Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/77N0kmrV8mibL0ZZuY__E5caV3Q.roa
File: 77N0kmrV8mibL0ZZuY__E5caV3Q.roa (raw, json)
Hash identifier: 7FreglCopyDmY0fkGei7tZ4UAKD5765zaWn0X7I2nXQ=
Subject key identifier: EF:B3:74:92:6A:D5:F2:68:9B:2F:46:59:B9:8F:FF:13:97:1A:57:74
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B2043C7986D3AC4665BF1757553E
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/77N0kmrV8mibL0ZZuY__E5caV3Q.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47225
IP address blocks: 89.46.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b2:04:3c:79:86:d3:ac:46:65:bf:17:57:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb374926ad5f2689b2f4659b98fff13971a5774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:18:75:71:1e:ea:4a:b3:46:c2:2a:87:f9:
a2:79:12:0b:76:ab:0a:5f:7a:90:6f:ca:13:11:6c:
b7:1a:94:0e:ba:4c:2e:2a:d0:d2:2e:c4:ec:28:14:
35:2a:99:0e:27:4d:a8:0f:9c:84:0f:31:d3:16:b2:
5f:50:87:56:9e:cb:e4:b8:f9:fd:21:92:c8:a2:08:
ee:58:29:91:9f:89:65:fa:af:30:3a:51:ce:8d:5a:
9f:db:c5:5d:1d:ed:7f:9f:77:c3:34:1c:3e:c4:6f:
b9:0b:7c:d1:97:14:44:fc:01:66:08:3d:59:44:34:
e6:ca:ed:ad:16:4b:60:84:b3:d1:d0:70:34:b1:78:
a8:ed:f2:48:73:77:ba:a9:df:cb:da:38:10:9c:69:
05:b3:2a:90:62:13:30:6c:31:c8:d3:b3:05:76:0f:
66:43:6e:ea:78:e7:2e:a4:c1:77:c5:3e:ac:12:0c:
e9:47:7f:94:8a:5d:eb:86:39:cd:0c:b0:79:ca:9a:
38:70:bc:83:7c:bf:0d:e7:29:fa:b4:2a:b6:73:da:
ed:19:7d:57:32:52:1b:cd:f5:66:3c:de:47:1d:0e:
71:9d:c4:ee:e8:cc:a9:04:2a:7e:7e:61:77:3e:ec:
08:2e:e5:fc:87:6f:cf:a7:ec:aa:dd:86:82:63:9c:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:74:92:6A:D5:F2:68:9B:2F:46:59:B9:8F:FF:13:97:1A:57:74
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/77N0kmrV8mibL0ZZuY__E5caV3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.243.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c5:7b:e3:f4:3b:5c:c3:b5:8e:e7:f6:c6:13:51:64:90:ca:
1a:fd:6e:3f:44:c0:15:7a:df:4a:be:54:17:e5:c9:3c:a3:d2:
db:5d:37:6b:d0:a5:d6:73:77:5b:c4:0c:c3:90:b8:0c:90:e7:
2e:5b:05:2b:8a:07:b8:e7:8b:c6:94:6b:38:44:33:f0:c6:0c:
4d:75:a0:34:45:5a:a1:5d:39:e8:f1:8e:01:53:f4:3c:25:8d:
69:7b:ba:0f:24:2e:ad:de:fd:64:22:a0:a1:09:c6:28:5b:8b:
9c:1c:8c:93:d1:1f:65:55:7c:4a:91:b4:61:82:c5:95:86:cc:
8b:ed:cc:84:90:cc:a4:06:87:36:67:c8:8d:fe:10:57:94:dc:
95:8f:6c:43:65:5b:02:bc:3a:99:5c:11:1d:36:13:ef:d0:57:
76:29:2b:ff:9e:a0:c0:ad:2b:83:79:98:1a:d2:f4:04:a7:65:
0c:96:26:24:82:ab:b0:d5:70:33:12:71:46:61:75:15:d1:67:
16:c6:57:76:b6:15:f1:77:ac:a9:55:f3:4b:96:95:cb:2f:e5:
be:ae:30:57:ab:04:9e:80:3e:88:bd:ed:df:d3:b5:9d:7e:5b:
b5:70:5d:04:78:dc:4f:f3:ad:82:76:34:62:1f:86:91:7a:e4:
5f:3f:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:12 2025 by rpki-client