Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ww9SVnBXN3gAqWv1lx5pzl2Q-hs.roa
File: ww9SVnBXN3gAqWv1lx5pzl2Q-hs.roa (raw, json)
Hash identifier: ENVjWZd6nIAfbszn8x6YGoQDqmsPfRZq+nXdnQbXOgw=
Subject key identifier: C3:0F:52:56:70:57:37:78:00:A9:6B:F5:97:1E:69:CE:5D:90:FA:1B
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB83205860DCDEDB085657B44F237
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ww9SVnBXN3gAqWv1lx5pzl2Q-hs.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205308
IP address blocks: 77.79.201.0/24 maxlen: 24
206.252.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b8:32:05:86:0d:cd:ed:b0:85:65:7b:44:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30f52567057377800a96bf5971e69ce5d90fa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:f4:51:af:b1:84:41:ec:be:70:a6:c3:7f:
32:a0:fc:aa:0d:ba:75:c6:e3:6b:32:5b:55:1f:7f:
ef:18:29:fe:81:06:f8:b6:2d:d1:28:c2:11:44:78:
65:8c:fc:d1:6a:6f:cc:92:93:f5:61:33:45:2a:24:
71:ea:d0:d3:de:47:b1:c9:6c:7f:cb:a6:f2:dd:48:
6c:46:a2:4a:c1:3f:36:c9:8e:4c:33:3a:a1:dc:e9:
48:df:d4:ce:ad:11:76:dc:c7:86:9f:f1:0b:5a:d3:
97:5a:04:ea:ff:39:93:4c:b5:ea:59:3a:fc:5a:ac:
5f:1b:a0:09:6e:db:44:e5:0a:bc:3a:b8:c6:fb:49:
db:ba:0f:d5:30:7a:05:d9:cc:0c:aa:b9:f5:4e:6d:
8d:25:ba:e2:98:f4:b2:12:79:d8:05:5d:66:27:dc:
73:f8:87:0c:f8:eb:7a:c1:b2:5b:f8:a8:07:39:31:
c3:91:57:5d:42:13:b8:32:8f:68:7b:f6:30:e7:d9:
2e:78:61:cb:33:5a:cd:db:7d:77:dc:7d:15:85:e3:
b3:9a:37:e4:0b:5e:cd:f4:b3:0f:b8:ff:0a:90:9f:
c6:c6:66:de:1a:17:f9:d2:21:57:d0:41:c7:9a:10:
8b:21:10:a4:1c:bc:76:fc:c4:6a:93:9d:22:8a:91:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:52:56:70:57:37:78:00:A9:6B:F5:97:1E:69:CE:5D:90:FA:1B
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ww9SVnBXN3gAqWv1lx5pzl2Q-hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.201.0/24
206.252.224.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:31:00:7b:a4:bc:02:e2:42:82:e0:d4:68:74:c2:62:2e:
4c:42:4a:1c:6c:2b:4d:60:84:21:52:b2:82:e2:b0:ed:d0:30:
0e:3f:ec:46:6c:c1:88:17:4a:af:be:f7:66:03:f1:c6:fe:fe:
68:87:8e:9e:83:bd:20:60:23:ce:6c:19:54:78:b7:cb:2b:c3:
b0:c0:3f:7a:af:04:84:15:96:48:eb:10:c0:4a:55:18:ba:bd:
8c:ee:9b:b3:b9:53:2f:87:ac:39:24:2d:5a:4d:8c:fd:b8:9c:
9c:bf:fc:e0:db:b0:c5:ff:61:ea:4b:78:81:3a:db:6f:9d:40:
dc:fb:5c:c8:28:36:45:75:b1:cb:9b:e6:58:96:92:86:49:5f:
14:e2:b1:7f:75:66:9a:b7:44:ba:63:e8:94:0f:f6:4c:ae:9a:
87:fe:f8:98:71:0c:26:22:f9:4f:e3:74:7c:0b:17:35:b5:1f:
5b:46:32:61:54:23:3e:e6:6e:a4:db:f5:38:58:d3:31:c9:0d:
e6:7e:49:a4:a8:b6:6c:da:12:28:e7:e7:88:5d:c0:1b:ed:b1:
5b:47:e4:4a:41:45:02:4a:96:07:0f:e7:20:71:38:ff:e6:d4:
c3:87:3b:33:82:46:29:0b:b4:f4:97:5b:f6:8f:1b:12:96:97:
9a:e9:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:26 2025 by rpki-client