Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/E77W28wiF50IkO-MfbqRhLv-CH8.roa
File: E77W28wiF50IkO-MfbqRhLv-CH8.roa (raw, json)
Hash identifier: 0/YWvGyP0HxspplkXKv5ivuZGVdUvzbxzTq1+TTsXNs=
Subject key identifier: 13:BE:D6:DB:CC:22:17:9D:08:90:EF:8C:7D:BA:91:84:BB:FE:08:7F
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01941F8C4820B4C94AE3CC4327D59588829F
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/E77W28wiF50IkO-MfbqRhLv-CH8.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61275
IP address blocks: 88.84.48.0/20 maxlen: 20
185.9.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:20:b4:c9:4a:e3:cc:43:27:d5:95:88:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13bed6dbcc22179d0890ef8c7dba9184bbfe087f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:12:5d:3b:52:df:6f:22:f6:6b:6d:da:cf:
13:76:5e:65:2a:a2:ef:90:38:07:d8:8d:15:b6:c2:
aa:2e:4e:3f:63:38:15:ae:af:95:ab:a8:2b:9c:04:
56:38:55:87:c6:69:10:95:cd:81:a9:03:13:d4:5f:
07:ce:77:8a:37:c2:f3:3f:c9:e7:15:15:96:b5:36:
6d:a5:17:08:d9:d6:18:22:80:da:c7:88:ca:88:05:
2d:94:3b:45:3b:2c:9a:b9:5a:1a:b7:3a:eb:90:49:
79:39:d6:f7:19:04:f2:f5:cf:c1:53:e6:b5:d3:3b:
f7:78:8c:7a:7e:8a:65:66:9d:6e:7d:06:74:fb:65:
a4:f0:9e:7e:22:01:98:2e:66:a2:66:79:07:c7:3d:
2b:3a:a6:d9:3f:a8:fe:4b:50:80:d3:70:bc:e0:a2:
33:c9:aa:1a:a5:79:4b:2e:b0:d7:27:68:83:16:17:
d4:c6:30:27:46:13:02:a2:b3:69:36:9f:6e:c5:46:
da:19:ec:05:a0:a9:71:27:06:7b:3c:e8:dd:95:1e:
5a:44:9e:3d:b8:d3:78:c5:a9:e5:dc:2c:c1:af:e0:
d4:1c:6e:17:93:95:d8:20:5b:9c:70:1a:a2:f6:86:
fd:58:11:dc:f6:83:ba:ac:4c:9a:24:14:b9:8c:5a:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:D6:DB:CC:22:17:9D:08:90:EF:8C:7D:BA:91:84:BB:FE:08:7F
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/E77W28wiF50IkO-MfbqRhLv-CH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.48.0/20
185.9.90.0/23
Signature Algorithm: sha256WithRSAEncryption
07:4b:e4:35:4b:5b:7a:7b:16:7d:60:13:c3:c4:fe:ec:be:c2:
4a:47:b0:31:11:3a:56:bb:96:60:21:43:6e:26:d3:19:44:92:
9f:0a:80:c7:c0:b7:89:ab:d2:52:f2:87:28:7f:b1:56:d0:ce:
61:1f:22:66:ca:be:1a:a9:a2:32:71:fa:b9:68:de:3f:e2:ea:
ef:b3:00:be:63:b4:a2:2d:91:7d:61:18:65:eb:87:03:9b:61:
d6:db:1d:42:50:b2:12:27:f9:9c:6b:32:1b:9c:ae:d7:a1:82:
e3:b5:b6:bd:aa:3d:4f:7e:30:a0:7f:a4:a4:a5:bf:8c:d9:16:
b1:9a:ea:48:ef:c0:81:13:24:6e:b2:07:24:43:27:7c:b1:25:
0a:ca:84:ed:24:19:68:ab:4e:2f:57:15:0d:ac:a6:a6:3e:e8:
54:5b:bd:5a:37:52:94:bf:ee:b5:92:87:cc:33:f4:59:6f:58:
06:70:46:36:30:72:46:73:3b:47:ca:06:cf:ea:8c:24:53:1c:
42:3c:2f:9d:0a:2d:68:42:6d:fa:6a:e0:b8:a7:f3:ae:73:2d:
6f:07:40:15:40:46:63:52:bf:2e:fc:fc:a3:10:79:48:8e:b8:
1e:4e:40:49:43:76:94:eb:2a:b1:d2:36:07:d7:4d:03:d0:ec:
90:6d:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:57 2025 by rpki-client