Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/ADjr28xDnqYwCSe2YSx596u1Q58.roa
File: ADjr28xDnqYwCSe2YSx596u1Q58.roa (raw, json)
Hash identifier: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=
Subject key identifier: 00:38:EB:DB:CC:43:9E:A6:30:09:27:B6:61:2C:79:F7:AB:B5:43:9F
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 019426D9529F43F3B521A4A58276D5FC8CCD
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/ADjr28xDnqYwCSe2YSx596u1Q58.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210728
IP address blocks: 77.246.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:9f:43:f3:b5:21:a4:a5:82:76:d5:fc:8c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0038ebdbcc439ea6300927b6612c79f7abb5439f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:26:ea:1a:51:92:ac:44:4f:c8:2f:b7:b3:
b0:e8:dc:6f:e0:5c:d3:3f:2c:e2:34:ca:cf:19:23:
0a:49:ba:58:2f:fe:b7:5a:45:bd:be:0f:1f:fd:a5:
f0:6d:08:15:33:ac:38:39:2d:7d:92:f3:9e:2a:75:
95:b8:88:a0:88:63:45:f8:f1:75:67:28:c1:d2:25:
06:f8:88:bf:72:1f:5b:b9:e0:25:83:3f:39:87:60:
92:59:d8:c6:1a:6e:a3:20:a5:2d:ae:b5:77:9c:88:
f5:1a:4c:9c:93:67:35:b6:ab:f4:d5:12:7b:8c:02:
8a:7e:1c:9c:34:9d:c7:68:2b:d7:ef:db:a4:38:7d:
a7:32:2b:96:3a:1a:87:b8:39:db:85:22:13:5f:f0:
6e:0b:f2:26:bf:f1:8d:49:eb:00:53:63:2c:f5:a8:
21:83:eb:15:b0:fe:aa:8e:fa:a2:c1:3c:23:64:4a:
47:58:b4:31:5e:7e:09:5a:b3:2e:f6:15:2b:d3:3e:
dd:00:1c:97:7c:9e:aa:01:25:2d:5a:fb:b6:df:3d:
2d:bc:76:b7:24:ff:58:88:17:d3:0a:53:8d:b2:cc:
9e:45:56:ff:44:f8:4a:aa:e1:00:a3:83:82:9f:ed:
79:ee:0d:0e:0c:8b:7c:3f:02:ff:01:5f:1b:2c:33:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:EB:DB:CC:43:9E:A6:30:09:27:B6:61:2C:79:F7:AB:B5:43:9F
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/ADjr28xDnqYwCSe2YSx596u1Q58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b3:7c:b4:f0:c8:75:df:3a:0f:de:9e:e2:62:57:9b:51:19:
1f:cf:7f:3c:ce:d6:05:39:00:df:38:30:02:ae:ca:6c:c6:cb:
12:b2:95:c8:7e:4e:e4:75:de:75:64:e7:a6:5c:c8:02:e5:12:
49:ef:d1:f2:f8:97:7f:5f:5e:16:90:d1:e8:65:eb:2d:c2:0e:
00:e8:05:40:8f:35:03:4e:fe:3b:d8:d3:b0:bb:dd:26:f5:7d:
04:42:fd:55:9e:e5:ff:63:aa:13:60:4e:a7:8c:b0:81:5b:09:
a4:7e:ae:85:1c:d3:e6:a3:09:47:09:5f:4e:18:f5:83:ef:9b:
2b:b1:13:66:99:81:19:c7:d4:ec:b1:cc:85:cd:8e:ae:fc:54:
d1:0d:57:46:e8:a1:ee:33:1e:6f:42:b9:45:21:f8:34:16:b0:
d2:18:97:50:f0:1f:6d:d2:61:d0:bd:ea:c0:09:22:4f:e6:78:
79:e1:84:8f:cd:4a:6c:29:f4:24:59:54:d8:09:db:3e:96:d8:
32:ee:53:bf:94:9b:a6:13:50:67:e6:db:25:62:52:95:90:4e:
51:a5:6c:fe:9b:b8:94:55:ab:2e:ae:86:2e:f0:09:0c:91:7b:
5c:dd:bb:52:8b:46:3e:75:7f:20:18:a3:00:c6:79:f4:90:0b:
ba:39:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:49 2025 by rpki-client