Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa
File: WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa (raw, json)
Hash identifier: Gvh794vOKgG0OwQ64JTnIyPSYhfW7Hev4v5ELJw0JcY=
Subject key identifier: 58:0A:13:40:19:FC:88:96:41:BB:C7:B6:00:7A:9A:D5:B1:84:9A:B2
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 01942369967832A1DE87A33BBD97502800F0
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209752
IP address blocks: 77.69.248.0/24 maxlen: 24
2001:1a40:10::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:96:78:32:a1:de:87:a3:3b:bd:97:50:28:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=580a134019fc889641bbc7b6007a9ad5b1849ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:d3:cb:47:24:a5:23:84:dc:86:5b:78:f5:
3e:9d:ab:87:d6:6a:5d:75:4a:f5:03:b7:ad:ea:de:
6d:ff:0e:65:33:05:d1:ce:b5:d7:ae:f1:37:cd:c6:
27:2e:e8:c8:f6:5a:56:08:20:d9:f2:bf:d3:8e:38:
bf:f9:54:d2:81:59:24:4b:e1:da:75:65:3f:1f:f2:
b7:26:76:6f:21:95:8a:b0:ce:31:f9:f6:2c:a2:43:
42:04:0d:5a:9c:49:6e:4e:9d:77:bd:ec:8c:69:eb:
8d:aa:c5:e2:f9:26:ef:94:d2:99:ab:90:af:50:dd:
f4:0c:c6:ad:d1:d1:87:35:f9:c5:0f:a1:7f:67:81:
1e:8c:b9:48:a3:b8:c6:22:bf:10:78:56:2b:5a:36:
f7:29:ec:a0:4c:aa:c4:c9:d6:f0:8e:60:d7:dc:a9:
61:34:16:c1:11:a9:1e:eb:3b:31:39:2a:ae:04:f9:
39:6d:e9:74:ab:68:54:44:e0:ed:26:02:8a:a7:88:
c6:29:a3:b3:cc:01:47:b6:b9:f9:06:df:f1:6d:3e:
5e:37:ec:a7:f1:26:d0:fd:ae:a9:ce:63:3b:b6:3d:
61:ed:ec:37:18:c6:a3:66:43:93:17:5a:76:0d:4b:
1a:08:0c:1e:0b:73:83:4d:be:29:e2:02:95:7f:57:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0A:13:40:19:FC:88:96:41:BB:C7:B6:00:7A:9A:D5:B1:84:9A:B2
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.248.0/24
IPv6:
2001:1a40:10::/64
Signature Algorithm: sha256WithRSAEncryption
3b:45:37:16:ba:56:25:f0:dc:e8:f9:25:ac:46:d2:a6:f7:eb:
4e:11:b7:7d:b7:08:7b:d9:e3:ff:09:cc:23:6d:06:95:6b:5f:
05:7a:6b:35:81:1c:4d:f7:c6:93:bf:30:f6:9f:cc:b0:52:e3:
a3:46:73:bc:97:87:d4:d8:09:90:26:96:34:de:a5:70:cb:be:
c0:51:4f:32:93:01:5a:fb:b5:66:0c:d3:74:12:61:b2:1d:2a:
c0:13:a4:40:7e:d2:9e:31:87:e9:2b:54:7b:3d:f3:ea:9f:c3:
b6:db:d6:3b:8d:c5:50:b2:a9:dc:41:92:bf:be:59:90:0a:53:
06:e8:33:93:c6:c1:24:15:e8:6d:70:c0:a2:98:0c:54:5d:3f:
75:93:ff:4f:36:58:c0:94:13:61:7a:c4:1d:e7:d6:7b:60:25:
d4:c6:4f:4b:ce:16:13:92:07:dc:39:ea:5e:dc:66:0c:b1:cb:
bc:17:28:43:69:a1:d0:eb:36:ff:6c:0a:a6:dd:54:03:4f:75:
bc:90:e0:75:8a:cb:9f:a9:20:5c:e1:91:0c:17:76:b3:e0:a5:
db:ee:96:7c:71:2f:6b:5e:20:a7:7c:ad:59:c6:fc:10:7d:f6:
31:6e:75:52:b5:38:bd:30:f5:04:94:23:00:66:e3:73:b9:35:
46:ea:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:36 2025 by rpki-client