Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pB7tJB9icMWCfHAzpVHqozy-YSQ.roa
File: pB7tJB9icMWCfHAzpVHqozy-YSQ.roa (raw, json)
Hash identifier: PcG1UG29SfIHisCz+ujvkl+9YDhVT9blmpTrtEzLu3o=
Subject key identifier: A4:1E:ED:24:1F:62:70:C5:82:7C:70:33:A5:51:EA:A3:3C:BE:61:24
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BDB68AFCF4393704DA2E17F9C383
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pB7tJB9icMWCfHAzpVHqozy-YSQ.roa
Signing time: Thu 02 Jan 2025 13:48:55 +0000
ROA not before: Thu 02 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215347
IP address blocks: 77.92.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bd:b6:8a:fc:f4:39:37:04:da:2e:17:f9:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a41eed241f6270c5827c7033a551eaa33cbe6124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:68:64:10:30:62:7a:3e:d2:e5:65:46:1b:
e9:2a:25:87:b2:21:15:a0:31:d6:ff:21:aa:02:6a:
c8:c8:d9:6a:af:4e:16:70:fe:14:4f:7b:05:bc:54:
86:38:e6:00:42:c5:a0:2e:a7:60:92:3d:cf:55:31:
dd:cd:3d:c9:a7:19:5c:62:5e:f0:3f:f0:fc:8c:29:
83:0f:4f:98:51:9d:bc:c8:3c:fd:47:ce:d2:05:87:
06:bf:35:18:da:a0:00:fe:fd:1f:41:c8:0d:b6:b0:
a2:96:35:e2:82:f3:66:da:6b:83:d4:2c:b4:70:1b:
c9:73:b1:da:d4:a6:cd:bc:a5:63:45:88:97:19:21:
f9:b9:80:e5:4d:fa:c5:16:1b:43:30:93:6a:97:cb:
d6:8b:87:5f:7d:48:a3:71:ae:7b:70:e7:e4:92:85:
8f:1a:52:b2:af:38:6f:8a:04:87:cf:6b:9d:53:35:
25:4c:78:58:77:0f:26:49:4a:e1:5b:11:68:a6:ab:
d3:9a:a0:e3:20:d3:5b:ac:9c:0f:d0:34:09:e4:cb:
8d:4f:ad:cd:68:e0:19:4e:4b:75:2f:6c:d2:83:c5:
70:42:f8:d8:ef:7d:06:d7:35:e3:c2:0c:00:db:5f:
a4:f0:ca:fc:c2:c1:55:3b:d7:78:dd:2d:6f:f8:83:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:ED:24:1F:62:70:C5:82:7C:70:33:A5:51:EA:A3:3C:BE:61:24
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pB7tJB9icMWCfHAzpVHqozy-YSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:8e:a9:39:a9:36:c3:13:d7:41:e6:e4:b3:4a:fc:ab:1b:
26:ab:3a:e1:e6:b1:46:4e:b0:7f:49:80:13:3a:6d:28:9d:39:
a0:54:51:0b:36:36:a9:78:38:8e:46:db:37:e2:b7:70:36:89:
d8:b9:96:71:9a:df:a1:e4:32:26:2d:4e:a7:ec:65:7d:fe:79:
76:c9:b1:c3:66:c1:96:db:31:6f:dd:5f:75:b6:b0:fa:f3:be:
cc:1e:f6:4f:db:aa:a8:e2:a7:da:6f:60:b1:4d:be:a1:24:32:
bc:83:cd:dd:64:4d:6d:2e:1c:05:37:84:2f:8e:c6:7f:a1:d3:
43:76:c8:73:85:0d:29:e8:05:fa:a0:7a:b0:97:80:bd:2a:14:
a6:2a:be:87:2e:b1:4a:d0:e3:25:bd:f1:b7:59:cb:95:f4:79:
22:1b:c4:4b:64:4e:00:be:56:29:96:9f:77:b3:d8:98:ee:11:
1e:13:ff:e4:3a:08:75:fb:9e:b5:19:93:d1:13:ce:3c:28:0b:
3b:a6:71:25:c8:53:6d:3a:1a:b8:fb:37:30:59:04:75:7d:0f:
b5:b4:e2:ea:b6:ab:07:f3:19:c8:de:dd:4e:76:75:c9:f6:03:
38:73:0c:14:23:e3:78:22:2f:d8:38:bb:56:fd:11:12:ba:1e:
a7:d7:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:20 2025 by rpki-client