Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fhNswQD7AIg2lmyRD8lMAjVOFWQ.roa
File: fhNswQD7AIg2lmyRD8lMAjVOFWQ.roa (raw, json)
Hash identifier: lh2vEcyHJxv/OQLzI749nLyzoeob7GUJUFAJo/uuQeM=
Subject key identifier: 7E:13:6C:C1:00:FB:00:88:36:96:6C:91:0F:C9:4C:02:35:4E:15:64
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192C454FDAD64190AF8F90A2732D4FE3DBB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fhNswQD7AIg2lmyRD8lMAjVOFWQ.roa
Signing time: Fri 25 Oct 2024 15:39:17 +0000
ROA not before: Fri 25 Oct 2024 15:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214478
IP address blocks: 77.111.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:54:fd:ad:64:19:0a:f8:f9:0a:27:32:d4:fe:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 25 15:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e136cc100fb008836966c910fc94c02354e1564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:0f:33:89:0b:7b:2b:2d:c2:7b:c3:69:e3:
5e:45:b2:d2:61:76:6b:a0:cd:93:1a:e5:12:3f:46:
fe:99:7e:5c:a2:a1:c6:5b:f5:76:97:bc:d2:05:4b:
df:a0:ff:80:dc:57:8a:81:eb:a2:ff:f7:5b:b0:14:
7c:bc:f6:7e:8e:ae:9f:02:cc:6d:a2:22:b0:f6:89:
03:d1:21:22:96:5e:d8:18:79:23:bc:9f:c1:ef:46:
e7:a0:bb:7f:7f:38:0c:6d:16:6e:fa:82:70:84:12:
6d:e1:84:22:ec:0e:9f:f5:c0:5b:ac:73:b4:ad:4b:
0c:1b:b6:63:6d:34:38:cd:6d:aa:5a:40:7c:7f:8b:
ad:83:a0:19:47:10:bf:c6:25:c6:f6:c5:1b:f0:6e:
66:ac:00:a8:22:76:d6:ea:fe:bc:dc:0b:31:3d:e2:
45:73:2c:c3:08:4e:ef:83:42:10:f6:e1:fa:11:20:
a8:60:08:5a:e7:96:19:9c:c9:18:77:80:b9:4a:ca:
a9:14:f8:e3:73:74:04:fa:eb:0a:6b:57:48:7d:77:
6d:92:2d:e4:59:6e:da:29:fc:8e:26:82:2c:98:a6:
74:3d:77:43:6f:09:da:4d:73:0f:e9:a6:fa:44:fe:
4f:8a:29:39:37:9a:5f:47:57:eb:3c:18:2c:e4:0b:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:6C:C1:00:FB:00:88:36:96:6C:91:0F:C9:4C:02:35:4E:15:64
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fhNswQD7AIg2lmyRD8lMAjVOFWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.110.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2d:62:ef:b5:cc:d9:5f:cd:8f:c5:9c:05:3e:0a:42:bb:7a:
89:29:a8:b0:44:54:64:df:ae:a3:d2:20:8b:30:61:48:29:8e:
04:e1:bd:eb:ac:77:a3:76:27:4b:92:02:64:d4:73:72:88:ef:
e0:98:41:33:c1:ee:30:a9:c1:db:29:25:de:94:ca:2a:a6:0d:
ca:ee:b8:91:84:c6:76:bd:5c:27:8f:0d:5e:82:78:08:08:78:
8c:fc:e5:b9:41:ad:66:7c:53:b8:17:01:b4:70:bf:3b:a1:ee:
c0:1f:6f:85:63:e1:3f:df:6c:65:19:63:f1:76:94:ff:6c:5e:
6f:0f:9d:2a:0b:91:1b:6f:e0:30:4b:b3:dc:bf:9f:97:a2:59:
b4:89:21:ba:a8:b3:71:c8:d3:21:c5:84:6b:92:6e:21:4d:b7:
9d:37:aa:b7:9e:2a:54:e5:a9:b2:2a:dd:70:67:fc:9c:e1:55:
ee:22:55:f3:02:5f:2d:89:3c:df:41:0d:65:c8:8e:92:97:2a:
d4:6c:6e:be:65:3e:7e:a9:76:5c:15:3b:ed:ec:27:88:dc:e5:
e7:64:d5:d4:56:da:c7:af:22:49:88:02:aa:a6:ac:3c:26:9e:
48:dc:98:ac:dd:22:4b:01:93:23:55:71:b4:4f:df:aa:0d:da:
c2:b1:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:02 2025 by rpki-client