Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uIoPcan5Jtb6bgMbYV6-vMA7764.roa
File: uIoPcan5Jtb6bgMbYV6-vMA7764.roa (raw, json)
Hash identifier: 5t+7H6zf+s22omFQtzdNBcP6BrUZLAVhtQAB7s5fJyM=
Subject key identifier: B8:8A:0F:71:A9:F9:26:D6:FA:6E:03:1B:61:5E:BE:BC:C0:3B:EF:AE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193CBE1F2544DBAF43432A2A79F53B61CCE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uIoPcan5Jtb6bgMbYV6-vMA7764.roa
Signing time: Sun 15 Dec 2024 19:53:22 +0000
ROA not before: Sun 15 Dec 2024 19:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 77.111.96.0/24 maxlen: 24
77.111.97.0/24 maxlen: 24
77.111.107.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:e1:f2:54:4d:ba:f4:34:32:a2:a7:9f:53:b6:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 15 19:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88a0f71a9f926d6fa6e031b615ebebcc03befae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:b4:10:46:9f:e3:87:20:38:64:13:ca:bf:
6c:24:14:83:c1:9d:10:03:16:65:17:56:79:fe:18:
16:cc:9e:34:0f:56:83:f0:f3:c1:b1:9d:08:14:18:
8e:77:4e:8d:69:75:01:08:fb:f3:77:21:c8:38:28:
87:eb:22:5c:c5:7f:d4:2b:21:6a:53:fb:d5:67:b8:
43:e2:43:cc:2b:2d:94:72:45:80:16:88:60:67:bc:
78:10:14:15:04:96:19:03:87:30:0d:e5:91:ef:de:
51:28:74:39:15:7a:29:9c:d4:ac:00:f1:86:00:c5:
e4:35:8f:3c:e2:bc:3d:4d:f9:f3:33:4e:de:5c:8e:
05:68:0d:8e:38:a9:49:ed:5a:98:d2:e4:08:8f:36:
52:ad:a2:69:47:44:e4:8c:eb:9a:44:aa:c8:51:d9:
84:ae:8a:63:f0:48:18:40:55:1f:78:13:14:d7:62:
56:91:a2:70:a7:3f:d2:b3:a8:f1:cf:6e:87:6d:99:
43:64:2e:b1:3a:cb:94:19:a9:c1:f6:52:47:65:c2:
45:34:3c:73:45:d9:28:72:42:ef:28:11:4f:e2:9d:
78:e9:a4:ea:e6:f6:99:6f:fd:cd:cc:d2:15:2c:0f:
8c:65:83:cd:0a:86:4b:e9:c7:15:44:52:43:04:48:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:0F:71:A9:F9:26:D6:FA:6E:03:1B:61:5E:BE:BC:C0:3B:EF:AE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uIoPcan5Jtb6bgMbYV6-vMA7764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/23
77.111.107.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e7:51:1c:91:c7:d3:e1:a8:b5:f5:15:dd:a8:ba:1a:92:e4:
dc:21:5d:7b:d1:46:0c:af:3c:57:2f:fb:68:f1:d6:eb:e1:a7:
fe:6f:cb:05:b3:f9:be:21:7e:9d:9c:7d:46:9d:9d:73:df:01:
a4:e0:c2:c4:c6:d7:91:0a:8f:f2:5d:c9:be:d2:4b:aa:32:68:
05:60:0b:dd:ae:87:f6:d2:35:f1:ef:9b:51:e1:8c:1c:03:20:
33:e5:a3:d1:01:80:5a:6e:3e:2d:df:6e:3a:3a:98:8c:8d:44:
c3:9f:13:38:dc:8b:ac:b1:81:c0:03:7f:6d:a6:ba:41:a0:8a:
38:67:86:74:ba:02:83:62:eb:ae:bb:7a:b9:a4:4e:22:bf:4a:
8c:e4:38:6a:5a:2b:d2:54:29:c3:10:23:2e:85:b6:3e:bb:dc:
24:a5:e8:d2:62:04:f2:c1:00:df:bf:9e:67:70:90:c8:b6:70:
9f:77:36:8e:84:d5:94:00:e2:7b:e9:97:00:07:21:a3:eb:1a:
df:38:36:65:d4:25:ce:d1:56:2c:d0:74:91:0b:4e:80:f9:bf:
05:e0:9e:81:52:63:6b:b1:a8:ef:66:71:7d:4d:9e:91:64:f1:
18:c5:f1:56:0d:56:23:f4:d0:e9:fc:1c:8f:a2:f6:e3:1d:3f:
ed:19:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:10 2025 by rpki-client