Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y_AvmcCPJkIhViCoLeIw_ZZX4Nk.roa
File: Y_AvmcCPJkIhViCoLeIw_ZZX4Nk.roa (raw, json)
Hash identifier: UE0MYWpPNhQLiBld3nmfQ3egkwnUoC4FZqRhHH20xyE=
Subject key identifier: 63:F0:2F:99:C0:8F:26:42:21:56:20:A8:2D:E2:30:FD:96:57:E0:D9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01936BCA73236F40C89495D4681F6626A5B5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y_AvmcCPJkIhViCoLeIw_ZZX4Nk.roa
Signing time: Wed 27 Nov 2024 04:04:10 +0000
ROA not before: Wed 27 Nov 2024 04:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32167
IP address blocks: 77.111.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:ca:73:23:6f:40:c8:94:95:d4:68:1f:66:26:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 27 04:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63f02f99c08f2642215620a82de230fd9657e0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:9f:ea:32:1c:5d:f0:6d:93:17:30:9d:e2:
b1:82:ff:e7:5a:5d:27:3e:3e:f2:47:dd:d2:ef:20:
af:c7:a5:ac:15:ab:65:55:59:86:74:9d:09:06:fa:
51:d1:cf:5f:9a:78:f8:91:5b:b2:95:c0:01:c1:cb:
3d:58:11:23:9f:9b:14:88:22:e2:cc:8d:f6:51:b4:
e6:7f:72:69:4d:4c:81:78:6f:37:05:ef:c5:aa:46:
58:5b:cb:eb:19:32:e4:84:79:7f:6f:c0:ff:f4:bf:
2b:e1:ba:4b:3a:bc:ce:b5:ad:4b:8f:a5:f4:50:5a:
1d:fe:21:f2:8f:ad:91:c5:d7:cc:1e:a7:69:82:2e:
0c:9e:5e:33:b4:f8:68:a1:3a:54:6b:9b:3c:dd:2f:
35:d1:71:70:19:b2:2a:c6:e3:c5:a8:0c:d4:a5:06:
e9:b5:66:bf:f8:b6:79:27:ec:d0:67:04:12:61:fb:
58:bb:f3:95:a0:15:49:88:11:9b:8f:7f:89:f1:4b:
2f:a1:7c:b6:26:2f:97:18:0a:2c:3c:b8:c0:63:94:
ca:99:e5:a3:b4:95:fd:d5:86:3a:93:28:b7:e7:6d:
b3:e3:5e:80:ed:c8:f3:0b:1b:50:18:12:bb:b8:45:
c2:20:9b:52:24:73:5d:13:a4:7a:ea:f8:f6:59:1b:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:2F:99:C0:8F:26:42:21:56:20:A8:2D:E2:30:FD:96:57:E0:D9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y_AvmcCPJkIhViCoLeIw_ZZX4Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2b:e0:7c:b1:f9:1c:90:ae:15:22:11:df:b3:e5:76:9f:13:
db:4d:9e:9f:aa:00:1b:11:f6:90:f8:84:f5:dd:40:e5:ba:bb:
f1:b6:0a:05:d3:f1:5e:fa:d2:9e:56:38:09:97:e7:0e:92:59:
52:50:f2:70:7a:bc:85:52:44:48:ce:d4:8c:8c:ea:19:a4:5b:
8d:12:55:ba:99:23:3a:a7:56:2d:3d:4b:b7:c1:c5:40:f7:0a:
57:72:c4:4d:f9:48:6c:ce:55:bf:37:e2:50:a5:bd:64:0c:59:
85:bf:0a:a3:93:c4:50:4e:fb:33:b6:11:98:bb:62:98:d1:9b:
93:58:28:97:fd:a4:ba:b1:29:94:93:41:e0:ca:16:d8:cc:d0:
75:13:a6:bd:87:71:1a:db:41:f3:d8:b9:aa:5c:69:6d:40:6d:
fd:10:8c:a8:e7:0b:54:e2:37:08:69:66:fa:37:dd:6b:8f:9e:
bf:e6:a2:8d:11:c1:b8:33:de:4d:70:05:78:5b:0d:1e:af:37:
16:59:65:5f:cb:fc:91:b4:45:81:27:e6:26:4d:df:64:a2:e7:
16:ca:b4:fb:0e:44:74:3d:b1:5a:dc:55:19:e2:e0:4f:1c:0e:
f5:1b:d0:9c:5a:80:2d:6f:d5:4f:41:d1:89:48:1d:34:11:77:
6d:13:12:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNrynMjb0DIlJXUaB9mJqW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMTI3MDQwNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2YwMmY5OWMwOGYyNjQyMjE1NjIwYTgyZGUyMzBmZDk2NTdlMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyf6jIcXfBtkxcwneKxgv/nWl0n
Pj7yR93S7yCvx6WsFatlVVmGdJ0JBvpR0c9fmnj4kVuylcABwcs9WBEjn5sUiCLi
zI32UbTmf3JpTUyBeG83Be/FqkZYW8vrGTLkhHl/b8D/9L8r4bpLOrzOta1Lj6X0
UFod/iHyj62RxdfMHqdpgi4Mnl4ztPhooTpUa5s83S810XFwGbIqxuPFqAzUpQbp
tWa/+LZ5J+zQZwQSYftYu/OVoBVJiBGbj3+J8UsvoXy2Ji+XGAosPLjAY5TKmeWj
tJX91YY6kyi3522z416A7cjzCxtQGBK7uEXCIJtSJHNdE6R66vj2WRuygQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPwL5nAjyZCIVYgqC3iMP2WV+DZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWV9Bdm1jQ1BKa0loVmlDb0xlSXdfWlpYNE5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9iMA0G
CSqGSIb3DQEBCwUAA4IBAQAvK+B8sfkckK4VIhHfs+V2nxPbTZ6fqgAbEfaQ+IT1
3UDlurvxtgoF0/Fe+tKeVjgJl+cOkllSUPJweryFUkRIztSMjOoZpFuNElW6mSM6
p1YtPUu3wcVA9wpXcsRN+UhszlW/N+JQpb1kDFmFvwqjk8RQTvszthGYu2KY0ZuT
WCiX/aS6sSmUk0HgyhbYzNB1E6a9h3Ea20Hz2LmqXGltQG39EIyo5wtU4jcIaWb6
N91rj56/5qKNEcG4M95NcAV4Ww0erzcWWWVfy/yRtEWBJ+YmTd9koucWyrT7DkR0
PbFa3FUZ4uBPHA71G9CcWoAtb9VPQdGJSB00EXdtExIs
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:32 2025 by rpki-client