Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rVi9SIz1R0JJfHr2FEo1uVh6P3A.roa
File: rVi9SIz1R0JJfHr2FEo1uVh6P3A.roa (raw, json)
Hash identifier: pGRZABzuIS50/0nFcfYOuEBV7/qC/HvANrAQi4xSIGw=
Subject key identifier: AD:58:BD:48:8C:F5:47:42:49:7C:7A:F6:14:4A:35:B9:58:7A:3F:70
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194DC1D7A1A677AA494F5B8AAC9A382AD98
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rVi9SIz1R0JJfHr2FEo1uVh6P3A.roa
Signing time: Thu 06 Feb 2025 16:35:06 +0000
ROA not before: Thu 06 Feb 2025 16:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 77.111.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:1d:7a:1a:67:7a:a4:94:f5:b8:aa:c9:a3:82:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 6 16:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad58bd488cf54742497c7af6144a35b9587a3f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:7b:63:30:2d:3e:79:95:8b:32:5a:25:06:
b1:00:b6:2a:45:d5:12:c3:fa:48:1b:32:29:d4:c4:
e0:8a:d1:d5:60:85:a5:8c:4f:98:91:37:37:e1:b1:
74:eb:b4:54:56:82:32:bc:91:d0:84:cd:16:15:a3:
e0:00:92:eb:47:31:0a:d6:99:bd:fe:3b:25:a0:eb:
71:0a:dd:80:10:44:72:b1:db:16:1d:7d:2e:e8:e3:
0e:de:39:9b:01:f6:74:73:80:80:1f:35:6e:3b:58:
5a:fd:2e:fd:26:2a:62:d5:20:d4:cc:c8:7f:60:8e:
ac:c1:48:89:03:ce:f8:8a:4c:6d:e0:12:2e:95:5d:
ef:f5:83:28:5a:21:72:16:ec:20:a8:53:f0:fb:b7:
78:62:ea:bb:bd:ba:4c:d6:a2:94:38:02:f3:65:9d:
29:44:b8:41:01:21:29:e1:47:6e:7c:a6:98:f2:8e:
70:0a:89:b4:1b:e7:b2:8e:37:64:c9:bd:70:c2:a6:
4c:e0:ef:8a:2b:35:de:24:04:f5:d0:b7:04:e3:ba:
bb:a6:da:00:3e:83:a7:44:0e:18:76:d6:fe:d0:00:
ef:db:99:37:d8:4a:b1:5b:87:73:12:d1:4d:23:08:
13:4c:ce:7a:c6:26:1e:bc:87:a6:ea:69:1c:18:0d:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:BD:48:8C:F5:47:42:49:7C:7A:F6:14:4A:35:B9:58:7A:3F:70
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rVi9SIz1R0JJfHr2FEo1uVh6P3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7e:8f:58:eb:64:96:7c:66:a9:cc:fc:fb:39:57:bb:df:d5:
2d:fd:bf:39:f2:01:5d:51:97:40:d5:24:09:5c:b9:c1:71:53:
64:d5:0a:6b:ca:8c:3c:cf:c4:1d:5f:17:b7:0e:68:53:f1:7a:
d2:dd:9c:6e:7a:92:fe:6c:4c:ae:59:e2:dc:97:2d:06:dd:fa:
24:fc:8d:05:b6:e8:2d:27:76:c3:b5:d6:92:c0:43:f9:66:ab:
ae:25:2c:db:65:7b:50:56:d6:84:50:cd:99:f4:33:0b:46:56:
74:a2:34:24:6e:f1:ee:dc:c0:ab:92:c7:96:92:a5:3c:fd:d4:
bc:68:f8:69:a8:ff:f7:78:c8:f6:dd:b6:44:1e:82:13:84:e0:
9a:c9:3a:61:f3:ee:76:6d:40:7e:71:f1:86:cb:2c:d0:ee:a1:
cc:d1:c0:ac:f2:e6:4b:a5:7a:54:0d:ac:09:d5:49:91:54:74:
15:e6:e0:89:33:ca:0e:6b:48:74:e9:df:86:96:16:5c:3e:93:
23:79:d2:92:aa:da:c7:25:55:cd:3b:de:69:c5:54:91:e1:d7:
65:18:bd:1f:5d:f7:75:eb:28:ee:0c:62:53:5f:7d:fe:eb:c4:
2a:1e:4a:9c:d7:bc:bd:43:c0:f6:ad:0d:4a:00:c6:29:3e:23:
e6:f7:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:31 2025 by rpki-client