Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iLwYuhY7CKBGApiTzR4rk5WtLu0.roa
File: iLwYuhY7CKBGApiTzR4rk5WtLu0.roa (raw, json)
Hash identifier: /3MhQcjJOKjxe483YH3zJUscm9ITRxdj7Slv422DyjE=
Subject key identifier: 88:BC:18:BA:16:3B:08:A0:46:02:98:93:CD:1E:2B:93:95:AD:2E:ED
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01942747A1CDF0F9651FCA14B9DD31EC61FD
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iLwYuhY7CKBGApiTzR4rk5WtLu0.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a1:cd:f0:f9:65:1f:ca:14:b9:dd:31:ec:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88bc18ba163b08a046029893cd1e2b9395ad2eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:37:a2:f3:13:87:ea:ed:5d:ae:53:85:5c:
35:85:db:af:b8:ff:f7:bc:35:3d:61:39:86:b6:70:
ab:c0:5c:ff:cb:26:36:fe:20:52:7e:23:eb:7a:29:
0c:b6:a2:8a:38:32:01:12:80:54:24:01:7c:cd:1a:
e3:74:73:c6:86:67:41:01:33:e6:52:30:c6:be:ae:
d0:c0:b7:ba:53:97:20:96:24:a4:41:2f:04:3b:ec:
9e:53:e8:79:ab:1b:d9:9f:c6:92:03:53:0d:b4:a0:
60:e9:0e:f0:d2:1f:92:b3:35:b2:24:6e:ad:f7:b2:
49:ef:59:7f:b9:8d:87:39:99:7d:5a:ab:89:5f:0e:
5a:96:cb:61:e6:16:bc:a5:82:af:8c:3a:dc:02:16:
86:10:44:52:a8:d4:18:44:7f:42:c5:9e:d0:ee:f1:
e6:b8:5e:40:bf:9f:82:32:fa:29:bd:84:f8:2c:bb:
7c:b7:2d:59:89:f5:08:32:b0:72:37:35:12:04:6a:
a9:89:fb:d9:b3:c9:33:5a:e2:43:70:7b:a6:0b:aa:
9c:93:0e:df:3c:7e:5b:25:27:47:7c:e8:98:d5:49:
10:0d:f2:e7:16:27:16:c1:0e:da:07:bc:96:c1:d6:
fa:8b:9d:5a:a2:f3:83:ed:67:08:03:07:e4:ea:18:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:18:BA:16:3B:08:A0:46:02:98:93:CD:1E:2B:93:95:AD:2E:ED
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iLwYuhY7CKBGApiTzR4rk5WtLu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.102.0/24
Signature Algorithm: sha256WithRSAEncryption
00:42:0c:74:91:5e:f6:0d:23:32:3e:ac:cc:35:b0:56:76:71:
2f:fe:dd:83:0c:0b:5e:80:b8:ad:6e:ed:5e:19:32:29:c7:10:
ff:1a:9b:ae:a2:c6:1e:20:51:ef:60:08:41:be:2b:35:e7:b0:
36:2e:aa:7d:aa:24:a5:b5:c2:80:e4:94:18:6a:d4:61:e7:dc:
20:94:03:12:65:b9:ac:dd:f5:94:df:11:83:92:3b:07:4e:3d:
81:44:01:72:b8:10:5a:26:2b:ec:dd:ab:12:12:5b:cf:d8:97:
27:f8:98:32:de:16:be:34:ba:1f:2e:22:34:40:e5:23:4f:58:
1a:8c:11:ea:7d:c7:7d:5d:76:84:f6:3b:97:d1:d3:54:0a:41:
ab:b6:ee:56:50:36:14:8b:42:7a:d9:b9:2e:57:37:50:33:16:
da:1b:b1:10:0a:1c:b9:7a:f2:f3:37:a2:09:ee:7d:7e:81:d7:
05:5d:cc:1e:ee:65:ae:9f:e3:36:1b:44:d1:14:a1:82:f7:0b:
1d:e1:03:b1:25:07:ad:e1:2e:da:31:2d:9d:3a:28:d4:8d:34:
26:6b:79:f5:6a:8e:35:05:18:ce:47:b4:43:b6:6f:a0:3e:10:
78:65:74:c2:23:b1:f7:1f:22:44:db:73:9a:81:1b:4a:5b:90:
33:c9:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:08 2025 by rpki-client