Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/aiV1bvRqs_G_sgOlfybawGAadgI.roa
File: aiV1bvRqs_G_sgOlfybawGAadgI.roa (raw, json)
Hash identifier: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=
Subject key identifier: 6A:25:75:6E:F4:6A:B3:F1:BF:B2:03:A5:7F:26:DA:C0:60:1A:76:02
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 0194222029BEFDC1741DA709D5D9698142BF
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/aiV1bvRqs_G_sgOlfybawGAadgI.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44858
IP address blocks: 77.241.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:be:fd:c1:74:1d:a7:09:d5:d9:69:81:42:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a25756ef46ab3f1bfb203a57f26dac0601a7602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:82:b7:4a:70:7c:0b:f0:a9:c6:7b:6f:5d:
25:ea:84:33:56:de:7c:61:b4:df:44:2a:af:6b:fd:
38:d3:eb:d3:29:e4:a4:9e:15:ef:4a:4a:f3:87:71:
ab:b7:71:28:41:b3:d8:9b:94:0b:cc:7c:92:06:0e:
b4:c5:8b:4c:b1:eb:33:97:cb:72:3c:eb:a6:6a:e1:
a6:4a:5e:83:1e:44:2e:f2:ee:5f:c1:49:b9:4c:55:
0a:b7:ef:b4:c5:4e:98:dc:81:2d:a1:fa:c3:7b:74:
51:57:a2:66:68:eb:e0:53:ee:df:d2:f3:96:b0:46:
f4:a9:67:1f:80:0f:fb:0d:a8:e8:48:ac:81:dc:ab:
da:8a:2a:ed:8b:69:62:05:26:b7:b8:e7:9d:de:4b:
40:b2:dc:aa:e3:e2:d9:1b:10:d1:85:34:d4:e3:93:
07:73:2a:5d:93:98:1c:a3:7e:03:28:31:95:60:97:
7d:b3:18:b2:e2:16:99:1f:56:21:2a:76:b4:d9:39:
aa:e3:87:51:3f:56:3d:c4:8a:20:57:ff:bb:f8:c4:
87:8e:74:4b:fb:26:66:09:b9:4d:88:23:60:51:a6:
b0:0b:6b:be:4d:b2:8d:2c:05:6a:b8:37:29:18:f3:
4b:2a:d1:3f:f0:33:43:32:4d:9a:b7:09:bd:d7:a8:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:75:6E:F4:6A:B3:F1:BF:B2:03:A5:7F:26:DA:C0:60:1A:76:02
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/aiV1bvRqs_G_sgOlfybawGAadgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.68.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e8:c3:42:b5:6f:a0:28:f3:25:37:c6:e1:8d:ad:da:74:bc:
3a:a9:5a:f1:c1:39:5d:aa:f8:d4:85:b3:f9:53:ae:55:4a:9b:
5b:89:9e:04:b8:0b:b6:e3:b3:bf:96:1a:05:bc:49:ea:b0:2d:
b3:e1:d5:4e:49:cc:e2:77:33:6c:b9:6f:eb:c9:db:25:5b:b2:
eb:30:0d:60:e1:5f:7c:a2:d3:d6:a0:07:3d:c1:6d:0e:a9:db:
82:ed:8d:d8:87:2d:02:94:3e:9b:36:bc:1a:76:dd:b3:a9:25:
b9:7b:14:15:b6:f9:9d:43:01:37:50:ce:e0:ce:7c:05:a6:c2:
77:4a:03:51:e2:d1:84:ee:aa:32:2c:37:ec:10:18:29:35:7f:
3a:3a:22:f2:81:bf:03:47:73:7c:91:84:91:a9:4a:08:aa:a7:
b1:cc:91:47:ab:ef:54:de:8a:6d:f8:32:3f:c5:6c:63:14:2c:
54:7d:4e:8e:26:c3:7c:76:cc:da:8e:a4:bd:58:85:8d:4c:00:
92:83:36:c6:56:6a:4c:e1:7b:58:4b:27:21:49:d7:75:e6:3d:
b8:51:b9:21:b0:6e:25:c1:79:74:e5:7e:81:a3:00:29:37:24:
49:35:d8:95:f6:8f:17:a4:b8:e0:3e:3a:14:6b:2c:77:45:aa:
61:ab:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:34 2025 by rpki-client