c:10:55:bd:de:1b:d5:e2:20:8d:2d:
e6:64:d4:c1:e5:07:09:f7:03:4a:4f:78:f1:3b:3d:
60:b9:b3:d7:8e:af:a4:90:78:67:4e:27:94:01:f7:
c0:e5:7e:b8:c2:a7:b7:53:7a:b5:c1:a8:53:b7:af:
f7:42:7c:b0:2f:ea:1f:3b:55:62:27:52:72:8b:80:
83:89:8f:5b:af:ce:cd:a1:e1:04:da:f6:68:93:f2:
c3:f6:c7:d8:49:9f:fc:7e:7a:dc:30:e7:7b:f7:ec:
25:2c:c1:66:49:df:56:b3:b3:57:34:3d:5d:58:0e:
71:fe:29:99:ed:fa:d7:32:05:d8:2c:01:48:a0:f2:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:2E:C4:B8:A7:F4:0D:3B:91:78:C1:C4:71:9B:9D:2C:74:A4:BC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WS4uxLin9A07kXjBxHGbnSx0pLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/22
77.111.106.0/24
77.111.108.0/24
94.229.210.0/24
94.229.212.0/24
94.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8b:8a:48:5c:a4:b7:04:66:23:77:ab:0d:8f:12:10:07:69:
f5:36:d8:d1:f7:2e:b1:9b:e6:d2:29:31:b3:7a:41:ac:f5:7a:
3b:83:9d:eb:e7:84:da:6b:29:f6:64:4c:ae:8a:94:02:07:36:
92:6d:d9:5e:d3:5a:75:a9:94:2b:b2:f8:72:75:46:cf:08:bc:
be:a9:4e:87:e7:a6:be:48:7a:5f:2b:31:11:d6:28:4f:66:49:
6c:3b:4e:f0:29:14:28:6b:1d:79:df:42:42:90:45:1c:be:21:
55:39:74:47:c3:a8:e5:67:33:25:c3:f7:5a:cc:44:f4:9e:c9:
91:b9:7a:ff:24:2d:38:a4:44:a8:c3:5b:1e:6e:88:5c:86:c2:
0a:79:4d:38:80:0e:f5:65:c9:ff:f9:86:b3:24:93:0e:d7:63:
3b:7e:e3:a0:ad:4c:b5:2e:84:ef:d0:2f:66:a4:a9:a1:75:7e:
fb:4d:1e:36:fd:ae:e9:0c:57:fb:3c:f7:fb:67:9e:c0:ae:5a:
09:39:f7:00:46:cf:b3:ba:6a:d7:92:dc:50:62:18:76:d8:5d:
7a:cc:a2:36:00:67:f2:3e:ff:e1:2e:ba:65:a5:9c:68:d6:dc:
2a:53:75:c4:a2:78:7d:d7:b6:95:93:08:35:18:e8:a8:8e:b9:
a2:58:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:52 2025 by rpki-client