Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qX-TAhflhi_5EVsf7AqOe-7t4y8.roa
File: qX-TAhflhi_5EVsf7AqOe-7t4y8.roa (raw, json)
Hash identifier: jksAkxvjQ9fXHMstOeVnEOiQuygnpR2kdktKE858H/Y=
Subject key identifier: A9:7F:93:02:17:E5:86:2F:F9:11:5B:1F:EC:0A:8E:7B:EE:ED:E3:2F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019354FDF730C68D8D6BAF5DCFB2FE36BBC4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qX-TAhflhi_5EVsf7AqOe-7t4y8.roa
Signing time: Fri 22 Nov 2024 17:49:10 +0000
ROA not before: Fri 22 Nov 2024 17:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.100.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:fd:f7:30:c6:8d:8d:6b:af:5d:cf:b2:fe:36:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 22 17:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a97f930217e5862ff9115b1fec0a8e7beeede32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:a9:ea:ba:9b:e6:62:77:3f:76:1b:c1:3d:
d7:18:94:b9:21:24:12:d4:01:a0:14:59:fc:37:f6:
53:13:75:bf:1d:d1:4e:c4:a2:65:3a:cc:c4:4e:a2:
d2:a8:e5:8f:ba:4a:66:65:9f:95:ae:36:29:ea:0e:
b4:6c:9c:63:9d:13:a1:54:32:6d:2e:af:21:a9:49:
4d:82:eb:12:0f:cb:5e:47:ba:61:fa:c7:c4:d1:7b:
c3:bd:6c:30:3d:99:9f:1e:34:0d:e5:40:0a:bf:97:
c0:17:3f:2f:be:0c:3a:9b:01:f2:1c:c6:22:d8:1b:
90:2d:a0:5f:e4:f3:4c:4b:67:f4:6e:3b:43:db:87:
e8:53:46:14:3a:8d:12:b5:88:a8:57:c8:f6:14:c3:
40:48:c5:63:60:5c:6e:1a:7a:61:5d:41:c2:3f:66:
fa:98:26:f8:5d:c7:66:4f:3a:55:ba:31:cf:8a:7c:
43:61:b5:bd:0c:2b:85:09:82:5a:e0:98:3c:ac:61:
0a:5f:b0:3a:c4:5b:bd:d9:bf:2f:85:5e:07:38:cc:
9e:11:a9:e8:c6:79:72:5b:c1:75:06:5d:2c:fc:f3:
3e:9c:ee:f6:1f:e5:93:eb:dd:7b:61:5e:86:70:33:
4c:74:2d:ba:06:d2:fa:a6:4c:5c:18:1b:69:09:a9:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7F:93:02:17:E5:86:2F:F9:11:5B:1F:EC:0A:8E:7B:EE:ED:E3:2F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qX-TAhflhi_5EVsf7AqOe-7t4y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
77.111.106.0/24
85.208.9.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9d:b4:b0:fc:30:ae:be:1a:8f:cd:15:c9:97:38:f4:75:3a:
9b:c6:9e:55:d8:c9:94:ef:f0:c2:15:60:1b:d8:9d:07:d3:10:
8b:59:61:4a:4f:92:19:9f:5d:c6:70:c5:cd:d6:b1:65:a1:b6:
6e:06:c0:d4:8d:94:4f:fd:35:15:e1:f5:a7:06:91:15:44:28:
ae:1b:51:c4:ce:aa:95:2e:c9:b2:72:3a:06:20:17:3d:15:8b:
70:c4:8f:21:dc:60:d3:a4:d7:f9:86:ae:4e:ce:37:67:7a:6d:
a0:0c:57:6a:36:0d:d0:77:4b:e7:14:c1:60:05:08:d8:aa:05:
9c:ea:ed:18:2c:40:8e:89:24:a8:db:b9:f4:90:ec:55:2f:73:
b8:8d:8b:ff:6f:07:f7:cd:64:f9:b8:a6:a3:05:64:02:ec:70:
94:17:9a:88:4e:00:d3:7e:47:29:51:ad:92:63:11:3d:9c:7e:
73:fd:72:2b:f3:f2:58:a6:e7:9c:56:d4:68:3b:11:ff:f2:e9:
58:f7:26:0c:65:88:e6:d1:39:f4:9f:aa:ec:11:2b:6b:4b:c2:
0e:af:26:88:26:8b:9c:29:a6:fd:67:9c:d7:ab:c3:ff:33:25:
0e:7b:5b:a5:e7:3e:f0:61:ab:4f:64:66:b6:44:42:03:b1:06:
07:3b:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:15 2025 by rpki-client